Pursuant to Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and further national and European legislation as applicable.

Dinema S.p.A., with registered office in Brescia (zip code 25124) at Via San Polo no. 183, VAT no. 00292820172, in the person of its legal representative pro tempore as the data controller (hereinafter referred to as “Data Controller”), informs you that the environment is monitored by video surveillance systems and that your personal data will be processed for the purposes and in the manner specified below.
We also inform you that the Data Protection Officer (DPO) appointed by the Controller can be reached by writing to the following e-mail address: dpo@lonatigroup.com

Purpose of processing. The Company informs that the filming and recording of images are exclusively for the purpose of protecting persons and company assets, in relation to possible assaults, thefts, robberies, damage and acts of vandalism.
Legal basis: Article 6(1)(f) of Regulation (EU) 2016/679, legitimate interest of the data controller in order to provide security protection for the company’s assets and to carry out crime prevention activities as well as to prevent harmful events.
The provision of data for the above-mentioned purposes is compulsory: for employees and visitors, in particular, access to the company will not be possible in the event of a refusal.

Type and origin of personal data collected. The data that will be processed are real-time images and video-recorded images. The collection of personal data by means of video surveillance systems is carried out by means of control equipment that complies with the current legal and contractual regulations and respects the principle of protecting the dignity and confidentiality of workers. The Data Controller undertakes to collect only the data strictly necessary to achieve the purposes pursued, recording only the indispensable images, limiting the angle of filming, avoiding, when not indispensable, detailed, enlarged images or irrelevant details, and establishing the location of the cameras accordingly.

Modalities of processing, retention periods and data protection. The Data Controller has identified in writing the persons authorised to access the premises where the control stations are located, to use the equipment and, in cases where it is indispensable for the purposes pursued, to view the images. Access to the video-recording files will take place exclusively on the basis of the need arising from the identification of a damaging event that has already occurred or is actually imminent , or arising from the need to comply with a specific request from the judicial authority or the judicial police in connection with an ongoing investigation. The list of authorised persons is kept on file with the Data Controller.
Images are recorded and retained for a limited time period related to the possible need to investigate unlawful acts and in any case are retained for a maximum of 120 hours, after which they are deleted, except further in the event of a specific investigative request by the judicial authorities or judicial police.
The recorded data are protected, by means of suitable and preventive security measures, against the risks of destruction or loss, even accidental, of the data themselves, unauthorised access or processing that is not permitted or does not conform to the purposes of the collection. The images will not be communicated to third parties, will not be transferred abroad and will not be disseminated, unless explicitly requested by the judicial or public security authorities.

Rights of the data subject. As a data subject, you may at any time exercise your rights pursuant to Articles 15 et seq. of Regulation (EU) 2016/679. In particular, you may ask the Data Controller for confirmation as to whether or not personal data concerning you exist, access to and rectification or erasure of the personal data or restriction of the processing concerning you or to object to their processing, as well as the right to data portability and the right to lodge a complaint with a supervisory authority. You may obtain information about the source of the personal data and, if applicable, whether the data originate from publicly accessible sources.

Brescia, October 2022