VIDEO SURVEILLANCE POLICY

IN ACCORDANCE WITH ART. 13 EU REGULATION 2016/679

Please be informed that in order to protect our company and its assets and people, we have installed a number of video cameras at the entrances and exits of the building and warehouse in Origgio (VA), Via Saronnino n. 72.

The Data Controller is Spasciani S.p.A. – VAT N. 00695840157 – with head office in Milan, Piazza Castello n. 9, in the person of its pro tempore legal representative, Tel. +39 02 96 95 1801, Fax +39, email info@spasciani.it

The plants are operational 24/7.

Signs informing the public about the use of video cameras are displayed nearby, as prescribed by the law.

Personal data will be processed with respect for the basic rights, freedoms, and dignity of the interested parties, in particular their privacy, identity and personal data processing.

Data processing is carried out using electronic procedures and may be viewed only by the Data Controller.

Collected data are stored for maximum 36 hours (3 days) and automatically deleted and are not diffused, exchanged or transmitted to third parties, unless a crime to the detriment of the company is committed, in which case, images will be made available to the competent authorities.

The purposes of the processing are protecting the company and the safety of its assets and people.

The legal basis of the personal data processing is the legitimate interest of the Data Controller to protect its company, assets and people.

Within the meaning of EU Regulation 2016/679, as Data Subject you have the right:

to obtain confirmation as to whether or not personal data concerning you exist, regardless of their being already recorded, and communication of such data and their origin in intelligible form, and be informed of the purposes and methods of processing and the logic applied to any electronic processing;

to obtain the erasure, anonymization or blocking of data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

to obtain the update, correction or integration of your data;

to object, in whole or in part on legitimate grounds, to the processing of your personal data, even though it is relevant to the purpose of the collection.

to obtain from the Data Controller – when the legal Basis is a contract or consent and data are processed using automated methods – your personal data in a structured format readable by an automated device, when technically feasible, including for the purpose of providing said data to another Data Controller (data portability right);

to revoke your consent at any time, in the cases in which processing is based on your consent for one or more specific purposes and involves common personal data (e.g. date and place of birth or residence), or specific categories of data (e.g. data that reveal race, political opinions, religious beliefs, health or sexual orientation). Data processing carried out before data subjects revoke their consent are not affected;

to complain to a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

Origgio, 08.01.2019

Spasciani S.p.A.

The legal representative