Video surveillance statement

As required by the European Union General Data Protection Regulation (GDPR 2016/679, Article 13), visitors to the Outlet (data subjects) are hereby informed that any personal data provided may be processed in paper or digital form for the purposes indicated hereunder.

The Data Controller for personal data is Sicily Outlet Village S.R.L., with registered office at 10, Corso Matteotti, Milan (MI), tax code/VAT no. 06227960967, in the person of is legal representative Nicola Sanfilippo. The Data Protection Officer is Christian Leblanc, who may be contacted at the following e-mail address: dpo@siciliaoutletvillage.com.
The Data Controller guarantees maximum confidentiality in the processing of personal data in accordance with the provisions of current personal data protection legislation. Specific security measures are in place to prevent loss of data, illegal or unauthorized use of and unauthorized access to data.

Your personal data will be processed for the following purposes

• • Outlet documentation and promotion: for the purpose of documentation and promotion of the Outlet, your images and/or audio-video recordings will be acquired in order to produce graphic and/or multimedia materials to use as instruments of documentation, promotion and dissemination of the Outlet’s activities. The legal basis of the processing lies in the consent you may express. Agreeing to provide data is optional. Not providing data, however, makes it impossible for the Controller to carry out video and/or photo shoots featuring you.

The Controller gathers and processes the following types of personal data concerning you:

• • personal identification data (name, surname, tax code), place and date of birth, residency or domicile;

• photographic images;

• audio-video recordings.

For the aforesaid purposes the Controller will not process any sensitive data concerning you (racial or ethnic origin, political convictions, philosophical or religious beliefs, membership of trade unions or political parties, biometric or physical or mental health data or genetic characteristics, addictions or sexual preferences, criminal offences committed or other legal proceedings and relative sanctions or fines, illegal or reprehensible conduct and relative sanctions or social security numbers or nationality data).

Data are processed in electronic and paper format using appropriate systems to guarantee the security and confidentiality of your data in accordance with the provisions of Chapter II (Principles) and Chapter IV (Controller and Processor) of the Regulation.
Processing may also be carried out using automated equipment that stores, manages or transmits data.
Depending on the purposes for which data are collected, personal data will be kept for the duration provided for in the applicable law, i.e. for a period of time not to exceed what is necessary for fulfilling the abovementioned purposes, which is set at a maximum of 5 years.

Personal data collected for the purpose stated in this Notice may be published in the following ways:

• corporate websites (www.siciliaoutletvillage.com);
• official social channels (eg. Facebook, Twitter, Instagram, Youtube, Tripadvisor);
• corporate brochures, calendars and flyers;
• magazines, dailies, periodicals, etc.;
• physical media designed for diffusion of data compatible with the Outlet’s promotion purposes.

Within the necessary limits and for the purposes indicated, data will become known to the Company’s employees and collaborators and be communicated to the following 3rd parties appointed by the Data Controller and/or 3rd party Processors of personal data pursuant to Article 28, GDPR, with a deed of appointment indicating the processing methods and security measures they must adopt for management and conservation of personal data for which the Company is the Controller.

• external technical consultants in the advertising sector, video operators, photographers, multimedia service companies, marketing and/or web marketing service companies;
• external organizations, including private ones, providing various kinds of inspection services;
• external administration consultants;
• companies in the Group of which Sicily Outlet Village S.R.L. is a part.

You may ask to consult a full and updated list of the subjects to which your personal data have been or may be communicated by writing to the following e-mail address: privacy@siciliaoutletvillage.com

Personal data will be managed and kept on the Controller’s servers in the European Union and/or on those, in the European Union, of 3rd party companies engaged and duly appointed as Processors.
Data are not currently transferred outside the European Union. It is understood, however, that the Controller may, if necessary, move its servers within the European Union and/or to non-EU countries.
In such case, the Controller henceforth gives assurance that any transfer of data outside the EU will be in compliance with art. 44 and subseq. of the Regulation and the provisions of other applicable legislation and that agreements guaranteeing an adequate level of protection will be stipulated if necessary.

Regarding the data processed by the Controller, you may at any time exercise your rights under Articles 15, 16, 17, 18, 20 and 21 of the Regulation.
In detail:

1. (a) You may obtain from the Controller confirmation as to whether or not personal data concerning you are being processed and, where such is the case, access the following information:
   • purposes of the processing,
   • categories of personal data processed,
   • recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
   • envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
   • where the personal data are not collected from you, any available information as to their source;
   • the existence of automated decision-making and, in such case, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
   • existence of suitable guarantees for the intents and purposes of article 46 on the transfer of personal data to a third country or an international organization.
2. (b) You are also entitled to:
   • obtain the updating, rectification, integration or erasure, within the legal terms, of your data, or ask for them to be anonymized or request a restriction on processing, and object, in whole or in part and for legitimate reasons, to the processing of your personal data;
   • obtain the portability of electronically processed data provided by virtue of consent or contract;
   • withdraw your consent, where provided for;
   • lodge a complaint with the Supervisory Authority.

To such end, the Company invites you to send written requests (free of charge), containing date and signature, as follows:

• by e-mail to the following address: privacy@siciliaoutletvillage.com
• by registered letter to the following address:

  Sicilia Outlet Village
  Autostrada A19 Palermo – Catania
  Uscita Dittaino – 94011 Agira (EN)
  

The Company undertakes to answer your requests within a month, excepting cases of particular complexity, for which a maximum of 3 months may be needed. The Company will in any case explain the reason for the wait within a month of your request.
The outcome of your request will be communicated in writing or electronic format. In the case of a request for rectification, erasure or restriction of processing, the Company undertakes to communicate the outcomes of your requests to each of the recipients of your data, unless this proves impossible or entails disproportionate efforts.
The Company wishes to point out that you may be asked to contribute to expenses if your requests are manifestly unfounded, excessive or repetitive. For such eventualities, the Company keeps a register of your requests for intervention.
In cases of withdrawal of consent and/or objection to publication on the part of the data subject, the Controller will have processing discontinued as of the date of receipt of the request. It is understood that such withdrawal will not have any effect on processing carried out prior to the request. Similarly, if erasure/removal of data has become impossible or in any case difficult to achieve, as for example in cases where data is saved to 3rd party PCs or other physical media and then published on paper (eg. brochures, flyers), your withdrawal of consent, for such types of data will not have any effect.

This Notice may undergo modifications, so it is advisable to regularly check the Notice and always refer the current version.