SPECIAL NOTICE
ON THE PROCESSING OF PERSONAL DATA
THROUGH VIDEO SURVEILLANCE SYSTEM (CCTV)

  1. Data Controller: The company “GEYER HELLAS A.E. ANONYMI EMPORIKI VIOMICHANIKI KAI ILEKTROTECHNIKI ETAIREIA ILEKTROLOGIKOU, ILEKTRONIKOU YLIKOU KAI FOTISTIKON”, having its registered seat in Drosia, Chalkida, Greece, PC 34100, email: info@geyer.gr, telephone number: 2221098711, website: https://www.geyer.gr
  1. Purpose of Processing and Legal Basis: We use a video surveillance system/closed-circuit television (CCTV) for the purpose of ensuring the security of the premises and the individuals and goods within them, particularly due to the production and distribution of high-value goods, as well as the Company’s significant investment in infrastructure elements that are closely linked to its operations. The processing is necessary for the purposes of the legitimate interests pursued by our Company, as the data controller [Article 6(1)(f) GDPR].

Analysis of Legitimate Interests: Our legitimate interest lies in the need to protect our premises and assets against illegal acts, such as theft. We also need to ensure the safety of the life, physical integrity, health, as well as the property of our staff and third parties lawfully present in the monitored area. We only collect image data (not audio) and limit the capture to areas where we have assessed an increased possibility of illegal acts (e.g. theft), such as the entrance to our facilities and areas where our produced material is located. We avoid focusing on areas where the privacy of individuals whose image is captured might be excessively restricted, including their right to respect for their personal data (e.g., in the kitchen). In any case, the angle of capture is such that it focuses as little as possible on our staff’s faces, and we prefer shots with the widest possible viewing angle.

  1. Recipients: The recorded material is accessible only by our competent/authorized personnel or external partners in charge of securing the premises and managing the video surveillance system. This material is not transferred to third parties, except in the following cases: a) to competent judicial, prosecutorial and police authorities, when it contains information necessary for the investigation of a criminal offense involving persons or assets of the data controller; b) to competent judicial, prosecutorial, and police authorities, when they lawfully request data in the performance of their duties; c) to the victim or the perpetrator of a criminal act, when the data which may constitute evidence of the act.
  1. Retention Period: We keep the data for fifteen (15) working days, after which, they are automatically deleted. If an incident occurs within this period, we isolate part of the video and keep it for up to one (1) additional month to investigate the incident and initiate legal proceedings to defend our legitimate interests. If the incident involves a third party, we shall retain the video for up to three (3) more months.
  1.      Rights of Data Subjects: Data subjects have the following rights:
  • Right of access: You have the right to know if we process your image, and if so, to receive a copy of it.
  • Right to restriction: You have the right to request that we restrict processing, such as not deleting data you deem necessary for establishing, exercising, or supporting legal claims.
  • Right to object: You have the right to object to the processing of your data.
  • Right to erasure: You have the right to request that we delete your data.

You may exercise your rights by sending an email to info@geyer.gr or by sending a letter to the postal address provided above, or by submitting your request in person to the same postal address. To examine a request related to your image, you should specify approximately when you were within the range of the cameras and provide an image of yourself to assist in identifying your data and in hiding the data of third parties captured in the footage. Alternatively, we give you the opportunity to visit our premises to view the footage in which you appear. Please note that exercising the right to object or erasure does not result in the immediate deletion of data or modification of the processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the GDPR.

  1. Right to Lodge a Complaint: If you believe that the processing of your personal data violates the GDPR [Regulation (EU) 2016/679], you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Greece is the Hellenic Data Protection Authority, 1 -3 Kifisias Avenue, 11523, Athens, https://www.dpa.gr/, tel. 2106475600. The complaint can be submitted through the Authority’s online portal: https://www.dpa.gr/el/syndesi/prosvasi, and detailed information on how to file a complaint is provided at the following link: https://www.dpa.gr/el/polites/katagelia_stin_arxi.