1. Controller:

ATRON HEALTH, LESVOU 2, GALATSI, 11147, TEL.: 2102134774

2. The purpose of the processing and the legal basis:

We have placed CCTV cameras up at some of our venues to monitor specific areas for security and safety purposes of persons and property. The processing is necessary for purposes of legitimate interests that we seek as the Controller (article 6 §. 1. f GDPR).

3. Legitimate interest

Our legitimate interest is to control the access to the building and to ensure the security of the building, the safety of our staff and visitors, as well as property and information located or stored on the premises. We collect just images caught on camera, and no voice is recorded. The CCTV system is not used for any other purpose, such as to monitor the work of employees or their attendance. The CCTV system covers only areas where we have assessed that there is an increased likelihood of committing illegal acts, like entry points inside the building and server.

4. Recipients of the data

The images can be accessed by our security staff members and by the contracted security company Ι.Ε.Π.Υ.Α.-Τ.S.C.M.ΥΠ. ATHANASIOS LAPPAS.

In certain circumstances we may be required to disclose CCTV images to certain bodies of authority, such as the police and emergency services.

5. Retention period

We will keep your personal data for fifteen (15) calendar days after your visit to our premises. After that period any CCTV recorded footage is automatically deleted. In case we find an incident during this period, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns thirdly we will keep the video for up to three (3) more months.

6. Rights of the data subject

As a data subject, you have the right of access (in order to know the purposes of the processing and the recipients of the data), the right to restrict processing, the right to object, the right to erasure.

You have the right to exercise your rights by sending an email request to ef@atronhealth.gr, or by sending letter to our postal address.

To consider a request related to your image, you should tell us about when you were within the range of our cameras and give us a picture of you, in order to locate your data and hide the data of third parties pictured. Alternatively, we give you the opportunity to come to our facilities to show you the images in which you appear. We also note that the exercise of the right of objection or deletion does not imply the immediate deletion of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.

7. Complaint to the Hellenic DPA

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifissias 1-3, PC 115 23, Athens, Greece, Telephone: +30-210 6475600, Ε-mail: contact@dpa.gr, https://www.dpa.gr.