DOMAINE COSTA LAZARIDI

CCTV POLICY

CCTV PROCESSING INFORMATION – LEVEL B

Date: 01/12/2023

  1. Data Controller:
    DOMAINE COSTA LAZARIDI S.A, ANDRIANI, DRAMAS, GREECE, P.C. 66 100. Tel. (+30) 25210 82 231
  2. 2. Purpose of processing and legal basis:
    We use a surveillance system for the purpose of protecting people and goods. The processing is necessary for the purposes of legitimate interests pursued by us as a data controller (Article 6 para. 1(f) GDPR).
  3. Analysis of legitimate interests
    Our legal interest consists in the need to protect our space and the goods located in it from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health and property of our staff and third parties who are legally present in the supervised area. We only collect image data and limit recording to places and times we have assessed that there is an increased likelihood of illegal acts being committed e.g. theft, such as at our checkouts and at the entrance, without focusing on areas where the privacy of the persons whose image is taken may be unduly restricted, including their right to the respect for personal data.
  4. Recipients
    The guarded material is only accessible by our competent / authorized personnel who are in charge of site security. This material is not transmitted to third parties, with the exception of the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes evidence necessary for the investigation of a criminal act, which concerns persons or goods of the data processing controller, b) to the competent judicial, prosecutorial and police authorities when they request data, legally, in the exercise of their duties, and c) to the victim or the perpetrator of a criminal act, when it comes to data which may constitute evidence of the act.
  5. Time of Safekeeping
    We keep the data for fifteen (15) days, after which they are automatically deleted. In the event that we discover an incident during this period, we isolate part of the video and keep it for up one (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns a third party, we will keep the video for up to three (3) more months.
  6. Rights of data subjects
    Data subjects have the following rights:

    • Right of access: you have the right to know whether we are processing your image and, if so, to receive a copy of it.
    • Right to restriction: you have the right to ask us to restrict the processing, such as not to delete data that you consider necessary to establish, exercise or support legal claims.
    • Right to object: you have the right to object to the processing.
    • Right to deletion: you have the right to request that we delete your data.

    You can exercise your rights by sending an e-mail to info@ domaine-lazaridi.gr or a letter to our postal address or by submitting the request to us in person, at the company address, DOMAINE COSTA LAZARIDI S.A, ANDRIANI, DRAMAS, GREECE, P.C. 66 100. In order to consider a request related to your image, you will need to tell us approximately when you came into range of the cameras and provide us with an image of yourself to help us identify your own data and mask the data of third parties imaged. Alternatively, you may come to our premises and we will show you the images in which you appear. We also point out that the exercise of the right of objection or deletion does not imply the immediate deletion of data or the modification of processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.

  7. Right to file a complaint
    If you believe that the processing of your data violates Regulation (EU) 2016/679, you have the right to file a complaint with a supervisory authority.
    The competent supervisory authority for Greece is the Data Protection Authority, 1-3 Kifisias Avenue, 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.