Under the EU General Data Protection Regulation (GDPR), Pareus Service SRL (the data controller) is obliged to inform guests, employees, and other affected parties (the data subjects) about the video surveillance system installed in some designated areas (like the pool area, entrances and exits, and technical rooms).

Identity and contact details of the data controller

Pareus Service Srl
Via Cassa di Risparmio 18
39100 Bolzano, Italy
info@pareus-resort.com

Contact details of the data protection officer

For further information about the topic of data protection please contact our data protection officer at
datenschutz@pareus.it

Purposes and legal basis of the video surveillance

The data processing via video surveillance is necessary for the purposes of the legitimate interests pursued by our company. These are the protection of property, guests, employees, and other affected parties. CCTV surveillance helps us to detect, investigate and prosecute criminal offenses, for example in the case of thievery or vandalism. The legal basis is Article 6 (1)(f) GDPR.

Transfer of data to third parties

We will not transfer your personal data to third party recipients unless such transfer is permitted under applicable law.

Data retention period

We will store the data recorded by the video surveillance system for 48 hours.

The data may be stored for a longer period of time, if there are justified indications to assume that the data shows actions that are to be prosecuted as a criminal offense or used to assert claims under civil law.

Your rights as a data subject

Data subjects have the right to request from the controller

• accessto their personal data
• rectificationof their personal data
• erasureof their personal data
• restriction of processing concerning the data subject

Data subjects have the right to objectto processing as well as the right to data portability.
Data subjects have the right to lodge a complaint with a supervisory authority.

Right to object

As a data subject you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1). The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.