Versione italiana

art. 13 Regulation (EU) 2016/679 - General Data Protection Regulation

This information notice is provided pursuant to art. 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter GDPR), in relation to the personal data that the University of Padua (hereinafter University), as the data controller, acquires through the video surveillance systems operating at the University's premises, in accordance with its Video Surveillance Regulations.

The processing of personal data is based on the principles of fairness, lawfulness, transparency, and the protection of confidentiality and all the rights of the data subjects, as specified in the following information.

1. Identity and Contact Details of the Data Controller

The data controller is the University of Padua, legally represented by the Rector pro tempore, with its registered office at via VIII Febbraio no. 2, Padova - 35122.
To exercise their rights, the data subject can contact the data controller by writing to the address above or by sending an email to the certified email address amministrazione.centrale@pec.unipd.it or to the email address urp@unipd.it.

2. Contact Details of the Data Protection Officer

The Data Protection Officer has been appointed by the Data Controller in accordance with art. 37 of Regulation (EU) 2016/679.
The Data Protection Officer can be contacted at the following email address: privacy@unipd.it.

3. Sources and Types of Data

Within the scope of this information notice, the data subject is any natural person whose personal data are processed upon accessing the video-surveilled area.
The personal data that may be processed exclusively for the purposes indicated in point 4 are images captured by the cameras located at the University premises, which may be viewed in real-time or recorded.
Access to the video-surveilled areas entails the collection, recording, storage, and deletion of the images of the data subjects.

4. Purposes of Data Processing

The University processes personal data in the execution of video surveillance activities at its facilities. Specifically, the processing is carried out for the following purposes:

• Ensuring the safety and security of university staff, students, and visitors to university spaces;
• Protecting the University's movable and immovable property;
• Monitoring and controlling access to areas not open to the public and reserved for personnel authorised by the University;
• Preventing the commission of any unlawful acts against the University.

5. Methods of Data Processing

Your data will be processed through a video surveillance system, which allows real-time viewing ("live") as well as recording of the images.
The video surveillance system operates 24 hours a day, 7 days a week.
The viewing and management of the images captured by the video surveillance system are reserved for the Data Controller and individuals formally appointed by them. The data are stored using security measures appropriate to prevent access by unauthorised personnel and to ensure their confidentiality and integrity.
The University does not employ automated decision-making processes relating to the rights of the data subject based on personal data, including profiling, in accordance with the safeguards provided by art. 22 of the EU Regulation.

6. Data Retention

The data are retained for a period not exceeding twenty-four hours after their capture, after which they are automatically deleted. Exceptions are made for special needs for further retention in relation to public holidays or the closure of university premises, as well as in the case of specific investigative requests from judicial authorities or law enforcement agencies.
During scheduled closures of the University, recordings may be retained for security reasons for the entire closure period.
In the event of capturing images or incidents related to suspected criminal activities or events relevant to public safety, environmental protection, or the safeguarding of public property, the Data Controller will promptly notify the competent authority and ensure the preservation of the images.

7. Simplified Information Notice

The video-surveilled areas are marked with appropriate signs, clearly visible under all ambient lighting conditions, which also mention the purposes pursued. These signs are placed before the cameras' range of action, also in their immediate vicinity, and not necessarily in direct contact with the equipment (attachments A and B).

8. Legal Basis of Processing and Nature of Provision

The processing of personal data for the aforementioned purposes is carried out by the Data Controller based on the pursuit of a legitimate interest pursuant to Article 6, paragraph 1, letter f), of the EU Regulation 2016/679.

9. Recipients of the Data

The recipients of the data are the natural persons appointed by the University for data processing, including employees and independent collaborators of the University of Padua and affiliated entities.

Third Parties

Personal data may, in any case, be communicated to third parties in relation to compliance with legal and contractual obligations, specific requests from the data subject, the management of any complaints or disputes, and for the prevention and repression of fraud and any unlawful activities.
For the purposes indicated in point 4, personal data may be communicated to third parties, including judicial and public safety authorities.

10. Rights of the Data Subject

The data subject may exercise the rights provided for by Articles 15 and following of the EU Regulation, such as the right of access, the right to rectification or integration of their data, the right to erasure (right to be forgotten), and the right to restriction of processing, as well as the right to data portability, under the conditions and within the limits indicated by the EU Regulation.
The request for deletion of personal data cannot be granted to the extent that the processing is necessary for compliance with a legal obligation, for the execution of institutional tasks, for the establishment, exercise, or defence of a legal claim, and in any other case provided for by Article 17, paragraph 3, of the EU Regulation.
The data subject has the right to object at any time to the processing of their personal data, as provided for by Article 21 of the EU Regulation.
The data subject may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

11. Methods of Exercising Rights

To exercise their rights, the data subject can contact the Data Controller by sending an email to the certified email address amministrazione.centrale@pec.unipd.itor to the email address urp@unipd.it. Alternatively, the data subject can write to the University of Padua, via VIII Febbraio no. 2, Padova.

12. Any Changes to the Information Notice

The University may amend or supplement this information notice at any time. Changes will be published in the Privacy section of the institutional website.

Update date: 14 December 2021

Attachments A and B - Models of Simplified Information Notices

Information Notice in PDF format