{"id":11427,"date":"2026-04-01T13:18:01","date_gmt":"2026-04-01T10:18:01","guid":{"rendered":"https:\/\/www.hellasstones.com\/video-surveillance-personal-data-processing-notice\/"},"modified":"2026-04-01T13:18:01","modified_gmt":"2026-04-01T10:18:01","slug":"video-surveillance-personal-data-processing-notice","status":"publish","type":"page","link":"https:\/\/www.hellasstones.com\/en\/video-surveillance-personal-data-processing-notice\/","title":{"rendered":"Video Surveillance & Personal Data Processing Notice"},"content":{"rendered":"

[vc_row css=”.vc_custom_1624879431715{margin-top: 50px !important;margin-bottom: 50px !important;}”][vc_column][vc_column_text]<\/p>\n

Notice on the Processing of Personal Data via Video Surveillance System<\/strong><\/span><\/h2>\n

<\/p>\n

Data Controller<\/strong><\/span><\/h3>\n

<\/p>\n

The company AFOI GAGKOU O.E.<\/strong>, operating under the trade name Hellas Stones<\/strong>, with registered offices in the Industrial Area of Larissa (B.I.P.E. Larissa), Postal Code 40006, Greece, VAT No. 099847353, and General Commercial Registry No. 026638340000.<\/p>\n

Purpose of Processing and Legal Basis<\/strong><\/span><\/h3>\n

<\/p>\n

We operate a video surveillance (CCTV) system for the purpose of protecting individuals and property. The processing of personal data is necessary for the purposes of the legitimate interests pursued by the Data Controller (Article 6(1)(f) GDPR).<\/p>\n

Legitimate Interests Analysis<\/strong><\/span><\/h3>\n

<\/p>\n

Our legitimate interest lies in safeguarding our premises and the assets located within them from unlawful acts, such as theft. This also extends to ensuring the safety, physical integrity, health, and property of our employees and any third parties lawfully present on the premises.<\/p>\n

<\/p>\n

We collect only image data and limit recording to areas where there is an increased likelihood of unlawful activities, such as entrances and cash points. We avoid monitoring areas where individuals\u2019 privacy may be excessively restricted, fully respecting their right to personal data protection.<\/p>\n

Recipients of Data<\/strong><\/span><\/h3>\n

<\/p>\n

The recorded material is accessible only to authorized personnel responsible for the security of the premises.<\/p>\n

<\/p>\n

The data is not disclosed to third parties, except in the following cases:
a) To competent judicial, prosecutorial, and law enforcement authorities when it contains information necessary for the investigation of criminal acts involving persons or property of the Data Controller.
b) To competent authorities upon lawful request in the exercise of their duties.
c) To victims or perpetrators of criminal acts, where the data may serve as evidence of the incident.<\/p>\n

Data Retention Period<\/strong><\/span><\/h3>\n

<\/p>\n

Data is retained for a period of three (3) days, after which it is automatically deleted.<\/p>\n

<\/p>\n

In the event of an incident within this period, a relevant segment of the footage may be isolated and retained for up to one (1) additional month for investigation purposes and the initiation of legal proceedings to protect our legitimate interests. If the incident concerns a third party, the footage may be retained for up to three (3) additional months.<\/p>\n

Rights of Data Subjects<\/strong><\/span><\/h3>\n

<\/p>\n

Data subjects have the following rights:<\/p>\n