(in accordance with Article 13 of the Regulation 2016/679/UE) 

Controller
The controller of the processing is CDLAN S.r.l. – via Caldera 21 Milano.
The Data Protection Officer can be contacted at the following e-mail address: rpd@cdlan.it

Purpose and legal basis of the processing
The video surveillance system is installed for security purposes and to protect the company’s assets.
The cameras are installed in the vicinity of the relevant signs.
The processing is carried out for the legitimate interest of the controller (Article 6, paragraph 1, letter f of GDPR) in accordance with the provision of the Italian Supervisory Authority (“Garante per la protezione dei dati personali”) and of the EDPB Guidelines on this matter.

Communication to third parties
Live and recorded images taken by the video surveillance system can be viewed in real time or deferred by specifically authorised personnel of Cdlan.
These images may also be consulted by the police and judicial authorities.

Data retention
The images are retained for 7 days, after which they are automatically deleted.

Rights of the data subjects
The data subject has the right to ask the Controller to have access to his/her personal data, the rectification or the erasure of the personal data and the restriction of processing.
He/She also has the right to object to processing of his/her personal data and the right to data portability. The rights can be exercised by contacting the Data Protection Officer at the following address rpd@cdlan.it
The data subject has, finally, the right to lodge a complaint to the Supervisory Authority. In Italy the Supervisory Authority is the “Garante per la protezione dei dati personali”.