Controller’ details:
The HFSF bearing the name Hellenic Financial Stability Fund (and distinctive title HFSF) established in Athens (street Panepistimiou Str., no. 10, zip code 105 64 tel. 21 5560 6900 e-mail: info@hfsf.gr), (hereinafter referred to as “HFSF“) hereby informs you, as the controller, in accordance with Regulation (EU) 2016/679 (hereinafter “GDPR”) and the relevant provisions of Greek legislation on the protection of personal data, as applicable, on the type of personal data collected, the source of their collection, the reason for their collection and processing, any recipients thereof, the time of their retention, their possible transfer outside the EU and your rights in relation to your data and how you can exercise them.
Purpose of processing and legal basis:
We use a surveillance system for the purpose of protecting persons and property. Processing is necessary for the purposes of legitimate interests we pursue as a controller (Article 6(1) in the General Regulation (EU) 2016/679, hereinafter referred to as GDPR).
Our legitimate interest is the need to protect our premises and property from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health and property of our staff and third parties legally present in the supervised area. We limit reception in places we assessed that there is an increased likelihood of unlawful acts e.g. theft, such as in our cashiers and entrances, without focusing on places where the privacy of the persons monitored may be excessively restricted, including their right to respect for personal data.
Data type and categories of data subjects
We collect only image data of our employees and third parties, customers and visitors who are legally present in the supervised area.
Recipients
The material held is accessible only to our responsible/authorized personnel in charge of the safety of the site. Such material shall not be transferred to third parties, except in the following cases: a) to the competent judicial, prosecutor and police authorities when it contains information necessary for the investigation of a criminal offence concerning persons or property of the controller; (b) to the competent judicial, prosecutor and police authorities when requesting data lawfully in the course of their duties; and (c) to the victim or perpetrator of a criminal offence, in the case of data which may constitute evidence of the offence.
Data retention time
We keep the data for seven (7) days, after which they are automatically deleted. If during this time we find an incident, we isolate part of the video and keep it up to one (1) month, with a view to investigating the incident and initiating legal proceedings to defend our legitimate interests, while if the incident concerns a third party we will keep the video for up to three (3) months.
Rights of data subjects
Data subjects shall have the following rights:
- Right of access: you have the right to know if we are processing your image and, if so, to obtain a copy of it.
- Right to restriction: you have the right to ask us to restrict the processing, for example not to delete data that you consider necessary to establish, exercise or support legal claims.
- Right to object: you have the right to object to processing.
- Right to erasure: you have the right to request that we delete your data.
You can exercise your rights by sending an e-mail to dpo@hfsf.gr. It is noted that in case there are reasonable doubts concerning the identity of the data subject, we might request the provision of additional information necessary to confirm the identity.
The table below lists your rights based on the purpose of the processing and a corresponding legal basis. In this table you will find detailed information (concept, method and time limits) and form for the exercise of each right.
| PURPOSE | LEGAL BASIS | Access (15) | Erasure (17) | Restriction (18) | Objection (21) |
| Video surveillance for the protection of persons and goods | Overriding legitimate interest (6.1f) | Χ | Χ | Χ | Χ |
In order to consider a request related to your image, you will need to determine when you were about in the range of the cameras and give us a picture of you, so as to make it easier for us to locate your own data and hide the data of third-party persons. Alternatively, we give you the opportunity to come to our premises to show you the images in which you appear. We also note that the exercise of the right to object or erasure does not entail the immediate deletion of data or modification of the processing. In any case we will reply in detail as soon as possible within the deadlines set by the GDPR.
Right to file a complaint
In case you consider that the processing of your data is in breach of the GDPR, you have the right to file a complaint with a supervisory authority.
The competent supervisory authority for Greece is the Data Protection Authority, Kifissias 1-3, 115 23, Athens, https://www.dpa.gr/ tel. 2106475600.