1. Data Controller 
ELKEME, Hellenic Research Centre for Metals S.A., situated on 61st km Athens – Lamia National Road, at Oinofyta, Voiotia, controls your personal data that is being processed by using a CCTV surveillance system. 

2. Purpose of Processing and Legal Basis 

The legal basis for this processing is the legitimate interest of the company, according to Article 6. 1. f of GDPR. Specifically, we use a CCTV surveillance system for the protection of persons and assets, including health & safety reasons. 

In cases of CCTV surveillance systems, whose purpose is the overview of the correct operation of our equipment, as well as the quality of manufactured products, the image capture is not intended for the processing of personal data. 

3. Data Recipients 

Data collected and processed through CCTV systems is accessible only by our authorized personnel in charge of ELKEME’s physical security and of the aforementioned responsibilities. This data is not shared or transferred to any third party, exempt in the case of competent judicial, prosecutorial and police authorities when legally requesting data in the performance of their duties. 

4. Data Retention 

We retain the data for fifteen (15) days, after which they are automatically deleted. In case of an incident during this period, we isolate part of the video and keep it for up to one (1) more month, to investigate the incident, while if the incident concerns third parties, we will keep the video for up to three (3) more months, according to the applicable legislation. 

5. Your rights as Data Subjects 

Please be informed that you have the following rights: 

• Right of access: you have the right to know if we are processing your personal data and, if so, to obtain a copy. 

• Right to Restriction of processing: you have the right to ask us to restrict the processing, such as not deleting data that you deem necessary to establish, exercise or support legal claims. 

• Right to object: you have the right to object to the processing. 

• Right to Erasure: you have the right to request that we delete your data. 

You can exercise your rights by sending an e-mail to privacy@elkeme.vionet.gr or by letter to our postal address or by submitting the request to us in person at ELKEME’s address. For us to examine a data subject request related to your personal data, you need to indicatively determine the date that you have visited our facilities and provide us with identification information, to make it easier for us to locate your data. In any case, we will respond to you as soon as possible, within the deadlines set by the GDPR. 

6. Right to lodge a complaint 

In the case where you believe that we do not process your personal data lawfully according to the (ΕC) 2016/679, or we have not sufficiently addressed your rights as above, you are entitled to complain so to the Supervisory Authority of the country of your residence or of ELKEME. 

The Hellenic Data Protection Authority is the Supervisory Authority for ELKEME 

The contact details of the Supervisory Authority for ELKEME are: 

Kifissias 1-3, PC 115 23, Athens, Greece 

Telephone: +30-210 6475600 

Web: www.dpa.gr 

Email: contact@dpa.gr