INFORMATION ABOUT THE PERSONNAL DATA PROCESSING BY CLOSED VIDEO-SURVEILLANCE CIRCUIT (CCTV)
02. DATA PROTECTION OFFICER (DPO)
For the matters, concerning the processing of personal data you can contact the Lab’s Data Protection Officer (DPO) Mrs Ioanna Gallou at firstname.lastname@example.org
03. PURPOSES & LEGAL BASIS OF THE PROCESSING
We operate a video-surveillance system for the protection and security of the Lab’s staff, visitors and properties.
The legal basis of this processing is the defense of the Lab’s legitimate interests, according to the article 6, par. 1 f of the General Data Protection Regulation (ΕU) 2016/679.
Our “legitimate interests” means the protection of the area and the goods located in it from illegal acts, such as theft or unprovoked destruction. Moreover, we ought to protect the safety of life, physical integrity, health and property of the Lab’s employees, patients and visitors.
We only collect images from the public areas of the Lab, without any excessive violation of privacy.
04. RECIPIENTS OF THE PERSONAL DATA
The data collected through the CCTV system are kept in a digital file, which is located in a special area and which is accessible only by authorized personnel. This material is not transmitted to third parties except in the following cases: i) to the competent judicial, prosecutorial and police authorities when it contains information necessary for the investigation of a criminal offense concerning persons or property of the controller, ii) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, during the exercise of their duties και iii) to the victim or perpetrator of a criminal offense, in the case of data which may be evidence of the offense.
05. TIME PERIOD OF STORAGE OF THE PERSONAL DATA
The data recorded in the system are stored for 15 working days, after which they are automatically deleted and it is impossible to retrieve them. If we are aware of an illegal incident, we will maintain the specific record in a separate file for 1 month, in order to investigate it and initiate legal proceedings for the defense of our legitimate interests. If the incident concerns a third party, we can keep the specific record in a separate file for 3 months.
06. RIGHTS IN RELATION TO THE PERSONAL DATA
You can exercise the following rights regarding the processing of your personal data:
Right of access
You have the right to know if we process your image and request a copy of it.
Right to erasure («right to be forgotten»)
You have the right to request the erasure of your personal data
Right to restriction of processing
You have the right to request the restriction of processing of your personal data
• When their accuracy is contested by you and until we make their relevant verification
• Alternatively, instead of their erasure
• When they are no longer necessary for the processing purposes for which we have collected them, but they are required by you for the establishment, exercise or defense of legal claims
• When you object to their processing and until it is verified that there are legitimate reasons for such processing by the Lab
Right to object
You have the right to object to the processing of your personal data when it is based on a legitimate interest
[Please note that in the typical cases of video-surveillance systems the rights of access, erasure, restriction and object apply. The rest of the data subjects’ rights may apply only in exceptional cases].
You may exercise your above-mentioned rights as well as pose any question, complaint or ask other information regarding the processing of your personal data, by contacting email@example.com or the contact details mentioned in Paragraph 1.
In order to investigate a request regarding your image, you must specify the date and approximate time of the recording, as well as the relevant area of the Lab. This way you facilitate the investigation of your own data while you also contribute to the prevention of the reveal of other people’s data. Alternatively, we offer you the possibility to come to our facilities to show you the images in which you appear. We also note that exercising the right of objection or erasure does not imply the immediate erasure of data or the modification of the processing. In any case, we will reply to you in detail as soon as possible, within the time set by the GDPR.
07. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) on matters concerning the processing of your personal data.
08. LAST UPDATE
This policy may be updated from time to time.
This current version is effective since 09.06.2020