Cameras – Update

Information on the processing of personal data through the video surveillance system of the companySITHOLIA

1. Processor:

Enterprise Sitholia, VAT number 121761420, no. GEMI 146199757000, registered address: Municipality of Polygyros Halkidiki, Vatopedi Halkidiki, PO Box 63071, tel. (0030) 6909148200, e-mail: info@sitholia.com.

2. Purpose of processing and legal basis:

We use a video surveillance system for the purpose of protecting persons and goods at the store of the company “Sitholia Premium Halkidiki Flavors” in the Municipality of Polygyros Halkidiki, Vatopedi Halkidiki, TK 63071. The processing is necessary for the purposes of legitimate interests that we pursue as the controller (Article 6 para 1. f of Regulation (EU) 2016/679 – GDPR).

3. Analysis of legitimate interests

Sitholia uses closed circuit television (CCTV) to protect individuals and property, as well as its facilities and critical infrastructure. Specifically, by monitoring the company’s present installation, the following is achieved: the protection of products, raw materials, equipment, machinery, vehicles, buildings and in general the store and the surrounding area of the company from crimes against property (thefts, robberies, vandalism and other damage, acts of terrorism, etc.), natural disasters (floods, fire, etc.), accidents and any other risk, as well as life, health, physical integrity, property and security in general of the company’s human resources (staff) and of third parties who are legally present in the supervised area, from possible risks, attacks, accidents, criminal acts, natural phenomena and any form of jeopardizing the fundamental rights of the individual.

We only collect image data and limit the download to areas we have assessed as having an increased potential for illegal acts, accidents and disasters, such as transaction areas, at the entrance to our store and inside our store, without focusing on areas where it may be overly restricted the private life of the persons whose image is taken, including their right to the respect of personal data.

4. Recipients

The log material kept is only accessible by the Controller. This material is not transmitted to third parties, with the exception of the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes elements necessary for the investigation of a criminal act, which concerns persons or goods of the Processor, b) to the competent judicial, prosecutorial and police authorities when they request data, legally, in the exercise of their duties, and c) to the victim or the perpetrator of a criminal act, when it comes to data which may constitute evidence of the act.

5. Time of observance

We keep the data for seven (7) days, after which it is automatically deleted. In the event that we discover an incident during this period, we isolate part of the video and keep it for up to one (1) month, with the aim of investigating the incident and initiating legal proceedings to defend our legal interests, while if the incident concerns third we will keep the video for up to three (3) more months.

6. Rights of data subjects

Data subjects have the following rights:

• Right of access: You have the right to know if we are processing your image and, if so, to receive a copy of it.
• Right to restriction: You have the right to ask us to restrict the processing, such as not to delete data that you consider necessary to establish, exercise or support legal claims.
• Right to object: You have the right to object to the processing of your data.
• Right to deletion: You have the right to request that we delete your data.

To exercise your rights, you can a) send a postal letter (registered letter) to Sitholia company, based in the Municipality of Polygyros Halkidiki, Vatopedi Halkidiki, TK 63071, b) submit your request in person to the above address or c) send e-mail: info@sitholia.com.

In order to consider a request related to your image, you will need to tell us approximately when you came into range of the cameras and provide us with an image of you to help us identify your own data and mask the data of third-party imagers . Alternatively, we allow you to come to our premises to show you the images in which you appear. We point out that the exercise of the right to object or deletion does not imply the immediate deletion of data or the modification of processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by Regulation (EU) 2016/679.

7. Right to file a complaint

In the event that you consider that the processing of personal data concerning you violates Regulation (EU) 2016/679 and/or the relevant national legislation and the decisions, instructions, opinions and guidelines of the competent supervisory authority, you have the right to submit a complaint to supervising Authority.

The competent supervisory authority for Greece is the Personal Data Protection Authority, Kifisias 1-3, 115 23, Athens, https://www.dpa.gr /, tel. 2106475600