Briefing on personal data processing by means of video-surveillance system
EURICOM HELLAS S.A., Halastra, Thessaloniki, Tel. ++2311990600
We utilize a surveillance system for the purpose of protecting people and property. Processing is necessary for the purposes of the legal interest we pursue as the Data Controller (article 6, par. 1 (f), GDPR).
Our legal interest consists in the need to protect our facilities and the goods located in them from unlawful activities and actions, such as, indicatively, theft. The same applies also for the protection of the life, bodily integrity, health and property of our personnel and third parties, lawfully present in the place under surveillance. We only collect image data and limit reception to areas we have evaluated that present an increased risk of illegal activities taking place, such as theft, without focusing on areas where the private life of the individuals whose image is taken may be severally limited, including their right to have their personal data respected.
The stored material is accessible only by our competent/authorized staff who has been assigned with the safeguarding of the facilities. Such material is not transmitted to third parties, with the exception of the following cases: (a) to competent judicial, prosecuting and police authorities, when it includes of information necessary for the investigation of a punishable offense, which relates to people or goods of the data controller; (b) to competent judicial, prosecuting and police authorities when they duly request for information at the exercise of their duties, and (c) to the victim or the perpetrator of a punishable offense, when it regards data which may constitute evidence of the offense.
We store data for fifteen (15) days, upon the lapse of which they are automatically deleted. In case where we find an incidence of interest within said period, we will isolate the relevant video segment and store it up to one (1) more month, with the objective of investigating the incident and commencing legal procedures to defend our lawful interests, while even if the incident relates to some third party, we shall store the video for up to three (3) more months.
Data subjects have the following rights:
You can exercise your rights by sending an e-mail to firstname.lastname@example.org or a letter to our postal address or by submitting the request in person, at the address of our facilities. In order for us to be able to assess a request relating to your image, you must indicate to us roughly when you were within the range of our cameras and give us a picture of you, to facilitate us in tracing your data and concealing the data of third parties also appearing. Alternatively, you have the option of coming to our facilities so that we can show you the images wherein you appear. We must also note that the exercise of the right to object or to erasure does not entail the immediate deletion of the data or the amendment of processing. In any case, we shall reply in detail and in writing as soon as possible and within the deadlines prescribed by the GDPR.
In case you feel that data processing relating to you violates Regulation (EU) 2016/679, you reserve the right to lodge a complaint before a supervisory authority.
The competent supervisory for Greece is the Data Protection Authority, 1-3 Kifisias Ave, Athens, https://www.dpa.gr/, Tel. ++2106475600.