1. Processor:

Responsible for processing your image data collected through the video surveillance system is the company LANAKAM S.A. (Address: Leoforos Mesogeion 2- 4, Athens 11527 phone: 2107771033)

2. Purpose of processing and legal basis:

We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for the purposes of legal interests that we seek as a controller (article 6 par. 1. f ΓΚΠΔ).

3. Analysis of legal interests

Our legal interest is the need to protect our property and the goods located in it from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health as well as the property of staff, our customers and third parties in the area under surveillance. We only collect image data and limit the download to places where we have assessed that there is an increased possibility of committing illegal acts e.g. theft, as in our cash registers and at the entrance, without focusing on places where the privacy of the persons being photographed may be severely restricted, including their right to respect for personal data.

4. Recipients

The kept material is accessible only by our competent / authorized personnel who oversee the security of the space. We may need to share your personal data with our partners for the purpose of closed-circuit operation / technical support. In any case, we bind our partners with a personal data protection contract in order to take the appropriate measures to protect the security and confidentiality of personal data. We may also need to forward this material (a) to the competent judicial, prosecutorial and police authorities when it contains information necessary to investigate a criminal offense involving persons or property of the controller, (b) to the competent judicial, prosecutorial and police authorities when requesting data, lawfully, in the performance of their duties, and (c) to the victim or perpetrator of a crime, in the case of data which may constitute evidence of the act.

Your personal data is not transferred outside the European Union.

5. Record keeping time

We keep the data collected from the closed-circuit television for fifteen (15) days. After this period, the recordings stored on the CCTV system hard disk are automatically deleted. In the event that during this period we find an incident to the detriment of a person or property within the store, we isolate part of the video and keep it for thirty (30) days, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns a third party, we will keep the video for three (3) months.

6. Rights of data subjects

Data subjects have the following rights:

• Right of access: you have the right to know if we are processing your image and, if applicable, to receive a copy.

• Restriction right: you have the right to ask us to restrict processing, such as not deleting data that you deem necessary to establish, exercise or support legal claims.

• Right of correction: you have the right to request the correction of any inaccurate personal information we hold about you.

• Right to object: you have the right to object to the processing.

• Right to delete: you have the right to request that we delete your data.

You can exercise your rights by sending an e-mail to, dpo@lanakam.gr or a letter to our postal address or by submitting the request to us in person, at the address of the store. To consider a request related to your image, you should tell us about when you were within range of the cameras and give us a photo of you to make it easier for us to locate and hide your personal data. Alternatively, we give you the opportunity to come to our facilities to show you the images in which you appear. We also point out that the exercise of the right of objection or deletion does not imply the immediate deletion of data or the modification of the processing, if there are overriding legal interests. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GCP.

Identity check: We inform you that in order to protect the confidentiality of your data, we will ask you to verify your identity before responding to any request you make. If you have authorized a third party to submit a request on your behalf, we will ask them to prove that they have your permission to act for this purpose.

7. Right to file a complaint

In case you are not satisfied with the way your personal data is processed and you consider that the current national or European regulatory framework for the protection of personal data is violated, you have the right to file a complaint to the Personal Data Protection Authority, Leoforos Mesogeion 2 - 4, 115 27, Athens, dpo@lanakam.gr , tel. 2107771033.