Video Surveillance Data Protection Notice

Below we inform you about the processing of personal data through a video surveillance system.

  1. Controller:

    “UHY ALPHA”, 75 Patision Str., 10434 Athens, tel. +30 210 8211754

  2. Purpose of processing and legal basis:

    We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for the purposes of the legitimate interests pursued by us as a controller (Article 6 par. 1. f GDPR).

  3. Analysis of legal interests – Why do we collect personal data?

    Our legal interest is the necessity to protect the building as well as our property and information located or stored on the premises from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health as well as the property of our staff and third parties legally located in the area under surveillance. We collect only image data and limit the capture to areas where there is an increased likelihood of illegal activity, without focusing on areas where may restrict severely the private life of person who their image is captured, including their right for respect of personal data.

  4. Recipients

    The recording material is accessible only by our competent / authorized personnel who are in charge for this purpose. This material will not be transferred to third parties, except in the following cases: a) to the competent judicial, prosecution and police authorities when contains information necessary to investigate a criminal offense involving persons or property of the controller, b) to the competent judicial, prosecution and police authorities in case they request data, lawfully, during the performance of their duties, and c) to the victim or perpetrator of a criminal act, in the case of data which may constitute evidence of the act.

  5. Retention Period

    We keep the data for fifteen (15) days, after the lapse of this period, they are automatically deleted. In case we notice an incident during this period, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns a third party we will keep the video for up to three (3) more months.

  6. Rights of the data subjects

    Data subjects have the following rights:Right to data portability: you have the right to obtain from us confirmation as to whether or not image concerning you is being processed, and, where that is the case, you have the right to receive a copy (article 15 GDPR).

    • Right of restriction: you have the right to obtain from us restriction of processing under conditions (article 18 GDPR).
    • Right to object: you have the right to object to the processing (article 21GDPR) as well as apply for asking us do not delete data that you deem necessary to establish, exercise or support legal claims.
    • Right to delete: you have the right to request the deletion of your data under conditions (article 17 GDPR).

      You can exercise your rights by sending e-mail to the address or a letter to our postal address. To consider a request related to your image, you should tell us approximately when you were within range of the cameras and give us a picture of you to make it easier for us to locate your data and hide the data of third parties pictured. We also note that exercising the right of objection or deletion does not imply the immediate deletion of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.

  7. Right to file a complaint

    In case you consider that the processing of the data concerning you violates the General Data Protection Regulation (EU) 2016/679, you have the right to file a complaint to a supervisory authority. Competent supervisory authority for Greece is the Data Protection Authority, Kifissias 1-3, 115 23, Athens,, tel. +30 210 6475600.