Notice on the processing of personal data through a video surveillance system
1. Data Controller:
Data Controller is the company with the name "KALAMATA MARINA", based in Kalamata, tel. +30 27210 21037.
2. Purpose of elaboration and legal basis:
We use a surveillance system for the purpose of protecting persons and goods. Processing is necessary for the purposes of legitimate interests that we pursue as a controller (Article 6 par. 1. (f) GDPR).
3. Analysis of legal interests
Our legal interest is consisted in the need to protect our space and the goods found in it from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health as well as the property of our staff and third parties who are legally in the supervised area. We only collect image data and limit the reception to areas where we have assessed that there is an increased likelihood of illegal actions e.g. theft, both in our coffers and at the entrance, without focusing on places where the privacy of the persons whose image is being taken may be excessively restricted, including their right to respect for personal data.
4. Recipients
The material kept is accessible only by our competent / authorized staff in charge of the safety of the space. This material is not transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes information necessary for the investigation of a criminal act which concerns personnel or goods of the controller, b) to competent judicial, prosecutorial and police authorities when requesting data, legally, in the performance of their duties, and c) to the victim or perpetrator of a criminal act, in the case of data which may constitute evidence of the act.
5. Retention time
We keep the data for fourteen (14 days), after which it is automatically deleted. In case we find an incident during this period, we isolate part of the video and keep it for up to one (1) more month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns third parties, we will keep the video for up to three (3) more months.
6. Rights of data subjects
The data subjects have the following rights:
• Right of access: you have the right to know if we are editing your image and, if so, to obtain a copy.
• Restriction right: you have the right to ask us to restrict the processing, such as not deleting data that you deem necessary to establish, exercise or support legal claims.
• Right to object: you have the right to object to the processing.
• Right to delete: you have the right to request that we delete your data.
You can exercise your rights by sending an e-mail to [email protected] or by letter to our postal address or by submitting the request to us in person at the resort's address. To look at a request related to your image, you need to determine when you were in the range of the cameras and give us a picture of you to make it easier for us to locate your data and hide the data of third parties. Alternatively, we give you the opportunity to visit our facilities to show you the images in which you appear. We also point out that the exercise of the right to object or delete does not imply the immediate deletion of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.
7. Right to file a complaint
If you consider that the processing of the data concerning you violates the Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority for Greece is the Hellenic Data Protection Authority, 1-3 Kifissias, 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.
