CCTV Systems Notice

Notice on the processing of personal data through the Closed-Circuit Television (CCTV) systems installed on the premises of VIOLOGIKO CHORIO S.A.

1. Data Controller:

The Company “VIOLOGIKO CHORIO ANONYMI ETAIREIA”, distinctive title: “VIOLOGIKO CHORIO A.E.” with registered offices in the Municipality of Glyfada at 83 Grigoriou Lampraki Str., P. C. 16675, Attica, Greece (hereinafter referred to as the “Company”), tel. (+30) 2114002101, e-mail: dpo@biologikoxorio.gr.

2. Purpose of processing and legal basis:

We use CCTV surveillance systems for the purpose of protecting people and goods. Processing is necessary for the purposes of the legitimate interests pursued by the Company (Article 6 par. 1. (f) GDPR).

3. Analysis of legitimate interests

The Company has installed and operates Closed Circuit Television (CCTV) systems in its 25 stores [https://www.biologikoxorio.gr/en/stores], in order to protect people and goods, as well as premises and critical infrastructure. Specifically, by monitoring the premises of the Company's stores and warehouses, we protect products, raw materials, electromechanical equipment, vehicles, building infrastructure, machinery, IT systems and generally the Company's facilities and equipment. This measure safeguards against property crime (theft, robbery, vandalism and other damage, acts of terrorism), natural disasters (floods, fire, etc.), accidents and any other risk, as well as it protects life, health, physical integrity, property and safety in general of the Company's human resources (personnel) and third parties (customers/ suppliers/ visitors) who are legally present in the monitored area, from possible dangers, attacks, accidents, injuries, criminal acts, natural phenomena and any form of endangerment of the fundamental rights of the individual.

We only collect image data and limit the recording to areas where we have assessed that there is an increased chance of committing illegal acts or occurrence of accidents and disasters, without focusing on areas where the privacy of the persons being recorded may be severely restricted, including their right to respect for personal data.

4. Recipients

The recordings are accessible only by our Company's authorized personnel in charge of site security.

The recordings shall not be forwarded to third parties, except in the following cases:

1. a) to the competent judicial, prosecuting and police authorities when they contain information necessary for the investigation of an offence, which concerns people or goods of the Data Controller,

(b) to the competent judicial, prosecuting and police authorities when requesting data, lawfully, in the exercise of their duties, and

(c) to the victim or the perpetrator of a criminal act, when the recordings may constitute evidence of the act.

5. Retention period

We store the data for up to fifteen (15) days, after which it is automatically deleted. In case we find an incident that has occurred during this period, we isolate the crucial part of the video and keep it for up to one (1) month extra, for the purpose of investigating the incident and initiating legal proceedings to defend our legitimate interests. If the incident concerns a third party, we will keep the video recordings for up to three (3) more months.

6. Data Subjects’ rights

Data subjects have the following rights:

• Right of access: you have the right to know if we are processing your image and, if so, to receive a copy of it.
• Right to restriction of processing: you have the right to ask us to restrict processing, such as not erasing data that you deem necessary to establish, exercise or support legal claims.
• Right to object: you have the right to object to the processing.
• Right to erasure: you have the right to request the erasure of your personal data.

Το exercise your rights you may a) post a registered letter to the company “VIOLOGIKO CHORIO A.E.”, address 83 Grigoriou Lampraki Str., Glyfada, P.C. 16675, Attica, Greece; b) sumbit a request to us in person, at the aforementioned address; c) send an e-mail at dpo@biologikoxorio.gr.

In order for us to process a request related to your image, you will need to tell us approximately when you were within range of a CCTV system and provide us a picture of you to help us find your data and hide the data of third parties. Alternatively, you may come to our facilities to show you the images in which you appear. We also note that the exercise of the right of objection or erasure does not cause the immediate erasure of data or the modification of the processing. In any case, we will reply in detail as soon as possible, within the deadlines set by Regulation (EU) 2016/679 (GDPR).

7. Right to lodge a complaint

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint to a supervisory authority. Competent supervisory authority for Greece is the Hellenic Data Protection Authority, 1-3, Kifisias Ave., P.C. 11523, Athens, https://www.dpa.gr/, tel. (+30) 2106475600.

8. Data Protection Officer

The Company has appointed Mr. Stefanos Andriakopoulos as Data Protection Officer (DPO), e-mail: dpo@biologikoxorio.gr.