INFORMATION REGARDING PERSONAL DATA PROCESSING VIA CLOSED-CIRCUIT TELEVISION (CCTV)
We hereby inform you that Medicon Hellas S.A. operates a closed-circuit television (CCTV) system on its premises, which records images of visitors and employees on a 24-hour basis at entrances (both internal and external) and in common areas of the Company. The recording is carried out in accordance with the provisions of the applicable legislation.
1. DATA PROCESSING RESPONSIBLE - CONTACT DETAILS
AUTOMATED DIAGNOSTIC ANALYZERS AND PRIVATE DIAGNOSTIC LABORATORIES MEDICON HELLAS ANONYMOUS COMPANY (trading as Medicon Hellas S.A.)
Address: Melitonas 5-7, Postal Code 15344, Gerakas Attica
Phone: (+30) 210-6606000
2. DATA PROTECTION OFFICER
For matters concerning the processing and general management of personal data, you can contact us at the email dpo@mediconsa.com.
3. PURPOSE & LEGAL BASIS OF PROCESSING
We use a video surveillance system for the purpose of security and protection of persons and property.
The legal basis for this processing is the defense of the legitimate interests of the Company, in accordance with Article 6(1)(f) of the General Data Protection Regulation (EU) 2016/679.
As the legal interest, we consider the protection of the premises and the property therein from unlawful acts, such as theft or unprovoked destruction. Additionally, we are obliged to safeguard the safety of life, physical integrity, health, and property of the Company's employees and visitors.
Only image data is collected from the Company's entrances (both internal and external), the parking area of the corporate fleet vehicles, and the Company's archive storage area, without any undue violation of privacy.
Medicon Hellas S.A. is committed and declares that under no circumstances will the data collected through the CCTV system be used to monitor the work of staff, assess efficiency, or evaluate the behavior of employees.
4. DATA RECIPIENTS
The data collected through the operation of the video surveillance system is kept in an electronic file, which is installed in a dedicated area of the Company and is accessible only to our authorized personnel.
This material is not disclosed to third parties, except in the following cases: a) to the competent judicial, prosecutorial, and police authorities when it includes information necessary for the investigation of a criminal offense involving persons or property of the data controller, b) to the competent judicial, prosecutorial, and police authorities when they lawfully request data in the exercise of their duties, and c) to the victim or perpetrator of a criminal offense, when the data may constitute evidence of the offense.
5. DATA RETENTION PERIOD
The data recorded in the system are kept for 4-5 calendar days, after which they are automatically deleted and cannot be retrieved. If we detect any unlawful incident, we will retain the specific recording in a separate file for 1 month for investigation purposes and to initiate legal proceedings to defend our legitimate interests. In cases involving third parties, we may retain the specific recording in a separate file for 3 months.
6. RIGHTS OF DATA SUBJECTS REGARDING THEIR PERSONAL DATA
Concerning the processing of your personal data, you can exercise the following rights:
• Right of access
You have the right to know if we are processing your image and to receive a copy of it.
• Right to erasure ("right to be forgotten")
You have the right to request the deletion of your personal data.
• Right to restrict processing
You have the right to request the restriction of the processing of your personal data:
- when you dispute their accuracy and until they are verified
-as an alternative to their deletion
-when they are no longer necessary for the purposes for which we collected them, but are required by you for the establishment, exercise, or defense of legal claims
-when you object to their processing and until it is verified that there are legitimate grounds for their processing by the Company.
• Right to object to processing
You have the right to object to the processing of your personal data when it is based on legitimate interest.
[It should be noted that in typical cases of video surveillance systems, the rights of access, restriction, objection, and deletion apply, while in exceptional cases, other data subject rights may also apply.]
To exercise the above rights and for any questions, complaints, or other information regarding the processing of your personal data, you can contact us at dpo@mediconsa.com or using the contact details provided in paragraph 1.
To examine a request related to your image, you need to specify the date and approximate time of the recording of your data, as well as the area of the Company where the recording took place, so that you facilitate the identification of your data and help obscure the data of other depicted individuals. Alternatively, we offer you the option to visit our premises to show you the images in which you appear.
Please note that exercising the right to object or delete does not imply immediate deletion of data or modification of processing. In any case, we will respond to you in detail as soon as possible, within the timeframes specified by the GDPR.
7. RIGHT TO LODGE A COMPLAINT WITH THE DATA PROTECTION AUTHORITY
You have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) regarding matters related to the processing of your personal data.
8. LAST POLICY UPDATE
This policy may be updated periodically.
The current version is effective as of 01/01/2024.