Information on the processing of personal data through a video surveillance system (CCTV).

1. Data Controller

SAINT-GOBAIN SEKURIT SERVICE HELLAS SINGLE-MEMBER S.A., with its registered office in the Municipality of Alimos, Attica, Greece, G.E.MI. No. 057541504000, hereby informs you, in its capacity as Data Controller, pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”) and the applicable provisions of Greek data protection legislation, about the type of personal data it collects, the source of such data, the purpose and legal basis of its collection and processing, any recipients thereof, the retention period, as well as your rights in relation to your personal data and how you may exercise them.

2. Purpose of Processing and Legal Basis

We use a surveillance system for the purpose of protecting individuals and property. Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller (Article 6(1)(f) GDPR).

3. Legitimate Interest Assessment

Our legitimate interest consists of the need to protect our premises and the assets located therein from unlawful acts, such as theft. The same applies to the protection of the life, physical integrity, health, and property of our employees and third parties lawfully present within the monitored areas.

We collect only image data and limit recording to areas where we have assessed there to be an increased likelihood of unlawful acts, such as theft, including the company's facility gates and surrounding areas, office entrances, warehouse entrances, and production lines. We do not focus on areas where individuals' privacy could be excessively compromised, including their right to the protection of personal data.

We collect only image data relating to our employees and third parties, including customers, partners, and visitors, who are lawfully present within the monitored areas.

4. Recipients

Access to recorded footage is granted only to our competent and authorized personnel responsible for the security of our facilities.

The recorded material is not disclosed to third parties, except in the following cases:

a) To competent judicial, prosecutorial, and police authorities when it contains information necessary for the investigation of a criminal offense affecting persons or property belonging to the Data Controller.

b) To competent judicial, prosecutorial, and police authorities when they lawfully request such data in the performance of their duties.

c) To the victim or perpetrator of a criminal offense, where the data may constitute evidence of such offense.

5. Retention Period

We retain recorded data for fifteen (15) days, after which it is automatically deleted.

If an incident is identified during this period, the relevant portion of the footage is isolated and retained for up to one (1) month for the purpose of investigating the incident and initiating legal proceedings to protect our legitimate interests. Where the incident concerns a third party, the footage may be retained for up to an additional three (3) months.

6. Rights of Data Subjects

Data subjects have the following rights:

  • Right of Access: You have the right to know whether we process your image and, if so, to obtain a copy of it.
  • Right to Restriction of Processing: You have the right to request that we restrict processing, for example, by preventing the deletion of data that you consider necessary for the establishment, exercise, or defense of legal claims.
  • Right to Object: You have the right to object to the processing.
  • Right to Erasure: You have the right to request the deletion of your personal data.

You may exercise your rights by sending an email to the Data Protection Officer (DPO) at:

privacycontact.Greece@saint-gobain.com

In order to examine a request relating to your image, you should specify approximately when you were within the range of the cameras and provide us with a photograph of yourself to assist us in identifying your data and masking the data of other individuals appearing in the footage.

Alternatively, you may visit our premises, where we can show you the images in which you appear.

Please note that exercising the right to object or the right to erasure does not automatically result in the immediate deletion of data or modification of the processing. In all cases, we will provide a detailed response as soon as possible and within the deadlines prescribed by the GDPR.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data violates Regulation (EU) 2016/679 (GDPR), you have the right to lodge a complaint with a supervisory authority.

The competent supervisory authority in Greece is:

Hellenic Data Protection Authority (HDPA)
1–3 Kifisias Avenue
115 23 Athens, Greece
Website: https://www.dpa.gr/
Telephone: +30 210 647 5600