Information on the Processing of Personal Data through video surveillance system (CCTV)
Data Controller:
Euroclinic Group of companies, “GENIKI KLINIKI, DIAGNOSTIKO THERAPEUTIKO CHEIROURGIKO KENTRO – EUROKLINIKI ATHINON ANONYMI ETAIREIA” (“Euroclinic Athens”), located at 7-9, Athanasiadou street in Athens, and registered in the Greek Chamber of Commerce under the No: 000278101000 / Tax Identification Number: 094028438) or/and Private Diagnostic Center “EUROKLINIKI – SIMEIO D.Y.O. – IDIOTIKO POLYIATREIO IATRIKI MONOPROSOPI I.K.E.” (“SIMEIO DYO – POLYIATREIO”), located at 24th Tsoha Street in Athens, and registered in the Greek Chamber of Commerce under the No: 140474201000 / Tax Identification Number: 800773883).
Categories of Personal Data / Purpose – Legal basis for processing:
Euroclinic Group processes your personal data (image data) collected through the operation of a video surveillance system (CCTV), when you enter the facilities of Euroclinic Group where a CCTV system is operated, for purposes of safety and protection of property and of individuals, of safety and protection of life and physical integrity of our staff, of patients, of visitors and of third parties who are lawfully present in the supervised area, as well as of the facilities and property of Euroclinic Group and third parties from unlawful acts. Euroclinic Group limits the video capture only to areas deemed necessary to achieve the above purposes (e.g. entry/exit points of persons and vehicles, cash desk areas, areas of critical infrastructure such as electromechanical installations, server rooms, etc.) and the cameras in use are not installed in areas where their installation and use would excessively restrict the privacy of the individuals whose image is being taken, including their right to the protection of personal data. The legal basis of the processing is the legitimate interests of Euroclinic Group as Data Controller, according to the GDPR, Article 6, par. 1 (f).
Recipients:
Your personal data collected through the CCTV System is processed solely by the competent and authorized staff of Euroclinic Group, such as security staff, system operators, who are bound by confidentiality and privacy obligations in the performance of their duties and is not disclosed to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities in the context of investigating a criminal act (e.g. theft, assault) concerning individuals or property of the Data Controller and/or when such authorities legally request data in the performance of their duties and b) in the case the personal data may constitute evidence of a criminal offence, to the person depicted as the victim or perpetrator of a criminal act.
Retention Period:
We keep the data for a period of fifteen (15) business days, after which they are deleted. In the event of an incident (theft, robbery, assault etc.) affecting individuals or property of the Data Controller, your data may be retained for up to thirty (30) days˙ if the incident concerns a third party, your data may be retained for up to three (3) months.
Data Subject Rights:
Regarding your personal data, you can exercise the following rights, by sending an e-mail to the e-mail address: dataprivacy@euroclinic.gr or by submitting a written request to Euroclinic Group in person or through your legally authorized representative or by sending the request by post, with your authenticated signature:
- Right of information and right of access: you have the right to be informed whether we process your image data, the purposes of the processing, the recipients of your data and the retention period of your data, as well as the right to receive a copy of your image data that are being processed.
- Right to restriction: you have the right to request us to limit processing, such as not to delete data that you consider necessary for legal claims.
- Right to object: you have the right to object to the processing of your image through the video surveillance system and to request the erasure of your data.
- You have the right to file a complaint to the Hellenic Data Protection Authority (HDPA), dpa.gr.
Data Protection Officer Details:
For any clarification or complaint regarding the processing of your personal data, please contact the Data Protection Officer of our Group: dataprivacy@euroclinic.gr