Video surveillance privacy information

INFORMATION ON THE PROCESSING OF PERSONAL DATA processed through VIDEO SURVEILLANCE SYSTEM

made pursuant to art. 13 of EU Reg. 2016/679 (GDPR) and art. 3.1 of the Provision of 8.4.2010 on video surveillance of the Authority for the protection of personal data - EDPB Guidelines 3/2019 on the processing of personal data through video devices Version 2.0 Adopted on 01/29/2020.

The Data Controller has installed a Video Surveillance system inside and outside the company in compliance with the regulations on the protection of personal data and the Workers' Statute.

In the video-surveillance area there are signs that warn of the presence of the system, positioned in such a way as to inform the interested party before being filmed.

Data Controller

The Data Controller is Ahmadi Crazy Machines Emporium srl, with registered office in Corso Umberto I, 207, 62012 Civitanova Marche, MC, VAT number and Tax Code 02014950436.

Contact details:

telephone 0733 470005, PEC acmetoys@pec.it.

Data Protection Officer (DPO)

ACME srl

Corso Umberto I, 207

62012 Civitanova Marche, MC

VAT 02014950436

Data processed and Purpose of processing

The personal data processed are images of people who are within the range of the cameras. These images are processed exclusively to protect company assets, constituting a means of prevention against the commission of illegal acts and, possibly, a means of assisting the Police and/or Judicial Authorities in identifying those responsible for such acts.

Images of workers may not, under any circumstances, be used to contest disciplinary charges.

Legal basis for processing

Pursuant to Article 6, paragraph 1, letter f) of the GDPR, the legal basis of the processing is constituted by the legitimate interest of the Data Controller aimed at pursuing the purposes set out above.

Data Processing Methods and Data Retention Period

The processing takes place using electronic tools.

The data is stored on computer media for 10 days or for the longer time strictly necessary as a result of holidays and company closures; at the end of the storage period the images will be automatically deleted from the system.

Mandatory/optional nature of data provision

Signs indicating the presence of the cameras have been posted before their range of action: you can decide not to enter the range of the cameras, but, if you do enter, the provision of data (i.e. your image captured by the cameras) is mandatory.

Data communication

The data may be processed by internal personnel duly trained and instructed (authorized to process pursuant to art. 29 of the GDPR or art. 2 quaterdecies of Legislative Decree 101/2018) as well as by third parties, appointed as Data Processors pursuant to art. 28 of the GDPR or System Administrators pursuant to the provision of the Guarantor of 27.11.2008.

The data may be communicated externally only upon request of the Judicial Authority and/or the Police.

Data Transfer

The management and storage of personal data will take place on servers of the Data Controller and/or third parties duly appointed as Data Processors, located within the European Union. The Data Controller, if necessary, will have the right to move the location of the servers to non-EU countries, ensuring from now that the transfer of data outside the EU will take place in compliance with articles 44 et seq. of the Regulation and the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection. In particular, it will have to ensure that adequate technical and organizational measures are prepared so that the processing meets the requirements of the Privacy Code and the GDPR, that the protection of the rights of interested third parties is ensured, that data transfers can be traced and that appropriate security measures can be documented.

Rights of the interested party

At any time you may exercise your rights towards the Data Controller, pursuant to articles 15-22 GDPR (including access, rectification, cancellation, limitation, opposition), where this does not conflict with the law and is technically possible, by sending an email to giocheria@acmetoys.it or a written communication to the headquarters of the data controller. The interested party has the right to write to the data protection officer, and it will always be possible to lodge a complaint with the supervisory authority.

Changes to this Policy

This Policy may be subject to changes without notice. The Data Controller undertakes to make the most updated version available to the interested party. It is therefore advisable to

check it regularly.

Last revision 06/19/2024