INFORMATION ON THE VIDEOSURVEILLANCE SYSTEM

pursuant to Article 13 of Regulation (EU) 2016/679 (“Regulation”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data as well as under applicable Italian laws in force.
 

Società per azioni Esercizi Aeroportuali S.E.A., a limited liability company having its registered office in Segrate (Milan) at Milano-Linate Airport (the “Company”), within the management of the Milano-Linate and Milano-Malpensa airports (the “Service”), processes, in its quality of data controller, the images concerning the data subjects recorded through the video-surveillance systems (“Personal Data” or “Images”) located within the areas managed by the Company, indicated by appropriate signage.

1.    Purposes and legal ground for processing 
The Personal Data shall be acquired and processed in compliance with the rules set in the Regulation and under the applicable Italian laws for security purposes as well as protecting the Company, including but not limited to the protection of the Company’s assets.
In the light of the above-mentioned purposes, the legal grounds for processing these Personal Data are, respectively, the relevant binding legal provisions in force and the Company’s legitimate interest in its own protection, in particular but not limited in the protection of its own assets, interest which is adequately balanced with the data subjects’ interest since the processing of the Personal Data is carried out within the limits necessary to aim at the mentioned purposes.

2.    Mandatory or Optional nature of the provision of Personal Data 
The provision of your Personal Data is mandatory for entering any area managed by the Company.
The Company cannot guarantee the access to the above-mentioned areas in case of lack of the provision of these Personal Data.

3.    Communication and disclosure of personal data for the pursuit of the primary purposes for processing 
The Personal Data shall be communicated only for the pursuit of the above-mentioned purposes and only to any person nominated and authorized for the processing of the Personal Data (i.e. the Company’ employees/collaborators/consultants), as well as third companies collaborating with the Company for the pursuit of the purposes and specifically authorized and nominated by the Company itself. The updated list of the data processors is available at the Company’s registered office. 
Moreover, the direct access to the videosurveillance systems managed by the Company can be granted to the Government Entities, including but not limited to the airport police, acting as autonomous controllers for its own institutional purposes. 
The Personal Data shall be also communicated to third subjects in any case this communication is mandatory under legal provisions in force, including any purpose of prevention/punishment of illicit activities.
In no case, the Personal Data shall be disclose to the public or to an indetermined number of persons.

4.    Transfer of personal data to Countries outside of the European Union
The Personal Data are not transferred to companies or entities outside the territory of the European Union.

5.    Data Retention
The Images recorded shall be stored for a period not longer than 7 (seven) days starting from their collection, excluding those cases for which a longer period is required (i) by laws, regulations or the relevant Authorities’ resolutions, and/or (ii) in particular cases, in order to achieve the Company’s legitimate interests (such as, for instance, the Company’s protection or the Company’s assets protection) or any other reason provided under laws in force. In any case, the Images shall be examined only in case of necessity by persons duly authorized and instructed, in compliance with the relevant applicable law in force time after time.

6.    Data Protection Officer
The following email address: privacy@seamilano.eu is available for contacting the Data Protection Officer, even for exercising the data subjects’ rights provided under sections from 15 to 22 of the Regulation indicated under following section 7.

7.    Data subjects’ rights
With reference to your own personal data, in your quality of data subject, you can:
•    access and require copies;
•    require any correction;
•    require the cancellation;
•    obtain the limitation of the processing;
•    deny the processing;
•    obtain through a structured format of common use and readable from an automatic device and transfer without any limit these data to another data controller, when technically possible and applicable.  

Any data subject can exercise its own rights in relation to the personal data processing by means of the following email address: privacy@seamilano.eu