Subjects:
affected by the video surveillance activity.Cortesa S.r.l. as Data Controller of the personal data/images of the interested party, pursuant to and for the purposes of the EU Reg. 2016/679 hereafter 'GDPR', hereby informs the interested party that the aforementioned legislation provides for protection of interested parties with respect to the processing of personal data and that such processing will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
DATA CONTROLLERCortesa S.r.l. - Olbia Costa Smeralda Airport, 07026 Olbia (SS)
Ph. +39 0789 563463- Fax +39 0789 563401 - certified e-mail:
cortesa@pec.it DATA PROTECTION OFFICER (DPO)
Ph. +39 3459764751 - E-mail address:
privacy@geasar.it - certified e-mail:
privacy.geasar@pec.it Cortesa S. r. l. informs the interested parties and all people who will access the “Kara Sardegna” areas located within Alghero airport terminal, which are subject to video surveillance systems, duly signposted before the respective range of action by means of special signs as provided for in the General Provision on Video Surveillance of the Privacy Guarantor of April 8th 2010.
The Data Controller informs that the personal data/images of the data subject will be processed according with the legal provisions of the aforementioned legislation and the confidentiality obligations provided therein.
Purpose: in particular the personal data/images of the data subject will be processed for the purposes related to the implementation of obligations relating to legal or contractual obligations: internal control services for production and organisational needs, occupational safety, protection of company assets, protection of public safety, crime prevention and detection.
Legal basis for processing: the personal data/images of the data subject will be processed based on the legitimate interest of the Data Controller in the integrity of the company’s assets, logistics and operations.
Methods of processing: the personal data/images of the interested party may be processed in the following ways:
processing by means of electronic devices for consultation and registration of the same. Each treatment takes place in compliance with the procedures set out in Articles. 6, 32 of the GDPR and by adopting the appropriate security measures provided.
Communication: the personal data/images of the interested party will be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for a correct relationship management, with a guarantee of rights protection of the interested party. The personal data/images of the interested party will be processed only by staff expressly authorized by the Data Controller, designating in writing all the natural persons, authorized to use the systems and, in cases where it is essential for the purposes pursued, to view the recordings (art. 30 of the Code). The personal data / images of the interested party may be disclosed to third parties in compliance with legal obligations, in particular to: police forces and judicial bodies. Some external subjects, appointed by Cortesa S.r.l., may become aware of personal data as well as the Data Protection Officer.
Dissemination: the personal data/photos of the data subject will not be disclosed in any way.
Data Retention Period: please note that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of personal data/images of the data subject is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed in compliance with the mandatory time limits prescribed by law. The retention of the recording of the images is provided for within 24 hours from the moment when the images were detected made, except for special requirements of further preservation in the event that you have to comply with a specific investigative request of the judicial authority or judicial police. After this period, the images will be completely erased by overwriting new images.
Data Controller: the Data Controller, accordingf to the Law, is Cortesa S.r.l. in the person of its legal representative, with registered office at Costa Smeralda Airport.
Rights of interested parties: We inform you that EU Reg. 2016/679 recognizes the exercise of specific rights. In particular: - to request confirmation of the existence or otherwise of their personal data; - to request access to their personal data and all related information; - to request the rectification, cancellation, limitation and opposition to the processing of their personal data; - to request the portability of their personal data.
Finally, we inform you that you can lodge a complaint with the Supervisory Authority, which in Italy is the Guarantor for the Protection of Personal Data.
To exercise the above rights, report problems or ask for clarification on the processing of your personal data, you can send a written request directly to the "Data Protection Officer (DPO)", to the postal address of the registered office or to the email
privacy@geasar.it 
