1. Data Controller:
The Company with the name "Public Electricity Company Anonyme" (and distinctive title PPC SA)., headquartered in Athens, Chalkokondyli 30, P.C. 10432, hereinafter "Company") hereby informs, in its capacity as data controller, in accordance with Regulation (EU) 2016/679 (hereinafter "GDPR") and the relevant provisions of Greek legislation on the protection of personal data, as applicable, about the type of personal data it collects, the source of their collection, the reason for their collection and processing, any recipients thereof, their retention period, any transfer outside the EU. as well as about your rights in relation to your data and how you can exercise them, when using video surveillance systems.
2. Purpose of processing and legal basis:
We use video surveillance systems for the purpose of protecting persons (employees, visitors, customers, partners), facilities and goods.
The processing is necessary for the purposes of legitimate interests pursued by us as Data Controller (GDPR, Article 6, paragraph 1. f). Our legitimate interest consists in the need to protect the facilities and goods located therein from illegal acts, such as, for example, theft. The same applies to the safety of life, physical integrity, health and property of our personnel and third parties located in the monitored area.
Furthermore, video surveillance systems operate in facilities for the purpose of complying with the Company's legal obligations, such as, for example, the protection of areas in which systems are installed, which process communication data and require increased protection in accordance with the applicable regulatory framework.
The recording is limited to areas that we have assessed as having an increased probability of committing illegal acts, e.g. theft, such as entry/exit areas, shops, power plant facilities, parking lots, system installation areas, without focusing on areas where the privacy of the persons whose image is being taken may be excessively restricted, including their right to respect for personal data.
3. Data type and data subject categories
We collect image data of our employees and third parties, customers, visitors and partners, who are in the monitored area.
4. Recipients
The stored surveillance material is accessible only by the competent / authorised personnel responsible for the security of the facilities and authorised partners who provide technical support services for the video surveillance systems.
Access to video surveillance material, in real time, is provided to security personnel as well as to Store Managers and Production Unit Managers, to the extent this is necessary for the fulfillment of their duties.
This material is not transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes information necessary for the investigation of a criminal act, which concerns persons or goods of the controller, b) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, in the exercise of their duties, and c) to the victim or perpetrator of a criminal act, when it concerns data that may constitute evidence of the act.
5. Data retention period
We retain the data for a period of up to fifteen (15) days, after which it is automatically deleted. In the event that we detect an incident during this period, we isolate part of the video and retain it, with the aim of investigating the incident and initiating legal proceedings to defend our legitimate interests or the interests of a third party.
6. Data Subjects Rights
Data subjects have the following rights:
You can exercise your rights by sending an e-mail to dpo.office@dei.gr or a letter to our postal address or by submitting the request to us in person at our company address [30 Chalkokondyli, 10432 Athens]. Please note that in case there are reasonable doubts about the identity of the data subject, we may request additional information to confirm the identity.
In order to evaluate a request related to your image, you will need to specify to us approximately when you were within the range of the cameras and provide us with an image of you, in order to facilitate our identification of your data and the concealment of the data of third parties depicted. Alternatively, we give you the opportunity to come to our premises to show you the images in which you appear. We also point out that exercising the right to object or delete does not imply the immediate deletion of data or modification of the processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the GDPR.
Our website has detected that you are using an outdated browser that will prevent you from accessing certain features.
In order to improve your browsing experience we strongly recommend you use the links below to update to one of the following modern browsers.
