Information on the processing of personal data (video surveillance)

The Data Controller is the University of Padova, legally represented by the rector pro tempore, with campus in via VIII Febbraio n. 2, Padova - 35122.

To exercise his/her rights, the data subject may contact the data controller by writing to the above address or by sending an e-mail to the certified e-mail address amministrazione.centrale@pec.unipd.it or to the e-mail address urp@unipd.it.

The data controller is staffed by the data protection officer, appointed pursuant to art. 37 of EU Regulation 2016/679.

The Data Protection Officer can be contacted at the following e-mail address: privacy@unipd.it

Within the scope of this policy, the data subject is any natural person whose personal data is processed when accessing the video surveillance area.

The personal data that may be processed exclusively for the purposes indicated in point 4 are the images coming from the cameras located at the University's premises, which can be viewed in real time or video-recorded.

Access to video surveillance areas involves the collection, recording, storage and deletion of images of the persons concerned.

The University provides for the processing of personal data in the execution of video surveillance activities at its facilities.

In particular, the processing is carried out for the following purposes:

• guarantee the safety and security of university staff, students and people who attend university spaces;
• protect the University's movable and immovable assets;
• monitor and control access to areas not open to the public and reserved for personnel authorised by the University;
• prevent the commission of any unlawful acts to the detriment of the University

The processing of your data is carried out by means of a video surveillance system, which allows the viewing of images in real time ("live") as well as the recording of them.

The video surveillance system is in operation 24/7.

The viewing and management of the images taken through the video surveillance system are reserved to the data controller and to the persons formally appointed by him. The data are stored with the use of suitable security measures to prevent access by unauthorized personnel and to guarantee the confidentiality and integrity of the same.

The University does not resort to automated decision-making processes relating to the rights of the data subject on the basis of personal data, including profiling, in compliance with the guarantees provided for by art. 22 of the EU Regulation.

The data are stored for a period not exceeding twenty-four hours after their collection, after which they are automatically deleted. This is without prejudice to special needs for further storage in relation to holidays or the closure of university campuses, as well as in the event of specific investigative requests from the judicial authorities or the police.

During the scheduled closure periods of the University, records may be kept for security reasons of the University premises for the entire period of closure of the University itself.

In the event of the detection of images or facts concerning hypotheses of crime or events relevant for the purposes of public security, environmental protection or public property, the data controller shall promptly notify the competent authority, providing for the preservation of the images.

The areas under video surveillance are marked with special signs, clearly visible in all conditions of ambient lighting, where the purposes pursued are also recalled. These signs are placed before the range of the cameras, even in its immediate vicinity and not necessarily in contact with the installations (Annexes A and B).

The processing of personal data within the scope of the above-mentioned purposes is carried out by the Data Controller on the basis of the pursuit of a legitimate interest pursuant to art. 6(1)(f) of EU Regulation 2016/679.

The recipients of the data are the natural persons appointed by the University for the processing of data, including employees, collaborators and collaborators, including self-employed collaborators, of the University of Padova and affiliated bodies.

Third parties

Personal data, in any case, may be disclosed to third parties in relation to the fulfilment of legal and contractual obligations, specific requests by the data subject, the management of any complaints or disputes and for the prevention and repression of fraud and any illegal activity.

For the purposes indicated in point 4, personal data may be disclosed to third parties, including judicial and public security authorities.

The data subject may exercise the rights provided for in Articles 15 et seq. of the EU Regulation, such as the right of access, the right to rectification or integration of their data, the right to erasure (right to be forgotten) and restriction of processing and the right to data portability, under the conditions and within the limits indicated by the EU Regulation.

The request for erasure of personal data cannot be accepted to the extent that the processing is necessary for the fulfilment of a legal obligation, for the performance of institutional tasks, for the establishment, exercise or defence of a right in judicial campus and in any other case provided for by art. 17, paragraph 3, EU Regulation.

The data subject has the right to object at any time to the processing of his or her personal data in accordance with Art. 21 EU Regulation.

The data subject may lodge a complaint with the Data Protection Authority.

In order to exercise his or her rights, the data subject may contact the data controller by sending an e-mail to the certified e-mail address amministrazione.centrale@pec.unipd.it or to the e-mail address urp@unipd.it. Alternatively, you can write to: Università degli Studi di Padova, via VIII Febbraio n. 2, Padova.

The data controller is required to provide a response within one month of the request, extendable up to three months in the event of a particularly complex request.

The University may amend or supplement this policy at any time. The changes are published in the Privacy section of the institutional website.