Information on the processing of personal data through a video surveillance system
- Processor:
Responsible for the processing is the limited liability company under the name "EVEXIA S.A.", with the distinctive title "EVEXIA S.A.", which is located in Stavroupoli, 2 Riga Feraiou Street, Thessaloniki, VAT number 998757411, D.O.Y. Tax Office of Thessaloniki.
- Purpose of processing and legal basis:
We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for the purposes of legitimate interests pursued by us as data controllers (Article 6(1)(f) GDPR).
- Analysis of legitimate interests
Our legitimate interest consists in the need to protect our premises and the goods located there from illegal acts, such as theft. The same applies to the security of the life, physical integrity, health and property of our staff and third parties lawfully present in the guarded premises. We only collect image data and limit the capture to areas where we have assessed that there is an increased likelihood of committing illegal acts e.g. theft, such as at our counters and at the entrance, without focusing on areas where the privacy of the persons whose image is taken may be unduly restricted, including their right to respect for personal data.
- Recipients
The material kept is accessible only by our competent/authorized personnel who are in charge of the security of the site. This material is not transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it contains data necessary for the investigation of a criminal offence involving persons or property of the controller, b) to the competent judicial, prosecutorial and police authorities when they request data lawfully in the exercise of their duties, and c) to the victim or perpetrator of a criminal offence, when it concerns data which may constitute evidence of a criminal offence.
- Time of observance
We keep the data for fifteen (15) days, after which they are automatically deleted. In the event that during this period we detect an incident, we isolate part of the video and keep it for up to one (1) month more, in order to investigate the incident and initiate legal proceedings to defend our legitimate interests, while if the incident concerns a third party we will keep the video for up to three (3) months more.
- Rights of data subjects
Data subjects have the following rights:
- Right of access: you have the right to know whether we are processing your image and, if so, to receive a copy of it.
- Right to restriction: you have the right to ask us to restrict processing, such as not deleting data that you consider necessary for the establishment, exercise or maintenance of legal claims.
- Right to object: you have the right to object to processing.
- Right to erasure: you have the right to request that we delete your data.
You can exercise your rights by sending an e-mail to info@evexia.com or by sending a letter to our postal address or by submitting the request in person, at the address of the shop. In order for us to consider a request related to your image, you must identify approximately when you were in range of the cameras and provide us with an image of you to assist us in identifying your own data and concealing the data of third-party subjects. Alternatively, we give you the option of coming to our premises to show you the images in which you appear. We also point out that exercising the right to object or erasure does not imply the immediate deletion of data or the modification of processing. In any case, we will reply to you in detail as soon as possible, within the time limits set by the GDPR.
- Right to lodge a complaint
If you believe that the processing of your data infringes Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority for Greece is the Data Protection Authority, Kifissia 1-3, 115 23, Athens, Greece, https://www.dpa.gr/, tel. 2106475600.
