Access to Vimar spa premises is strictly forbidden for any persons who:
Please also note that, as a measure to contain the spread of the virus, in order to access the Vimar spa premises you must have your body temperature measured.
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR” or “Regulation”)
Art. 1. Identity and contact data of the Controller
VIMAR S.p.A. (“Controller”) is the Controller of the processing of personal data of persons accessing these premises, collected for the purposes indicated herein. The identification and contact data of the Controller are the following:
Art. 2. Purpose and legal basis for processing
To access the premises of the Controller, your body temperature shall be taken in real time. It is also reminded that any persons entering the company premises must:
Therefore the company may request the signature of a declaration in order to verify the three above-mentioned conditions.
This measure is necessary to prevent the spread of the coronavirus COVID-19, also pursuant to the provisions of the “Joint protocol governing measures to fight and contain the spread of Covid-19 in the work place” signed on 14 March 2020 and updated to 24 April 2020.
The Protocol was signed at the invitation of the President of the Council of Ministers, the Minister of the Economy, the Minister of Labour and Social Policy, the Minister of Economic Development and the Minister of Health, which promoted the agreement of the social partners in implementing the measure, contained in Article 1, first paragraph, point 9), of the decree of the President of the Council of Ministers of 11 March 2020, which in relation to professional and production activities recommends agreements between employers and the trade unions.
The real-time body temperature measurement and the above-referred declaration constitute the processing of personal data pursuant to Regulation EU 679/2016.
The purpose of the processing is exclusively that of preventing infection from COVID-19. The legal basis of the processing is the need to fulfil a legal obligation of the Controller (art. 6(c) of the GDPR), i.e. the implementation of anti-contagion safety protocols pursuant to Art. 1(7)d) of DPCM of 11 March 2020. Allowing your body temperature to be taken in real time is a processing of personal data which is required in order to access the premises. Therefore, any refusal shall make it impossible for the Controller to fulfil a legal obligation and, consequently, you will not be allowed to enter the premises.
Art. 3. Categories of subjects to whom the Controller discloses the personal data of the Data Subject
Any personal data collected pursuant to this privacy policy will be processed by the Controller's personnel appointed for this purpose or third parties acting on behalf of the Controller in their capacity respectively as designated data processors pursuant to Art. 2(14) of Italian Legislative Decree 101/2018 or as External Processors.
Art. 4. Retention of personal data
The Controller stores the data relating to the control without recording the body temperature data at the time of the control, unless the temperature is above 37.5°; in this case, the record will be kept in order to document the reasons preventing access to the company premises. Any personal data collected in accordance with this privacy policy will be kept by the Controller for the time indicated in the Protocol dated 24/4/2020. In any case, once the state of emergency has ended, any personal data kept by the Controller pursuant to this privacy policy will be erased by the Controller.
Art. 5. Communication to third parties
No personal data collected by the Controller will be disclosed or communicated to third parties other than those required by law (e.g. where requested by the health authorities in order to reconstruct the chain of any close contact with a worker who has tested positive to COVID-19).
Art. 6. Transfer to third countries
No personal data collected pursuant to this privacy policy will be transferred or stored in third countries.
Art. 7. Rights of the data subject
The Controller informs that in relation to the processing of your personal data, you have the rights laid down in the Regulation, and in particular:
Notwithstanding any other administrative or legal claims, should you deem that the processing of your data is in breach of the Regulation, you have the right to lodge a complaint with a supervisory authority, specifically in the Member State in which you are habitually resident, work or the place in which the presumed breach took place.
Marostica, 4 May 2020