Dear Sir/Madam,
We process information about you, your personal data, for the purposes indicated below. As required by European personal data protection legislation (EU Regulation 679/2016), we are providing you with the following information for this purpose.
1. Data Controller and Data Protection Officer.
The Data Controller, i.e., the party responsible for decisions regarding the purposes, methods and security of personal data, is the company Pisa 1940 S.r.l. with headquarters in Milan, via Montenapoleone no. 9, 20121 Milan, tel. 02762081, e-mail compliance@pisa1940.com.
The Data Protection Officer (DPO) can be reached either using the contact details of the data controller or at the e-mail address dpo@pisa1940.com.
2. Purpose and legal bases of processing.
The personal data you provide, which will be collected in the course of providing the services you request, will be processed for the purposes set out below, according to the following legal bases:
|
Purpose
(Why we process your data)
|
Legal basis
(The legal provision under which the data are processed)
|
Consequences of refusing to provide consent to processing
(What happens if you refuse to provide personal data and/or give consent to processing)
|
|
Protection of corporate assets and people working in the company's offices; collection of evidence to protect the company's rights in the event of misconduct
|
Art. 6, Letter f) GDPR - legitimate interest of the Company in protecting people and property.
|
Consent is not required.
|
3. Recipients and categories of data processed.
The personal data you provide or acquired in the course of providing services will be processed only by personnel authorized for this purpose or by data processors designated for this purpose.
Your data may be disclosed only to law enforcement agencies or other legitimate parties who request it.
4. Transfer abroad
Your personal data are not transferred outside the European Union.
5. Personal data retention period and criteria used
Unless otherwise required by law (e.g., in case of investigation), the video recordings are retained for 30 days, as authorized by the National Labor Inspectorate of Milan on 21/08/2025.
6. Rights of data subjects
In the cases provided for, data subjects have the right to obtain from Pisa 1940 S.r.l. access to their personal data and the rectification or erasure thereof or the restriction of processing concerning them or to object to processing (Arts. 15 et seq. of the Regulation). The appropriate application to the Data Controller shall be submitted at the contact details indicated above.
7. Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them carried out through video surveillance is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority, as provided for in Art. 77 of the Regulation, or the right to an effective judicial remedy (Art. 79 of the Regulation).
8. Collaboration
The protection of your data and compliance with the principles laid down in the regulations, with particular reference to the principle of transparency, are of utmost importance to us. We would be grateful if you would help us by pointing out any misunderstandings of this document or suggesting improvements using the contact details of the Data Controller indicated above.
Whatsapp
Find a boutique
Subscribe to our newsletter
