Notice on the processing of personal data through a video surveillance system
- Controller:
ΜΑRIS POLYMERS POLYURETHANE MANUFACTURING SINGLE MEMBER SOCIETE ANONYME,
- Purpose of processing and legal basis:
We use a surveillance system for the purpose of protecting persons and property. Processing is necessary for the purposes of the legitimate interests we pursue as controller (Article 6 (1) (f) of the GDPR).
- Analysis of legitimate interests
Our legitimate interest consists in the need to protect our premises and the goods located therein against unlawful acts, such as indicatively theft. The same applies to the safety of the life, physical integrity, health and property of our staff and third parties who are lawfully located within the monitored area. We only collect image data and limit recording in areas where we have assessed that there is an increased likelihood for the commission of unlawful acts, e.g. theft, such as the gates of the company’s premises and around them, office entrances and production lines, without focusing on areas where the privacy of the persons whose image is recorded may be unduly restricted, including their right to respect for their personal data.
- Recipients
The material kept is accessible only by our competent/authorised personnel who are responsible for the security of the premises. Such material shall not be transmitted to third parties, except in the following cases: (a) to the competent judicial, prosecuting and police authorities when it contains information necessary for the investigation of a criminal offence involving persons or property of the controller; (b) to the competent judicial, prosecuting and police authorities when they lawfully request data in the course of their duties; and (c) to the victim or perpetrator of a criminal offence, where it concerns data which may constitute evidence of the offence.
- Retention period
We keep the data for fifteen (15) days, after which they are automatically erased. In the event that we identify an incident during that period, we will isolate part of the video and keep it for up to one (1) month in order to investigate the incident and initiate legal proceedings to defend our legitimate interests, while if the incident involves a third party we will keep the video for up to three (3) more months.
- Rights of the data subjects
Data subjects have the following rights:
- Right to access: you have the right to know whether we process your image and, if so, to receive a copy of it.
- Right to restriction: you have the right to ask us to restrict processing, for example not to erase data that you consider necessary for the establishment, exercise or defence of legal claims.
- Right to object: you have the right to object to the processing.
- Right to erasure: you have the right to obtain the erasure of your personal data.
You can exercise your rights by letter sent to our postal address or by submitting the request to us in person at our company’s address. In order for us to consider a request related to your image, you will need to specify approximately when you were within the range of the cameras and provide us with an image of you to help us identify your data and hide the data of third parties appearing. Alternatively, we give you the opportunity to visit our premises to show you the images in which you appear. Please also note that the exercise of the right to object or erasure does not result in the immediate erasure of data or the modification of processing. In any case, we will provide you with a detailed response as soon as possible, within the deadlines set by the GDPR.
- Right to lodge a complaint
If you believe that the processing of your data infringes Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority for Greece is the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, GR-11523, Athens, https://www.dpa.gr/, tel. +30 2106475600.
