Pursuant to Regulation (EU) 2016/679, which establishes rules relating to the protection of natural persons with regard to the processing of personal data, CTM S.p.a. is required to provide you with the following information regarding the processing of your personal data. The data, in accordance with the principles set out in Article 5 of Regulation (EU) 2016/679, will be: processed in a lawful, correct and transparent mannerentity, processed for specific, explicit and legitimate purposes and in a manner compatible with those purposes, adequate, relevant and limited with respect to the purposes, accurate and up-to-date, kept for a period of time not exceeding the achievement of the purposes, and processed in such a way as to ensure adequate security, integrity and confidentiality through appropriate technical and organizational measures.
CTM S.p.a., as Data Controller, informs that a video surveillance system is installed on board its buses and trolleybuses, in compliance with the provisions of current legislation.
A summary notice, contained in special notice signs, is posted at each of the vehicles equipped with the video surveillance system.
The Data Controller is CTM S.p.a. based in Cagliari, Viale Trieste 159/3. At any time, you can contact the Data Controller through the following channels: e-mail/certified e-mail address: ctmspa@legalmail.it, fax 070 2091 222.
Data Protection Officer
CTM S.p.a. has appointed the Data Protection Officer (DPO) who can be contacted at the following address: rpd@ctmcagliari.it.
Purpose and legal basis of processing
With the video surveillance system, your personal data will be processed exclusively for the purposes of security and protection of people, personnel and assets of CTM and, more specifically for:
- prevent and repress illegal activities and crime committed on public transport;
- protect the personnel and assets of CTM S.p.a. and prevent any acts of vandalism or damage.
The legal prerequisite is the pursuit of the legitimate interest of the Data Controller, i.e. the purposes indicated above.
Processing methods and data retention period.
The images taken are recorded on digital media in encrypted form, kept secure and erased for overwriting after a period of 72 hours.
The images may only be used by the Police Forces upon request. The download, storage and extrapolation activities are entrusted to specifically authorised CTM S.p.a. employees. Suchtasks do not allow images to be displayed. Under no circumstances will CTM S.p.a. disseminate the images to the public. The aforementioned authorized CTM S.p.a. may view the images only jointly with the Law Enforcement Forces through the use of a double password system. It should be noted that for any event, the Law Enforcement Forces have access to the images and that CTM S.p.a.proceeds to the deletion of the images at the same time as the delivery to the Police.
Data Recipients or Categories of recipients.
The data collected and processed may be communicated exclusively for the purposes specified above to the following recipients: Judicial Authority, Law Enforcement.
Data Subject Rights
As a Data Subject, you may exercise, at any time, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR) in the manner indicated in the same articles, to which reference is expressly made.
For the exercise of the aforementioned rights, the data subject may contact the Data Controller using the contact details indicated above.