Notices

VIDEO SURVEILLANCE PRIVACY NOTICE

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 - General Data Protection Regulation (“GDPR”), the company Save The Duck S.p.A., in its capacity as controller (the “Data Controller” or “STD”), wishes to inform you that a video surveillance system is operating either in its registered office and headquarters located in Milan (Italy), Via Arcivescovo Calabiana no. 6, and in its stores located in the Italian territory. Summary notices, contained in special notice boards, are affixed at each of the areas monitored by cameras i.e., normally the areas of access to the STD’s registered office, stores, and warehouses. By way of integration to the said summary notices, data subjects are hereby informed that the video surveillance system is implemented exclusively for the purpose of protecting corporate assets from potential attacks, thefts, robberies, damages, acts of vandalism, and in any case from any action or event that may cause harm, either actual or potential, to human resources, visitors, and corporate tangible and intangible assets of STD. The legal basis of the processing is therefore based on the legitimate interest (art. 6, par.1, letter of the GDPR) of the Data Controller in safeguarding STD's personnel and assets. Images are recorded on digital media support for a period not exceeding 24 o 48 hours for stores, as provided for by the authorization issued by the competent Labour Inspectorate (“Ispettorato del Lavoro”) for each of STD’s stores, and for a period not exceeding 48 hours in the case of the Data Controller’s registered office and administrative headquarters, and stored with the support of stringent security measures, unless a longer retention period is necessary for special reasons, such as holidays, closure of offices or business, as well as in the event that offenses are committed against STD or a specific investigative request from the Judicial Authority or the Public Security Authority must be adhered to. Deletion may take place through automatic and irreversible overwriting techniques. The images are recorded and stored exclusively within the Data Controller’s video surveillance system and are not transmitted outside of it and within the limits set forth in the e authorization issued by the competent Labour Inspectorate (“Ispettorato del Lavoro”). Any monitors present at STD’s stores and registered office and administrative headquarters, used for the display of the images, shall be positioned and oriented so as to prevent their viewing by unauthorized persons. The images can be viewed, and the recordings can be extracted, for the sole purposes allowed by the law, by the selected and expressly authorized STD personnel. Outside working hours, live images may be viewed remotely by personnel of the company identified by the Data Controller as the supplier of the video surveillance service or by selected and expressly authorized STD personnel, unless the authorization issued by the competent Labour Inspectorate (“Ispettorato del Lavoro”) for the individual store excludes such modality of access. Without prejudice to the foregoing, any intervention by external maintenance staff involving access to the recorded memories shall be carried out under the strict surveillance of STD personnel. In the event of legal proceedings, the images may be made accessible to consultants of the Data Controller who are bound by an obligation of confidentiality. It is understood that, where provided for by the applicable authorization, employees shall be promptly informed on the occasion of each access to the recorded images. The video surveillance system is implemented in compliance with the provisions of Italian Law no. 300/1970 in terms of both authorization for its use and the general prohibition of continuous monitoring of work activities. The cameras do not film or record images of workers while they are at the workplace carrying out their duties. The cameras also do not record the areas used for breaks and refreshments. No audio recordings are made at the STD stores in Venice and in Milan (Via Solferino n.12), in accordance with the relevant authorisation issued by each competent Labour Inspectorate (“Ispettorato del Lavoro”). The Data Controller is Save The Duck S.p.A., with registered office in Milan (Italy), Via Arcivescovo Calabiana no. 6, tax code and VAT number 07853840960. To request information on the processing of your personal data or to exercise the rights on your personal data, please contact the Data Controller or the Corporate Privacy Contact by sending the relevant requests to the following e-mail address privacysavetheduck@savetheduck.com or to the DPO (Data Protection Officer) by writing to dpo@savetheduck.com. The data subject has the right to ask the Data Controller the access to his/her personal data, their cancellation, the limitation of the processing or to oppose the processing of the said data under the conditions established by Articles 15, 16, 17, 18 and 21 of the GDPR. Lastly, the data subject has the right to lodge a complaint with a Data Protection Authority if he believes that the processing of its personal data violates the data protection legislation.