Privacy – Access control video

Pursuant to Regulation (EU) 2016/679 (GDPR), which establishes rules relating to the protection of natural persons with regard to the processing of personal data, CTM S.p.a. is required to provide the following information regarding the processing of personal data. The data, according to the principles set out in Article 5 of Regulation (EU) 2016/679, will be: processed in a lawful, correct and transparent mannerdata, processed for specified, explicit and legitimate purposes and in a manner compatible with such purposes, adequate, relevant and limited with respect to the purposes, accurate and up-to-date, kept for a period of time not exceeding the achievement of the purposes, and processed in such a way as to ensure adequate security, integrity and confidentiality through appropriate technical and organizational measures.
S.p.a., as Data Controller, informs that a video surveillance system is installed at its offices, in compliance with the indications provided by current legislation. A summary notice, contained in special notice signs, is posted at each of the areas guarded by cameras.

the Data Controller is CTM S.p.a. with registered office in Cagliari, Viale Trieste 159/3. At any time, you can contact the Data Controller through the following channels: certified email address: ctmspa@legalmail.it, telephone 070 20911.

The Data Controller, in compliance with the provisions of art. 37 GDPR, has appointed the Data Protection Officer (DPO). DPO contact details: rpd@ctmcagliari.it.

With the video surveillance system, your personal data will be processed exclusively for the purpose of protecting the people, personnel and assets of CTM S.p.a. and, more specifically, to: prevent and repress criminal and vandalistic acts through a deterrent action that the presence of cameras is able to exercise; promote the identification ofthe same vandalism and criminal acts, if they occur in the areas controlled by the cameras, using the information that the system will be able to provide.
The legal prerequisite is the pursuit of the legitimate interest of the Data Controller, i.e. the purposes indicated above.

The images taken are recorded on digital media and stored for a period not exceeding 72 hours and can also be used by the Judicial Authority and Law Enforcement, except for images proving crimes that are kept for the period strictly necessary to contest the crimes themselves and define any litigation. Images are safesaid in safety and, in addition to the aforementioned hypotheses, are only accessible to selected employees and specifically authorised to process them for exclusive reasons of protection of people, personnel and company assets. Under no circumstances will CTM S.p.a. disseminate the images to the public.

The data collected and processed may be disclosed exclusively for the purposes specified above to the following recipients: Judicial Authorities, Law Enforcement or Legal/Consultants for specific services. The data may be processed by companies that CTM S.p.a. may use for the performance of services listed in this information, appointed Responspersons who provide assistance and maintenance to the IT system of CTM S.p.a. (appointed Data Processors) may occasionally access the data for exclusive technical reasons. The identity of the external parties providing the services indicated above may be requested at any time from the Data Controller.

As a Data Subject, you may exercise, at any time, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR) in the manner indicated in the same articles, to which reference is expressly made. For the exercise of the aforementioned rights, the data subject may contact the Data Controller using the contact details indicated above.