CCTV Information on personal data processing through a video surveillance system
Metlen Energy & Metals S.A., 8 Artemidos Street, GR-15125 Maroussi, Tel. 210 6877300
We use a surveillance system for the purpose of protecting people and goods. Processing is necessary for the purposes of the legitimate interests pursued as controller (Article 6, para. 1f of GDPR).
Our legitimate interest means the need to protect our premises and the goods located thereof against illegal acts, including, but not limited to, theft. The above statement also applies for the protection of life, physical integrity, health and property of our staff and third parties who are legally present in the premises under surveillance. We only collect image data and limit recording to premises where we have assessed that there is an increased likelihood of unlawful acts, such as theft, such as our coffers, for entry and for buildings perimeter, without focusing on areas where the privacy of the persons whose image is being captured may be severely restricted, including their right to personal data respect. We also collect image data from indoor areas such as garages, stairwells and reception areas only during non-working hours and days.
The kept material can only be accessed by our competent / authorized personnel responsible for the premises safety. This material shall not be transferred to third parties, except in the following cases: (a) to the competent judicial, prosecution and police authorities if it contains information necessary for the investigation of a criminal offense concerning persons or commodities of the controller; (b) to the competent judicial, prosecution and police authorities when requesting data, lawfully, in the exercise of their functions; (c) to the victim or the offender of a criminal offense, in the case of data likely to constitute evidence of the offense; and (d) to external partner with limited access in case of software support.
We retain data for fourteen (14) days; upon lapse of this period, data are automatically deleted. Should an incident be observed during that time, we isolate part of the video and keep it for up to one (1) month longer, to investigate the incident and initiate legal proceedings to defend our legitimate interests; if the incident involves a third party, we will keep the video for up to three (3) months more.
Data subjects shall have the following rights:
You may exercise your rights by sending an e-mail to DPO@metlengroup.com or a letter to our mailing address or by submitting the request to us in person at the address of the branch or office premises for the attention of DPO. To review a request related to your image, you should determine approximately the time when you were within the range of the cameras and provide us with a picture of you to help us identify your data and to hide the data of depicted third-parties. We also note that the exercise of the right to object or delete does not incur immediate deletion of data or modification of processing. In any event, we will respond in detail to you as soon as possible, within the deadlines set by the GDPR.
The competent authority is the Hellenic Data Protection Authority. You have the right to appeal to the Data Protection Authority for issues relating to the processing of your personal data. For the competence of the Authority and how to submit a complaint, you can visit its website (www.dpa.gr > My rights > Submit a complaint), where there is detailed information
