1. Data Controller
The Company with the name "Public Electricity Company Anonyme" (and distinctive title PPC S.A., headquartered in Athens, Chalkokondyli 30, P.C. 10432, hereinafter "Company") hereby informs, in its capacity as data controller, in accordance with Regulation (EU) 2016/679 (hereinafter "GDPR") and the relevant provisions of Greek legislation on the protection of personal data, as applicable, about the type of personal data it collects, the source of their collection, the reason for their collection and processing, any recipients thereof, their retention period, any transfer outside the EU. as well as about your rights in relation to your data and how you can exercise them, when using video surveillance systems.
2. Purpose of processing and legal basis
We use a surveillance system to protect persons (employees, visitors, customers, partners), facilities and goods.
The processing is necessary for the purposes of legitimate interests that we pursue as a controller (Article 6 par. 1. f General Regulation (EU) 2016/679, hereinafter GDPR).
Our legitimate interest consists in the need to protect our premises, and the goods located therein from illegal acts, such as, for example, theft. The same applies to the safety of life, physical integrity, health and property of our staff and third parties located in the monitored area.
We limit reception to areas where we have assessed that there is an increased likelihood of illegal acts being committed, e.g. theft, such as entry/exit areas, shops, the Company's power generation unit facilities, parking lots, system installation areas, without focusing on areas where the privacy of the persons whose image is taken may be excessively restricted, including their right to respect for personal data.
The processing is necessary for the fulfillment of the Company's legal obligations, as the use of CCTV constitutes a best practice for ensuring issues such as (the compliance with security obligations, occupational safety and the protection of persons lawfully entering the Company's premises), but also the legitimate interests (such as the protection of goods, facilities, infrastructure, etc.) that the Company has and pursues as a controller (Article 6 par. 1. f GDPR).
3. Data type and data subject categories
We collect image data of our employees and third parties, customers, visitors and partners, who are in the monitored area.
4. Recipients
The stored material is accessible only by: I.
The material may be made available to authorized personnel in the context of the investigation of reports and/or security incidents.
This material is not transmitted to third parties, except in the following cases:
a) to the competent judicial, prosecutorial and police authorities when it includes information necessary for the investigation of a criminal act, which concerns persons or goods of the Company,
b) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, in the exercise of their duties, and
c) to the victim or perpetrator of a criminal act, when it concerns data that may constitute evidence of the act.
5. Data retention period
We retain the data for a period of up to fifteen (15) days, after which it is automatically deleted. In the event that we detect an incident during this period, we isolate part of the video and retain it, with the aim of investigating the incident and initiating legal proceedings to defend our legitimate interests or the interests of a third party.
6. Data Subjects Rights
Data subjects have the following rights:
You can exercise your rights by sending an e-mail to dpo.office@dei.gr or a letter to our postal address or by submitting the request to us in person at our company address [30 Chalkokondyli, 10432 Athens]. Please note that in case there are reasonable doubts about the identity of the data subject, we may request additional information to confirm the identity.
In order to evaluate a request related to your image, you will need to specify to us approximately when you were within the range of the cameras and provide us with an image of you, in order to facilitate our identification of your data and the concealment of the data of third parties depicted. Alternatively, we give you the opportunity to come to our premises to show you the images in which you appear. We also point out that exercising the right to object or delete does not imply the immediate deletion of data or modification of the processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the GDPR.
Our website has detected that you are using an outdated browser that will prevent you from accessing certain features.
In order to improve your browsing experience we strongly recommend you use the links below to update to one of the following modern browsers.
