1. Data Controller
European Cultural Centre of Delphi (E.C.C.D.) (Frynichou 9, Plaka, P.C. 105 58, tel: 210 3312781-5, email: [email protected])
2. Purpose of processing and legal basis:
The installation of the video surveillance system protects persons and goods. The processing is necessary for the legitimate interests pursued by the Center as Data Controller (Article 6 (1)(f) G.D.P.R.).
3. Legitimate interest analysis
Our legitimate interest consists in the obligation of the Center to protect its facilities and goods from illegal acts while ensuring the safety of life, physical integrity, health, and property of staff and visitors in the supervised area. Therefore, we only collect image data and limit the monitoring to places where we have assessed that there is an increased likelihood of unlawful acts, e.g., theft or destruction, without focusing on areas where the privacy of the persons may be unduly restricted, including their right to respect their data.
4. Recipients
The material kept is accessible only by our authorized personnel in charge of the site’s security. This material is not transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial, and police authorities when it contains data necessary for the investigation of a criminal offence concerning individuals or property of the Data Controller, b) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, in the exercise of their duties, and (c) to the victim or offender of a criminal offence, in the case of data which may constitute evidence of the offence.
5. Data Retention
We store the data for 15 days, after which they are automatically deleted. In case of an incident during this period, we isolate part of the video and keep it for up to one (1) more month to investigate the incident and initiate legal proceedings to defend our legal interests. If the incident concerns a third party, we shall keep the video for up to three (3) more months.
6. Rights of the individuals
Data subjects have the following rights:
- Right of access: you have the right to know if we are processing your image and, if so, to receive a copy.
- Right to restriction: you have the right to request us to restrict processing, such as not to delete data that you consider necessary for the establishment, exercise, or support of legal claims.
- Right to object: you have the right to object to the processing.
- Right to erasure: you can request that we delete your data.
You can exercise your rights by sending an e-mail to [email protected] address or a letter to our postal address Frynichou 9, P.C. 105 58, Athens, or by submitting the request yourself in person.
To examine a request related to your image, you must specify the period during which you were in the range of the system and provide us with a photo of you so that we can help identify your data and hide the data of third parties depicted. Alternatively, we allow you to visit our facilities where we can show you the images in which you appear. We also point out that exercising the right to object or delete does not imply the immediate deletion of data or the modification of processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the G.D.P.R.
7. Right to lodge a complaint
If you consider that your rights under the G.D.P.R. have been infringed due to the processing of your data, you have the right to complain to the supervisory authority. The competent supervisory authority for Greece is the Hellenic Data Protection Authority, Kifisias 1-3, 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.
If you consider that your rights under the G.D.P.R. have been infringed due to the processing of your data, you have the right to complain to the supervisory authority. The competent supervisory authority for Greece is the Hellenic Data Protection Authority, Kifisias 1-3, 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.
