Pursuant to Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and the Federal Data Protection Act of 30 June 2017 (implementing the GDPR)
DATA CONTROLLER
Dolce & Gabbana S.r.l. – Germany GmbH
Maximilianstrasse, 11-15, 80539 Munich, Germany
E-mail address privacy.hr@dolcegabbana.it
(“Company”).
DATA PROTECTION OFFICER (DPO)
You can contact the DPO using this email: dpo@dolcegabbana.it
CATEGORIES OF PROCESSED PERSONAL DATA
Common data such as your image taken by the cameras and the personal data that can be obtained from it.
PURPOSES OF PROCESSING
Management of video surveillance activities to ensure the security of company assets as well as people and property against possible assaults, work accidents, theft, robbery, damage and vandalism.
If necessary, to ascertain, exercise or defend the Data Controller’s rights in court.
LEGAL BASIS OF PROCESSING
Data Controller legitimate interest in pursuing this purpose.
DATA RETENTION PERIOD
72 hours from the time the images were recorded.
For the entire duration of the complaint and/or out-of-court and/or court proceedings, until the expiry of the time limits for seeking judicial protection and/or appeals.
After the above retention periods have elapsed, the data will be destroyed, deleted, or anonymized, consistent with the technical procedures for deletion and backup.
PROVISION OF DATA
Mandatory: refusal to provide data means that it is impossible to allow the data subject access as a visitor to the owner’s premises. Access to video surveillance areas involves the collection, recording, storage and, in general, use of images of data subjects.
CATEGORIES OF DATA RECIPIENTS
The data may be disclosed to parties acting as data controllers, such as supervisory and control authorities and any public entity entitled to request the data, such as judicial or Public Security authorities.
In addition, the data may be processed on behalf of the Company by parties designated as data processors, such as companies involved in control and surveillance services; companies involved in video surveillance system maintenance services.
SUBJECTS AUTHORIZED TO PROCESS
The data may be processed by employees of the company functions assigned to the pursuit of the above purposes, who have been expressly authorized to process the data and have received appropriate operational instructions.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
Data will not be transferred outside the European Union.
RIGHTS OF THE DATA SUBJECT – COMPLAINING TO THE SUPERVISORY AUTHORITY
By contacting the Human Resources and Organization Department by e-mail at privacy.hr@dolcegabbana.it, data subjects may request from the data controller access to their data, their deletion, restriction of processing, as well as opposition to processing, for reasons related to their particular situation, in cases of legitimate interest of the data controller.
With regard to recorded images, the right to update, rectify or supplement, as well as the right to rectification under Article 16 of the GDPR cannot be exercised in practice in view of the intrinsic nature of the data (images collected in real time concerning an objective fact).
Data subjects have the right to lodge a complaint with the competent supervisory authority in the member state where they usually reside or work or the state where the alleged violation occurred.