Special briefing on the processing of personal data through video surveillance system.

1. Controller:

ACS Postal Services S.A. based in 36-38 Petrou Ralli Str, Egaleo, email: info@acscourier.gr, tel .: 211 5005000 & 2108190000, website: www.acscourier.gr, as legally represented.

2. Purpose of processing and lawful basis:

We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for purposes of legal interests that we seek as a controller (GDPR article 6 par. 1).

3. Analysis of legal interests:

Our legal interest lies in the need to protect our space and the goods located in it from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health as well as the property of our staff and third parties legally located in the area under surveillance. We only collect image data and limit the surveillance to places where we have assessed that there is an increased possibility of committing illegal acts e.g., theft, as in our cash registers and at the entrance, without focusing on places where the privacy of the persons being recorded may be severely restricted, including their right to respect personal data.

4. Access:

The stored material is accessible only by our competent / authorized personnel in charge of the security of the space. This material shall not be passed on to third parties without the consent of the subject, except in the following cases: (a) to the competent judicial, prosecutorial and police authorities when it contains information necessary for the investigation of a criminal act involving persons or property of the controller (b) to the competent judicial, prosecutorial and police authorities when requesting data lawfully, during the performance of their duties, and (c) to the victim or perpetrator of a criminal act in the case of data which may constitute evidence of the act.

5. Storage period:

We keep the data for up to fifteen (15) days, after which they are automatically deleted. In the event that during this period we find an incident, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal procedures to defend our legal interests, while if the incident concerns a third party, we will keep the video for up to three (3) more months.

6. Rights of data subjects:

Data Subjects have the following rights:

• Right to access: you have the right to know if we are processing your image and, if so, to receive a copy of it
• Right to restriction: you have the right to ask us to restrict processing, such as not deleting data that you deem necessary to establish, exercise or support legal claims.
• Right to object: you have the right to object to processing.
• Right to erasure: have the right to request that we delete your data.

You can exercise your rights by sending an email to: dataprotection@acscourier.gr. You can contact the Data Protection Officer (DPO) at email: dpo@acscourier.gr, or by letter to our postal address or by submitting your request to us. To consider a request related to your image, you should tell us approximately when you were within the range of the cameras and give us a photo of yours to make it easier for us to locate you and hide the personal data of third parties in the footage. Alternatively, we give you the ability to come to our facilities to show you the images in which you appear. We also note that exercising the right to object or delete does not imply the immediate deletion of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.

7. Right to file a complaint:

You have the right to file a complaint to the supervisory authority in case you consider that the processing of the data concerning you violates the EU Regulation 2016/679.

The supervisory authority in Greece is the Hellenic Data Protection Authority.