Notice on the Processing of Personal Data via Video Surveillance System
Data Controller
The company AFOI GAGKOU O.E., operating under the trade name Hellas Stones, with registered offices in the Industrial Area of Larissa (B.I.P.E. Larissa), Postal Code 40006, Greece, VAT No. 099847353, and General Commercial Registry No. 026638340000.
Purpose of Processing and Legal Basis
We operate a video surveillance (CCTV) system for the purpose of protecting individuals and property. The processing of personal data is necessary for the purposes of the legitimate interests pursued by the Data Controller (Article 6(1)(f) GDPR).
Legitimate Interests Analysis
Our legitimate interest lies in safeguarding our premises and the assets located within them from unlawful acts, such as theft. This also extends to ensuring the safety, physical integrity, health, and property of our employees and any third parties lawfully present on the premises.
We collect only image data and limit recording to areas where there is an increased likelihood of unlawful activities, such as entrances and cash points. We avoid monitoring areas where individuals’ privacy may be excessively restricted, fully respecting their right to personal data protection.
Recipients of Data
The recorded material is accessible only to authorized personnel responsible for the security of the premises.
The data is not disclosed to third parties, except in the following cases:
a) To competent judicial, prosecutorial, and law enforcement authorities when it contains information necessary for the investigation of criminal acts involving persons or property of the Data Controller.
b) To competent authorities upon lawful request in the exercise of their duties.
c) To victims or perpetrators of criminal acts, where the data may serve as evidence of the incident.
Data Retention Period
Data is retained for a period of three (3) days, after which it is automatically deleted.
In the event of an incident within this period, a relevant segment of the footage may be isolated and retained for up to one (1) additional month for investigation purposes and the initiation of legal proceedings to protect our legitimate interests. If the incident concerns a third party, the footage may be retained for up to three (3) additional months.
Rights of Data Subjects
Data subjects have the following rights:
- Right of Access: You have the right to know whether your image is being processed and, if so, to obtain a copy of it.
- Right to Restriction of Processing: You have the right to request restriction of processing, for example, to prevent deletion of data necessary for the establishment, exercise, or defense of legal claims.
- Right to Object: You have the right to object to the processing of your data.
- Right to Erasure: You have the right to request the deletion of your data.
You may exercise your rights by sending an email to info@hellasstones.com, by post to Hellas Stones, B.I.P.E. Larissa, P.O. Box 3019, 41005 Larissa, Greece, or by submitting your request in person at our premises.
To process a request related to your image, you will need to specify approximately when you were within camera range and provide an image of yourself to assist in identifying your data and protecting the data of third parties. Alternatively, you may visit our premises to review the relevant footage.
Please note that exercising the right to object or request deletion does not automatically result in the immediate deletion of data or modification of processing. We will respond in detail within the timeframes set by the GDPR.
For more information, please refer to our Privacy Policy.
Right to Lodge a Complaint
If you believe that the processing of your personal data violates Regulation (EU) 2016/679 (GDPR), you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority in Greece is:
Hellenic Data Protection Authority
1–3 Kifisias Avenue, 115 23 Athens, Greece
Website: https://www.dpa.gr/
Tel.: +30 210 6475600
