Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
DATA CONTROLLER
Dolce & Gabbana S.r.l.
Via Goldoni, 10 – Milan (MI)
Telephone number: +39 02 77427603
E-mail address privacy@dolcegabbana.it
(“Company”).
DATA PROTECTION OFFICER (DPO)
E-mail address dpo@dolcegabbana.it
Address: Via Goldoni, 10 – Milan (MI)
CATEGORIES OF PROCESSED PERSONAL DATA
Common Data such as, in particular, your image taken by the cameras and the personal data obtained from it.
PURPOSES OF PROCESSING
Management of video surveillance activities, to ensure the security of company assets and protect people and property from possible assaults, accidents at work, theft, robbery, damage or acts of vandalism.
If necessary, to ascertain, exercise or defend the Data Controller’s rights in court.
LEGAL BASIS OF PROCESSING
Legitimate interest of the Data Controller to pursue said purpose.
DATA RETENTION PERIOD
7 days from the video recording.
For Jewellery and Fine Jewellery Workshops and Offices, videos will be retained for 30 days from the time they are recorded, in view of the particular level of risk of the activity carried out derived from the value of the assets on the premises.
For the full duration of the complaint and/or judicial or out-of-court proceedings, until the final term within which action to protect rights in question or appeal may be filed.
Once the above-mentioned retention periods have expired, data will be destroyed, erased or anonymised, in accordance with the technical procedures for erasure and backup.
PROVISION OF DATA
Mandatory: refusal to provide data will make it impossible to grant the data subject access to the Data Controller’s premises. Access to areas under video surveillance requires the collection, recording, storage and general use of the images of the data subjects.
CATEGORIES OF DATA RECIPIENTS
Data may be communicated to entities acting as data controllers, such as supervisory and control authorities and any public entity entitled to request data, i.e., judicial or public security authorities.
In addition, data may be processed on the Company’s behalf by parties designated as data processors, such as companies that manage control and surveillance services or businesses that provide video surveillance system maintenance services.
PERSONS AUTHORISED TO PROCESS DATA
Data may be processed by employees of the corporate functions tasked with pursuing the above-mentioned purposes, who have been expressly authorised to process data and have received appropriate operating instructions.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
Data will not be transferred outside the European Union.
RIGHTS OF THE DATA SUBJECT – COMPLAINING TO THE SUPERVISORY AUTHORITY
By contacting the Human Resources and Organisation Department by e-mail at privacy.@dolcegabbana.it and privacy.hr@dolcegabbana.it, data subjects may ask the Data Controller for access to their data, the erasure thereof, restriction of processing, or object to their processing, on grounds relating to their particular situation in cases of legitimate interest of the Data Controller.
With regard to videos, the right to update, rectify or integrate data, as well as the right to rectification under Article 16 of the GDPR cannot be exercised in practice in view of the intrinsic nature of the data (images recorded in real time concerning a fact).
Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work or in the State where the alleged breach occurred.