PRIVACY POLICY PURSUANT TO ART. 13 OF THE GENERAL DATA PROTECTION REGULATION NO. 2016/679 ON VIDEO SURVEILLANCE

Corso Italia S.r.l. with registered office in Milan (MI), Via San Paolo 7 VAT No. 11678740967 (hereinafter also referred to as the “Data Controller” or the “Company”), in compliance with the obligations set forth in Art. 13 of the General Data Protection Regulation No. 2016/679 (hereinafter “GDPR”) and the provisions of Article 3.1 of the General Provision on Video Surveillance, issued by the Italian Data Protection Authority on 8 April 2010 and published in Bulletin No. 99 of 29 April 2010 (hereinafter “Provision of 8 April 2010”), informs you that a video surveillance system is in operation on the premises of the Data Controller in accordance with applicable legislation and the aforementioned Provision. In this regard, the Data Controller invites you to carefully read this policy (hereinafter, “Policy”), as it contains important information on the protection of personal data and the security measures taken to ensure its confidentiality in full compliance with the GDPR. This Policy is provided to data subjects who access the Company’s premises subject to video surveillance.

1. DATA CONTROLLER
Corso Italia S.r.l. with registered office in Milan (MI), Via San Paolo 7, VAT no. 11678740967, which can be contacted at the following email address: corsoitaliasrl-mi@legalmail.it

2. PURPOSE OF THE PROCESSING
Your personal data and, specifically, recorded images, are collected and processed by the Data Controller for the following purposes:
2.1. Protection of company assets: prevention of theft, robbery, damage, assault and vandalism.
2.2. Security: protection and safety of individuals.

3. LEGAL BASIS FOR PROCESSING
With reference to the purposes referred to in points 2.1 and 2.2, the legal basis for the processing is Article 6(1)(f) of the GDPR, “legitimate interests pursued by the controller or by a third party”.

4. DATA RETENTION PERIOD
The data collected will be stored and processed by the Data Controller for the period necessary to achieve the purposes set out in this Policy and, in any case, for a period not exceeding 72 hours from the time of recording of the images, except where further retention is required to comply with specific requests from judicial authorities or law enforcement. At the end of this period, your data will be permanently deleted or anonymised.

5. DATA PROCESSORS AND DATA TRANSFER
The data may be shared with:
1) persons authorised by the Data Controller;
2) service providers, where necessary, formally appointed as data processors (e.g., video surveillance system providers, insurance companies);
3) individuals, entities or authorities to whom the disclosure of your personal data is mandatory under the law or orders of the competent authorities.
Your personal data will not be transferred outside the European Economic Area.

6. EXERCISE OF RIGHTS BY THE DATA SUBJECT
You have the right to exercise your rights under current legislation against the Company at any time. In this regard, you may exercise your rights by sending an email to: corsoitaliasrl-mi@legalmail.it. Please note that with regard to recorded images, the right to update, rectify or supplement the data cannot be exercised in practice, given the intrinsic nature of the data collected, as these are real-time images concerning an objective fact. In any case, you always have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority), pursuant to Article 77 of the GDPR, if you believe that the processing of your data is contrary to current legislation.

7. CHANGES
The Data Controller reserves the right to update this Policy at any time and to inform the data subjects through the most appropriate means. For any further information or questions, please contact the Data Controller at the following email address: corsoitaliasrl-mi@legalmail.it.