Video Surveillance System
Information on the processing of personal data via video surveillance (CCTV)
Attiki Natural Gas Distribution Company (EDA Attikis Single Member S.A.) 11 Sofokli Venizelou & Serron Str., Postal Code 14123
Lykovrysi, tel. 2130882000
We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for the purposes of legitimate interests pursued by us as controller (Article 6 (1)(f) GDPR).
Our legitimate interest consists in our need to protect our premises and the goods located therein from unlawful acts, such as theft. Likewise, the same applies to the safety of life, physical integrity, health and property of our staff and third parties lawfully present in the premises under surveillance. We collect only image data and limit the capture in areas where we have assessed that there is an increased likelihood of unlawful acts being committed, such as at the entrance to the facilities (Lykovrysi and Metamorfosi) and their surroundings, at hubs where third parties enter, and at substations, without focusing on areas where the privacy of the persons whose image is taken may be unduly restricted, including their right to respect for personal data.
The stored data is accessible only to the competent/authorised personnel responsible for the security of the site. In particular, the security of the site, under a specific contract, has been entrusted to qualified security staff of a third-party company. This hardware is not passed on to third parties, except in the following cases: (a) to the competent judicial, prosecutorial and police authorities when it contains data necessary for the investigation of a criminal offence involving persons or property of the controller; (b) to the competent judicial, prosecutorial and police authorities when they lawfully request data in the exercise of their duties; and (c) to the victim or perpetrator of a criminal offence when it concerns data which may constitute evidence of the offence.
We store the data for up to fifteen (15) days, after which they are automatically deleted. In the event that during this period we detect an incident,
we isolate part of the video and keep it for up to one (1) month more, in order to investigate the incident and initiate legal proceedings to defend our legitimate interests, while in case the incident concerns a third party we will keep the video for up to three (3) months more.
Data subjects have the following rights:
- Right of access: Υou have the right to know whether we are processing your image and, insofar as this is the case, receive a copy of it.
- Right to restriction: You have the right to request that we restrict processing, such as not deleting data that you consider necessary for the establishment, exercise or support of legal claims.
- Right to object: Υou have the right to object your processing
- Right to erasure: Υou have the right to request that we erase your data
You can exercise your rights by filling in the relevant form posted on the company website by sending it by e-mail to compliance@edaattikis.gr or by writing to our postal address or by submitting the request to us in person, at the store’s address. In order for us to process a request related to your image, you will need to tell us approximately when you were in range of the cameras and provide us with an image of you to help us identify your data and hide the data of third-party subjects. We also indicate that the exercise of the right to object or erasure does not imply the immediate deletion of data or the modification of processing. In any circumstances, we will reply to you in detail as soon as possible, within the time limits set by the GDPR.
In case you deem that the processing of your data infringes Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Greece is the Data Protection Authority, 1-3 Kifisias Avenue, Postal Code 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.