personal-data-video

Information on the processing of personal data through the video surveillance system

1.     Data Controller:

The company «COCA-COLA HBC SERVICES MEPE», 9 Fragoklissias street, 151 25, Maroussi, Attica, Greece, tel. 210-6183100

2.     Purposes of the video surveillance and legal basis:

We use the video surveillance system for security purposes and specifically for the purposes of protection of individuals, property and other company assets. This processing activity is necessary for the purposes of the legitimate interests pursued by the Controller (GDPR article 6 par. 1 (f)).

3.     Legitimate interests’ analysis

Our legitimate interests rely on the necessity to protect our premises and other company assets located therein against any illegal acts such as theft, vandalism etc. and to protect life and health of our employees and any other person being in our premises. We collect only image data, and the monitoring is restricted only in areas where, based on our assessment, there is an increased risk for illegal acts such as theft, without focusing in areas where the privacy of persons, including their right for respect of their personal data could be overly restricted.

4.     Recipients

Video footage is accessible only by competent/authorized personnel, responsible for the security of our premises. Video footage is not transmitted to any other third party, except in the following cases: a) to the competent judicial and law enforcement authorities when it contains information necessary for the investigation of a criminal offence, which relates to persons or property of the Controller, a) to the competent judicial and law enforcement authorities when requesting data, lawfully, in the performance of their duties, and (c) to the victim or perpetrator of a crime, in case of data which may constitute evidence of the act.

5.     Retention Period

The record of the footage is retained for a period of fifteen (15) days, after which it is automatically deleted. In case of an incident during this period, the data are being extracted and stored for a period of 1 month, to investigate the incident and initiate legal proceedings to defend our interests, while if the incident refers to a third party, the retention of the video footage can last up to three (3) months.

6.     Data Subject’s rights

Data subjects have the following rights:

• Right of access: you have the right to know if we are processing your image data and, if so, to obtain a copy of the part of the recording in which your image is captured.
• Right to restriction of processing: you have the right to request the restriction of the processing of your image data, such as not deleting data that you deem necessary to establish, exercise or support legal claims.
• Right to object: you have the right to object to the processing of your image data.
• Right to erasure: you have the right to ask us to erase your image data.

You may exercise your rights by sending an e-mail to the following e-mail address: DataProtectionOffice@cchellenic.com or a letter to our mail address or by submitting your request to us in person, at the address of our premises. In order to examine your request related to your image data, you need to indicate the time when you were under the scope of the cameras and provide us with a photo of yours, so we can locate your image data and hide the image data of other persons shown in the specific part of the recording. Alternatively, you may come to our premises, so we can show you the part of the recording in which your image is captured. We also note that exercising the right of objection or erasuere does not imply the immediate deletion of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.

7.     Right to lodge a complaint

In case you consider that the processing of your data violates (EU) Regulation 2016/679, you have the right to lodge a complaint to a supervisory authority.

Competent supervisory authority for Greece is the Data Protection Authority, Kifissias 1-3, 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.