Video-Surveillance Policy

1. Data Controller:
Prisma Electronics S.A., 87 Demokratias Avenue, P.C. 681 32 Alexandroupolis,  Tel.:  +302551035013

2. Purpose of processing and legal basis:
We use a surveillance system to protect persons and property. This processing is necessary for the legitimate interests pursued by us as the controller (Article 6(1)(f) of the GDPR).

3. Analysis of legitimate interests
Our legitimate interest lies in protecting our premises and their contents from illegal acts, such as theft. The same applies to safeguarding the life, physical integrity, health and property of our staff and third parties who are legally present in the monitored area. We only collect image data and limit recording to areas where illegal acts are more likely to occur, such as at our cash registers and at the entrance. We do not focus on areas where capturing images of individuals may unduly restrict their right to privacy and their right to respect for personal data.

4. Recipients:
The stored material is accessible only to our competent and authorised personnel, who are responsible for the security of the premises. This material is not disclosed to third parties, except in the following cases:

a) to competent judicial, prosecuting and police authorities, if the material contains information necessary for investigating a criminal offence involving the data controller's persons or property;

b) to competent judicial, prosecuting and police authorities, if they lawfully request data in the course of their duties;

c) to the victim or perpetrator of a criminal offence, if the material contains data that may constitute evidence of the offence.

5. Retention period:
We retain data for seven days, after which it is automatically deleted. If an incident is detected during this period, part of the video is isolated and retained for up to one month longer for the purpose of investigating the incident and initiating legal proceedings to defend our legal interests. If the incident involves a third party, the video is kept for up to three months.

6. Data Subject Rights
Data subjects have the following rights:
The right of access: You have the right to know whether we are processing your data and, if so, to receive a copy of it.

• The right to restriction: You have the right to ask us to restrict processing. For example, you can ask us not to delete data that you consider necessary for the establishment, exercise or defence of legal claims.
• Right to object: You have the right to object to processing.
• Right to erasure: You have the right to request that we erase your data.

To exercise your rights, please send an email to This email address is being protected from spambots. You need JavaScript enabled to view it., write to us at our postal address or submit your request in person at our store. To enable us to review a request relating to your image, please specify when you were within the cameras' range and provide us with a picture of yourself to help us locate your data and obscure the identities of other people in the image.

Alternatively, you can visit our premises to view the images in which you appear. Please note that exercising your right to object or erasure does not imply the immediate erasure of data or modification of processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the GDPR.

7. Right to lodge a complaint
If you believe that the processing of your data violates Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority. For Greece, the competent supervisory authority is the Data Protection Authority at Kifissias 1-3, 115 23 Athens. You can contact them via their website at https://www.dpa.gr/ or by telephone on +302106475600.