CCTV Privacy Notice
Creative Pharma Services S.M.S.A
2. Purpose and lawfulness of data processing
We use a CCTV for the purpose of protecting persons and goods. Processing is necessary for the purposes of our legal interests, as a controller (article 6 par. 1. f, GDPR).
3. Our legal interest for data processing
Our legal interest consists in the need to protect our facilities and goods against illegal acts, such as thefts. The same applies to the safety of life, physical integrity, health, as well as the property of our staff and third parties who are legally in the supervised area. We only collect image data and limit the operation of CCTV only to areas where we have assessed that there is an increased likelihood of committing illegal acts, e.g. theft, as at the entrance, without focusing on areas where the privacy of the persons whose image may be taken may be excessively restricted, including their right to respect their personal data.
4. Recipients of your data
The data is accessible only by our competent / authorized staff in charge of the safety of the facilities. The data shall not be transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes information necessary to investigate a criminal act involving persons or goods of the controller, b) to the competent judicial, prosecutorial and police authorities when requesting data, legally, in the context of exercising of their duties, and c) to the victim or perpetrator of a criminal act, in the case of data which may constitute evidence of the act.
5. How long we keep your personal data
We keep your data for twelve (12) days, after which they are automatically deleted. In case an incident takes place during this period, we will isolate part of the video and keep it for up to one (1) more month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns any third party, we will keep the video for up to three (3) more months.
6. Rights of data subjects
Data subjects have the following rights:
- Right of access: you have the right to be informed if we process your image and, if applicable, receive a copy.
- Right to restriction: you have the right to ask us to restrict the processing of your personal data, such as not deleting personal data that you consider as necessary to establish, exercise or support legal claims.
- Right to objection: you have the right to object to the processing of your personal data
- Right to erasure: you have the right to ask us to delete your personal data
You can exercise your rights by sending an e-mail to firstname.lastname@example.org or a letter to our postal address or by submitting the request to us in person. In order for us to look in a request related to your image, you need to inform us when you were in the range of the cameras and give us a picture of you to make it easier for us to identify your data and mask the data of third parties. Alternatively, we give you the opportunity to visit our facilities to show you the relevant images of you. In addition, please note that the exercise of the right to object or delete your personal data, does not imply the immediate deletion of data or the amendment of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.
7. Right to lodge a complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Authority, Kifissias 1-3, 115 23, Athens, https://www.dpa. gr /, tel. (+30) 2106475600.