CCTV Policy

Information regarding the processing of personal data via the CCTV system

1. Data controller:
Genesis Pharma S.A
Kifisias Avenue 270, postal code: 15232
Halandri – Athens
Telephone number: 2108771500
Email: info@genesispharma.com
Fax: 2106893877

2. Purpose and legal basis of the processing
We use the CCTV system to protect people and goods. The processing of CCTV data is necessary for the purpose of pursuing our legitimate interests as a Data Controller (article 6, paragraph 1 (f) GDPR).

3. Analysis of legitimate interests
Our legitimate interest is based on our need to protect our offices and storage places from illegal acts, such as theft and vandalism. We also aim to protect the lives, the physical integrity, the health and the property of our employees and third persons who legally enter the spaces under surveillance. We only collect video data and limit the video surveillance to spaces that we regard as elevated danger zones for the committing of illegal actions. The surveillance takes place at the perimeter and at the entrances of the buildings and not in spaces where the privacy of people could be restricted to a high extent.

4. Recipients
The recorded video data is only accessible by the authorized safety personnel. The data is not transferred to third parties, with the following exceptions:
Data can be transferred

To the responsible judge, district attorney or the police, in case it is needed for the investigation of a criminal action that is aimed against employees or goods of the Data Controller.
To the responsible judge, district attorney or the police for the fulfilment of their duties, when there is an official and legal request.
To the victim or the perpetrator of an illegal action, if it is likely that this data can be used as evidence for the action.

5. Storage time
We keep the recorded video data for fifteen (15) days. After this period the data is automatically erased. If, in this timeframe, there is an incident of illegal action, we will isolate this part of the video and will keep it for one more month, if this is necessary for further examinations and legal action for the protection of our vested interests. If the illegal action is aimed against a third person, we will keep the video for a maximum of three more months.

6. Data Subject rights
The data subjects have the following rights:

Right of access: You have the right to know if we process video data where you are visible and to receive a copy of this video data.
Right to restriction of processing: You have the right to request the restriction of processing. You can also request that we do not erase data that you consider as necessary for the support of any legal claim you might have.
Right to object: You have the right to object the processing of your personal data.
Right to erasure: You have the right to request that we erase your personal data.

You can exercise your rights by sending an email to dpo@genesispharma.com or a letter to our post address or you can personally deposit your request at our offices. In order for us to process a request that is connected with video footage, you will need to tell us when approximately you entered into the range of the cameras and give us a picture of you. With the help of your picture, we will locate you in the video footage and conceal the images of other people who might have been recorded in the video. You also have the possibility to come to our facilities and we will show you the video recording where you are visible. We would like to inform you that by exercising your rights to object or erasure, your data will not immediately be erased and the processing not immediately modified. We will give you a detailed answer to your request as soon as possible and within the time limits defined in the GDPR.

7. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority. The responsible supervisory authority in Greece is the Hellenic Data Protection Authority, Kifisias Avenue 1-3, 11523, Athens, https://www.dpa.gr/ , phone number: +302106475600.