1. Data Controller
ELVALHALCOR HELLENIC COPPER AND ALUMINIUM INDUSTRY S.A., (hereinafter referred to as "ELVALHALCOR”) sited in 2-4 Mesogeion Ave., Athens Tower, Building B, 11525, Athens, Greece, controls your personal data that is being processed by using a CCTV surveillance system..
2. Purpose of Processing and Legal Basis
The legal basis for this processing is the legitimate interest of the company, according to Article 6. 1. f of GDPR. Specifically, we use a CCTV surveillance system for the protection of persons and assets, including health & safety reasons. In cases of CCTV surveillance systems, whose purpose is the overview of the correct operation of our equipment, as well as the quality of manufactured products, the image capture is not intended for the processing of personal data.
3. Data Recipients
Data collected and processed through CCTV systems is accessible only by our authorized personnel in charge of ELVALHALCOR’s physical security and of the aforementioned responsibilities. This data is not shared or transferred to any third party, exempt in the case of competent judicial, prosecutorial and police authorities when legally requesting data in the performance of their duties.
4. Data Retention
We retain the data for fifteen (15) days, after which they are automatically deleted. In case of an incident during this period, we isolate part of the video and keep it for up to one (1) more month, to investigate the incident, while if the incident concerns third parties, we will keep the video for up to three (3) more months, according to the applicable legislation.
5. Your rights as Data Subjects
Please be informed that you have the following rights:
- Right of access: you have the right to know if we are processing your personal data and, if so, to obtain a copy.
- Right to Restriction of processing: you have the right to ask us to restrict the processing, such as not deleting data that you deem necessary to establish, exercise or support legal claims.
- Right to object: you have the right to object to the processing.
- Right to Erasure: you have the right to request that we delete your data.
You can exercise your rights by sending an e-mail to privacy@elvalhalcor.com or by letter to our postal address or by submitting the request to us in person at ELVALHALCOR’s address. For us to examine a datasubject request related to your personal data, you need to indicatively determine the date that you have visited our facilities and provide us with identification information, to make it easier for us to locate your data. In any case, we will respond to you as soon as possible, within the deadlines set by the GDPR.
6. Right to lodge a complaint
In the case where you believe that we do not process your personal data lawfully according to the (ΕC) 2016/679, or we have not sufficiently addressed your rights as above, you are entitled to complain so to the Supervisory Authority of the country of your residence or of ELVALHALCOR. The Hellenic Data Protection Authority is the Supervisory Authority for ELVALHALCOR The contact details of the Supervisory Authority for ELVALHALCOR are:
Kifissias 1-3, PC 115 23, Athens, Greece
Tel.: +30 2106475600
Web: https://www.dpa.gr
Email: contact@dpa.gr