Information - Video Surveillance

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA – VIDEO SURVEILLANCE

Art. 13 EU Regulation 2016/679

With regard to the processing of personal data provided, please be informed that:

1. Data Controller

The Data Controller is PH Hotel Srl, with registered office in Bolzano, via Monte Tondo no. 4, email info@phhotel.it, certified email (PEC) ph-hotel-poh@pec.it (hereinafter referred to as “the Company”).

2. Type of Data Processed, Purpose and Legal Basis of the Processing

The following personal data are collected and processed: common personal data (images recorded by the video surveillance systems – CCTV) referring to employees, customers, and third parties for the following purposes: to safeguard the integrity of the company’s assets.

The legal basis for the processing is therefore the legitimate interest of the Data Controller.

3. Disclosure of Data to Thrid Parties - Data Recipients

The Company may disclose the data processed for the above purposes to:

1. parties and system administrators appointed to process data collected through video surveillance systems;
2. companies responsible for managing or maintaining the surveillance systems;
3. law enforcement authorities;
4. consultants in the event of disputes.

4. Transfer of Data to Third Countries

The data processed are not transferred by the Data Controller to third countries. However, in the event of such transfers, they will be carried out in compliance with the legislation in force concerning data transfers to third countries pursuant to Articles 44 et seq. of the GDPR 2016/679.

5. Processing Methods, Retention Period and Criteria

Data will be processed in digital format. Images are stored for 48 hours, unless retained for the protection of rights or other legal reasons (in which case, they are kept for the time necessary to fulfill the purpose for which they were retained and, thereafter, for the additional statutory limitation period for legal defense (10 years from the last use and/or interruption event of the limitation period)).

6. Provision of Data

The provision of data is mandatory and automatic in light of the legitimate interest of the Data Controller.

7. Data Subject’s Rights, Withdrawal of Consent, and Complaint to the Supervisory Authority

Pursuant to Articles 15-22 of EU Regulation 679/2016, the data subject has the right at any time to request access to their personal data, rectification, erasure, restriction of processing, object to the processing, and exercise the right to data portability.

The data subject also has the right to withdraw consent to data processing at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

In case of a suspected violation, the data subject, where applicable, also has the right to lodge a complaint with a supervisory authority in the EU member state where they habitually reside, work, or where the alleged violation occurred.

8. Profiling and Automated Decision-Making

The processing is not carried out by means of automated decision-making processes (e.g., profiling).

9. Contacts and Requests

To obtain further information on the processing of personal data, object to the processing, or exercise the rights under current data protection regulations (access, rectification, erasure, restriction, objection, portability) and/or to obtain the complete list of internal and external parties appointed for processing and/or to receive information on the transfer of data to non-EU countries and related safeguards, including data transfer mechanisms and protections under Articles 44 et seq. of the GDPR, a request may be sent to the following email address: privacy@phhotel.it.