1.  Controller

ARTHROSIS SA

Parnithos 44, Metamorphosi, Athens

Tel.: 210 2841006, E-mail: info@arthrosis.gr

2.  The purpose of the processing and the legal basis

We have placed CCTV cameras up at some of our venues to monitor specific areas for security and safety purposes of persons and property. The processing is necessary for legitimate interests purposes that we seek as the Controller (article 6 § 1.f GDPR).

3.  Legitimate interest

Our legitimate interest is to control the access to the building and to ensure the security and safety of our staff and visitors, as well as property and information located or stored on our premises. We collect just images caught on camera, and no voice is recorded. The CCTV system is not used for any other purpose, such as to monitor the work of employees or their  attendance. The CCTV system covers only areas where we have assessed that there is an increased likelihood of committing illegal acts, like area of entry and exit points of the building, entry points inside the building, server and outer parking area.

4.  Recipients of the data

The images can be accessed only by an authorized security staff member.

In certain circumstances we may be required to disclose CCTV images to certain bodies of authority, such as the police and emergency services.

5.  Retention period

We keep your personal data for 15 calendar days after your visit to our premises. After that period any CCTV recorded footage is automatically deleted. In case of an incident occurred during this period, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns a third party we will keep the video for up to three (3) more months.

6.  Rights of the data subject

As a data subject, you have the right of access (in order to know the purposes of the processing and the recipients of the data), the right to restrict processing, the right to object, the right to erasure.

You have the right to exercise your rights by sending an email request to  info@arthrosis.gr  or by sending a letter to our postal address.

To consider a request related to your image, you should tell us about when you were within the range of our cameras and give us a picture of you, in order to locate your data and hide the data of third parties pictured. Alternatively, we give you the opportunity to come to our facilities to show you the images in which you appear. We also note that the exercise of the right of objection or deletion does not imply the immediate deletion of your data or the modification of the processing. In any case, you will receive a detailed reply the soonest possible, within the deadlines set by the GDPR.

7.  Complaint to the Hellenic DPA

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifissias 1-3, PC 115 23, Athens, Greece, Telephone: +30-210 6475600, Ε-mail: contact@dpa.gr, https://www.dpa.gr.