Information on the processing of personal data video surveillance - second level
INFORMATION ON THE PROCESSING OF PERSONAL DATA VIDEO SURVEILLANCE – SECOND LEVEL
Dear
with this document, drawn up pursuant to Article 13 of EU Regulation no. 679/2016 (hereinafter also the "Regulation") Fincantieri S.p.A. informs you of the following.
1. Personal data controller
The data controller of your personal data is Fincantieri S.p.A. (hereinafter also only the "Data Controller" or the "Company"), with registered office in Trieste, Via Genova 1, P. Iva 00629440322, e-mail privacy@fincantieri.it, tel. +39 040 3193111, Fax +39 040 3192305.
The Data Protection Officer ("DPO") of Fincantieri S.p.A. can be contacted at the following e-mail address: privacy@fincantieri.it
2. Purpose and legal basis of the processing of personal data
Due to your access to the areas of Fincantieri S.p.A. (whether offices, plants, shipyards, quays, etc.), your personal data will be processed through the recording of images and sounds in the manner and terms referred to in paragraph 3 below, with the support of IT means, for the purposes of security of personnel, third parties and protection of company assets. The processing is carried out taking into account the legitimate interest of the Data Controller aimed at anticipating any events that may negatively compromise the company's assets or the safety of the people present in the offices or plants.
For this purpose, the basis of which is identified as legitimate interest, the Data Controller has conducted, in accordance with the regulatory provisions, an analysis of the balancing of interests carried out between its legitimate interest and the fundamental rights and freedoms of the data subject.
It should be noted that your data will be processed within the Company by personnel duly appointed and instructed by the Data Controller himself.
3. Video surveillance areas
We inform you that there are video surveillance systems for the purposes referred to in paragraph 2 above, by way of example, in the reception areas, in the perimeter areas, in the access areas to the premises owned by Fincantieri S.p.A.; you will also find a simplified information model, prepared in compliance with the general requirements of the Guarantor for the protection of personal data (sign with camera image), the EDPB Guidelines 3/2019 on the processing of personal data through video devices and placed nearby and visible before entering the range of action of the various cameras.
4. Recipients of personal data
Your personal data will not be disseminated or communicated to third parties, except for any communication to judicial police bodies or the judiciary at the express request of the same or in the event of any need to defend the interests of the Data Controller. Your personal data may also be communicated to the Data Controller's suppliers (e.g. law firms). Finally, they may be communicated to persons entitled to access them by virtue of legal provisions, regulations, EU legislation.
5. Transfer of personal data to a third country or an international organisation
The Data Controller does not transfer your personal data to countries outside the European Union.
6. Retention period of personal data
The recorded images will be kept for a maximum of 7 days from their collection, without prejudice to the possibility of holding them: (i) in the event of holidays or non-working days, until the resumption of work activities, (ii) for a longer period than that indicated only in the event of offences and/or investigations by the judicial or police Authorities are underway.
7. Rights of the data subject
We inform you that as a data subject you have the right to obtain from the Data Controller:
Right of access: (art. 15 of the Regulation) | or confirm whether or not personal data concerning you are being processed and, if so, the right to obtain, inter alia, access to your personal data and information regarding the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be disclosed. |
Right to rectification: (art. 16 of the Regulation) | (i) rectification of inaccurate personal data concerning you without undue delay and (ii) completion of your personal data, if incomplete. |
Right to erasure ('right to be forgotten'): (art. 17 of the Regulation) | deletion of personal data concerning you without undue delay. |
Right to restriction of processing: (art. 18 of the Regulation) | limitation of processing in the cases referred to in Article 18 of the Regulation. |
Right to data portability: (art. 20 of the Regulation) | receipt in a structured, commonly used and machine-readable format of the personal data concerning you and in our possession; the right to transmit such data to another data controller without hindrance from the data controller to whom they have been provided in the cases referred to in Article 20 of the Regulation. |
Right to object to processing carried out pursuant to Article 6(1)(e) or (f): (art. 21 of the Regulation) | object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of these provisions. |
You may exercise the above rights at any time by sending a request to the following e-mail address: privacy@fincantieri.it
You also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing of your personal data violates the provisions of EU Regulation no. 679/2016.
8. Nature of the provision of data and consequence in the event of failure to provide the same
The processing of your personal data for the purposes referred to in paragraph 2 above is based on the legitimate interest of the Data Controller; failure to provide your data for this purpose may therefore make it impossible for you to access the Company areas controlled by the Data Controller.
Trieste, 22 October 2025