Privacy Notice For Personal Data Processing

The company “doValue Greece, Loans and Credits Claim Management Société Anonyme” (hereinafter “doValue Greece” or the “Company”), with its registered seat in 27 Str. Kyprou and Archimidous, Moschato 18346 with GEMI No. 121602601000 and distinctive title “doValue Greece”, is the Data Controller, pursuant to EU General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and applicable Law 4624/2019, of your personal data processed through the video surveillance system and the visitor registry of the Company’s visitors entering Company premises. This Privacy Notice is provided in order to inform you on the personal data collected by the Company when entering our Company’s premises.

The Company collects image and video data of visitors and employees who enter the premises of the Company through the video surveillance system.

The Company collects also personal data in the context of the visitor registry maintenance, which are the identification data of whoever enters the premises of the Company, namely the full name and the number of your identity card or any other identification document (such as passport).

DoValue Greece uses the video surveillance system and keeps a visitors’ registry, which contains your identification data when entering doValue Greece premises, for the protection of its people and assets. This processing is necessary for the purposes of Company’s legitimate interests pursued as a Data Controller (article 6(1) (f) GDPR).

The legitimate interest of the Company consists of the need to protect the premises and its assets from illegal actions, such as theft.

Moreover, the Company aims to protect life, physical integrity, health and property of the personnel and third parties who are lawfully located in our premises.

In the context of the aforementioned:

• a) With the use of video surveillance system, we collect solely image and video data and the processing is limited to areas with an increasing risk that illegal actions can be committed (e.g. theft), such as at the entrance of the premises. Consequently, there is no monitoring of areas where the privacy of the natural persons whose image is collected would be excessively violated.
• b) While entering doValue Greece’s premises, only the minimum necessary identification data is collected.

i) The video surveillance footage is accessible only by authorized personnel that provide security services, as well as the competent personnel of the security company that is assigned the monitoring and protection of the premises. It is noted that the aforementioned security company for the video surveillance operations, acts as the data processor on behalf of doValue Greece.

Furthermore, this footage is retained in electronic form by a data storage service provider. This footage is not transferred to third parties, except in the following cases:

• a) to competent judicial, prosecutorial and police authorities when the footage provides evidence that is necessary for the investigation of an illegal action, that affects people or goods of the data controller,
• b) to competent judicial, prosecutorial and police authorities when they submit a request for data within the context of exrcising their duties and
• c) to the victim or the perpetrator of an illegal act, when this data may constitute evidence of proof.

ii) Your identification data provided for your entrance in our premises, i.e. your full name and number of your identity card or any other identification document (e.g. passport), is collected on behalf of us by the same security company, according to the aforementioned (i), without further transfer to third parties.

Our Company has implemented all appropriate organizational and technical measures, pursuant to applicable legal framework and standards in order to safeguard that the processing of your data either by the Company or by any third party is lawful, appropriate and secured against any unauthorized or accidental access, process, deletion, alteration or any other use of such data.

i) The video surveillance footage is retained for fifteen (15) days. Upon the expiration of this period, the data is automatically deleted. In case we realize that an incident has occurred within this period, we shall proceed with the separate storage of this part of the video and we keep it further for up to thirty (30) days, in order for the Company to further investigate the incident and evaluate the initiation of any legal actions for the defense of our legitimate interests. In case the incident is related to third parties, the footage will be retained for up to three (3) additional months.

ii) Your identification data when entering the premises as visitor are retained in a physical file, for the period of six (6) months. Upon expiration of this period, the physical files shall be securely destroyed.

According to applicable legislation, you, as the data subject subject, have the following rights:

a) Right of access: you have the right to be informed about the processing of your image or identification data and if this is the case, to receive a copy of your data;

b) Right to restriction: you have the right to request the restriction of processing;

c) Right to erasure: you have the right to request the deletion of your data;

d) Right to object: you have the right to object to the processing of your data;

You may exercise the aforementioned rights by sending an email at [email protected] or by writing a letter to the address of the Customer Service and Complaints Management Unit at 27 Kyprou and Archimidous Str., 18346, Moschato.

Our Company is committed to replying to your request within one (1) month, upon receipt of the request. This deadline might be extended for two (2) additional months, in case your request is excessive or complicated.

In order for us to examine a request that refers to your image, you should inform us about the approximate day and time you were within the range of the video surveillance and provide us with your image, in order to find your personal data and protect any other third party data that have been captured. Alternatively, we give you the option of visiting us in our premises to show you the respective footage.

You may contact doValue Greece’s Data Protection Officer for issues concerning the processing of your personal data at the address 27 Kyprou and Archimidous Str., Moschato, 18346 or via email at [email protected].

In case you consider that the processing of your personal data violates in any way the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with the competent Data Protection Authority.

The competent Data Protection Authority for Greece is the Hellenic Data Protection Authority, 1-3 Kifissias, 1125 23 Athens, https://www.dpa.gr/, tel. 2106475600.

Find out about the performance of temperature control using infrared thermal imaging cameras when entering the premises of doValue Greece.