Pursuant to Regulation (EU) 2016/679, which establishes rules relating to the protection of natural persons with regard to the processing of personal data, CTM S.p.a. is required to provide you with the following information regarding the processing of your personal data. The data, in accordance with the principles set out in Article 5 of Regulation (EU) 2016/679, will be: processed in a lawful, correct and transparent mannerentity, processed for specific, explicit and legitimate purposes and in a manner compatible with those purposes, adequate, relevant and limited with respect to the purposes, accurate and up-to-date, kept for a period of time not exceeding the achievement of the purposes, and processed in such a way as to ensure adequate security, integrity and confidentiality through appropriate technical and organizational measures.
CTM S.p.a., as Data Controller, informs that in some areas where CTM vehicles stop, a video surveillance system is installed, in compliance with current legislation.
A summary notice, contained in special notice signs, is posted at each of the stop areas equipped with the video surveillance system.
Holder
The Data Controller is CTM S.p.a. based in Cagliari, Viale Trieste 159/3. At any time, you can contact the Data Controller through the following channels: e-mail/certified email: ctmspa@legalmail.it, fax 070 2091 222.
Data Protection Officer
CTM S.p.a. has appointed the Data Protection Officer (DPO) who can be contacted at the following address: rpd@ctmcagliari.it
Purpose and legal basis of processing
With the video surveillance system, your personal data will be processed exclusively for the purposes of security and protection of people, personnel and assets of CTM S.p.a. and, more specifically:
- prevent and repress criminal and vandalistic acts through a deterrent action that the presenceof cameras is able to exercise;
- encourage the identification of the same vandalism and criminal acts, if they occur in the areas controlled by the cameras, using the images that the system will be able to provide.
The legal basis of the processing is the pursuit of the legitimate interest of theremove.
Processing methods and data retention period.
The images taken are recorded on digital media and stored for a period not exceeding 24 hours and are accessible exclusively by CTM S.p.a., through personnel specifically authorised for processing, by the Judicial Authority and by the Police. Images are kept secure. Under no circumstances will CTM S.p.a. disseminate the images to the public.
Data Recipients or Categories of recipients.
The data collected and processed may be communicated exclusively for the purposes specified above to the following recipients: Judicial Authority, Law Enforcement.
Data Subject Rights
As a Data Subject, you may exercise, at any time, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR) in the manner indicated in the same articles, to which reference is expressly made.
For the exercise of the aforementioned rights, the data subject may contact the Data Controller using the contact details indicated above.