CCTV Policy

Information on the processing of personal data through a video surveillance system

  1. Processor
    MICROBASE PC, 14, Iteas str.,Argiroupolis, 164 52, Athens, Greece, Tel. +30 212 000 5300
  2. Purpose of processing and legal basis:
    We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for the purposes of legal interests, as a controller (article 6 par. 1. f GKPD).
  3. Analysis of legal interests
    Our legal interest consists in the need to protect our space and the assets located in it from illegal acts, such as theft. The same applies to the safety of life, physical integrity, health as well as the property of our staff and third parties legally located in the area under surveillance. We only collect image data and limit the surveillance to areas where we have assessed that there is an increased chance of committing illegal acts e.g. theft, as at the entrances, without focusing on places where the privacy of the persons being photographed may be severely restricted, including their right to respect for personal data.
  4. Recipients
    The surveillance material is accessible only by our competent / authorized personnel who oversee the security of the space. This material shall not be passed on to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it contains information necessary for the investigation of a criminal offense involving persons or property of the controller b) competent judicial, prosecutorial and police authorities when requesting data, lawfully, in the performance of their duties, and (c) to the victim or perpetrator of a crime, in the case of data which may constitute evidence of the act.
  5. Compliance time
    We keep the data for fifteen (15) days, after which they are automatically deleted. In the event that during this period we find an incident, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns thirdly we will keep the video for up to three (3) more months.
  6. Rights of data subjects
    You can exercise your rights by sending an e-mail to the address or a letter to our postal address or by submitting the request to us in person, at the address of the store. In order to process a request related to your image, you must tell us approximately when you were within range of the cameras and come to our facility to show you the images in which you appear. We also note that the exercise of the right of objection or deletion does not imply the immediate deletion of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.
    Data subjects have the following rights:

    • Right of access: you have the right to know if we are processing your image and, if applicable, to receive a copy.
    • Restriction right: you have the right to ask us to restrict processing, such as not deleting data that you deem necessary to establish, exercise or support legal claims.
    • Right to object: you have the right to object to the processing.
    • Right to delete: you have the right to request your data to be erased.
  7. Right to file a complaint
    In case you consider that the processing of the data concerning you violates Regulation (EU) 2016/679, you have the right to file a complaint to a supervisory authority.Competent supervisory authority for Greece is the Data Protection Authority, Kifissias 1-3, 115 23, Athens,, tel. +302106475600.