The company under the name “PBM S.R.L.”, having its registered seat at Via Barella, 1310, 41058 Vignola, Modena, Italy, telephone +39 059 770 5311, email firstname.lastname@example.org (hereinafter the “Company”) is the Data Controller of your personal data, pursuant to EU General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and applicable Italian legislation on the protection of personal data (in particular, Legislative Decree 196/2003 "Privacy Code", as novated by Legislative Decree 101/2018). This Privacy Notice is provided in order to inform you on the image and video data collected via CCTV monitoring.
Personal data we process
The personal data collected via CCTV monitoring is image and video data of employees, partners and third persons that visit the premises of our Company.
Purposes and legal basis of processing
The company uses the CCTV Monitoring System for the protection of people and assets in its premises and the support of any legal claims. The processing is necessary in the context of the legitimate interest of our Company that act as a Data Controller (article 6(1) (f) GDPR).
Analysis of legitimate interest
Our legitimate interest relies on the necessity to ensure the safety and security of our premises and our assets from illegal actions, such as thefts, as well as to ensure the physical integrity, health and safety of our employees, partners and third parties. Moreover, we process the abovementioned personal data for the effective management of any incidents and to provide relevant evidence to support any legal claims. We collect image and video data pursuant to the guidelines of the supervisory authorities and consequently, we do not monitor areas where your privacy would be excessively violated.
Recipients of your personal data
The CCTV footage is accessible by an external vendor, offering us security services for the purposes described above. We may transfer the CCTV footage in the following cases: a) to competent judicial and law enforcement authorities when the footage provides evidence that is necessary for the investigation of an illegal action, that affects people or assets related the data controller, b) to competent judicial and law enforcement authorities when they submit a request for data within the context of the exercise of their duties and c) to the victim or the perpetrator of an illegal action, when data may constitute evidence of proof