INFORMATION ON THE PROCESSING OF PERSONAL DATA THROUGH CLOSED CIRCUIT TELEVISION (CCTV)
Please be informed that a closed circuit video surveillance (CCTV) system is in operation in the premises of the Mesogeios & Medialyse Nephrology Centres, through which images of patients, visitors and employees are recorded in the public areas of the Centres' facilities. Ther recording is carried out in accordance with the provisions of the legislation in force.
1. PERSONS RESPONSIBLE FOR PROCESSING - CONTACT DETAILS
Mediterranean Holiday Dialysis Centre S.A. (distinctive title: MESOGEIOS S.A.)
(hereinafter referred to as "Mesogeios Nephrology Centres Group")
Address: Kalessa Gazi, Heraklion, Crete, P.C. 714 14
Telephone: +302810371560
E-mail: info@mesogeios.gr
MEDIALYSE DIALYSIS CENTRES S.A. (distinctive title: MEDIALYSE S.A.)
(hereafter referred to as the : “Mesogeios Nephrology Centres Group”)
Address: Municipality of Malevizi, Community of Kalessa Gazi, Heraklion, Crete, P.C. 71500,
Phone: +302810371560
E-mail: info@mesogeios.gr
- DATA PROTECTION OFFICER
For issues relating to the processing and in general management of personal data, please contact the Group's Data Protection Officer (DPO), Mrs Ioanna Gallou, email: dpo@mesogeios.gr
3. PURPOSE & LEGAL BASIS OF PROCESSING
We use a video surveillance system for the purpose of security and protection of individuals and property.
The legal basis of this processing is the protection of the legitimate interests of the Group and the Centres, in accordance with Article 6 par. 1-f. of the General Data Protection Regulation (EU) 2016/679.
Our legitimate interest means the protection of the premises and the goods located therein from unlawful acts, but not limited to, such as, theft or unprovoked destruction. In addition, we must safeguard the safety of life, physical integrity, health and property of employees, patients and visitors to the Centres.
Only image data from the public areas of the Centres (inside and outside) are collected, without any excessive invasion of privacy.
4. RECIPIENTS OF PERSONAL DATA
The data collected through the operation of the video-surveillance system are kept in an electronic file, which is installed in a special area of each Centre and to which only our competent and authorised staff have access. This material shall not be transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes data essential for the investigation of a criminal offence involving persons or goods of the controller; b) to the competent judicial, prosecutorial and police authorities when they lawfully request data in the exercise of their duties; and c) to the victim or perpetrator of a criminal offence when it concerns data which may constitute evidence of a criminal offence.
The video surveillance system of the Mesogeios Centres of P. Faliro, Chaidari, Chalkida and Kalamata and the Medialyse Evosmos Centre is accessed by a private security company, which acts as our subcontractor (processor) and has undertaken a commitment to the Mesogeios Group to maintain confidentiality and implement appropriate technical and organisational measures to ensure the protection of personal data.
- PERIOD OF DATA RETENTION
The data recorded in the system are kept for 15 working days, after which they are automatically deleted and cannot be recovered. If we become aware of an illegal incident, we will keep the specific recording in a separate file for 1 month, in order to investigate it and initiate legal proceedings to defend our legitimate interests. In case the incident involves a third party, we may keep this record in a separate file for 3 months.
6. RIGHTS OF THE SUBJECTS IN RELATION TO THEIR PERSONAL DATA
With regard to the processing of your personal data, you may exercise the following rights:
Right of access
You have the right to know whether we are processing your image and receive a copy of it.
Right to deletion ("right to be forgotten")
You have the right to request the deletion of your personal data
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data
-when its accuracy is contested and until it is verified
-alternatively, instead of deletion
-when it is no longer necessary for the processing purposes for which we collected it, but it is necessary for the establishment, exercise or support of legal claims by you
-when you object to their processing and until it is verified that there are legitimate grounds for such processing by the Laboratory
Right to object to processing
You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interest
[Please note that in typical cases of video surveillance systems the rights of access, restriction, opposition and deletion apply, while in exceptional cases the other rights of the subject of data may also apply].
To exercise the above rights and for any query, complaint or other information regarding the processing of your personal data, you may contact us at dpo@mesogeios.gr or at the contact details in the 1st paragraph.
In order for us to consider a request relating to your image, you must specify the date and approximate time of the recording of your data, as well as the location of the Centre where the recording, which concerns the exercise of your right, took place, so as to facilitate the identification of your own data on the one hand, and on the other hand to contribute to the concealment of the data of third persons depicted. Alternatively, we offer you the possibility to come to our premises so that we can show you the images in which you appear. We also point out that the exercise of a right to objection or deletion does not entail the immediate deletion of data or the modification of processing. In any case, we will reply to you in detail as soon as possible, within the time limits set by the GDPR.
7. RIGHTS OF COMPLAINT TO THE DATA PROTECTION AUTHORITY (DPA)
You have the right to lodge a complaint with the Personal Data Protection Authority (www.dpa.gr) regarding issues relating to the processing of your personal data.
8. LATEST POLICY UPDATE
This policy may be updated from time to time.
This latest version is effective from 15.03.2024.