Information on the processing of personal data through a video surveillance system

  1. Data Controller:


The company with the name “INTRAPOWER SINGLE MEMBER SOCIETE ANONYME ENERGY PROJECTS INFRASTRUCTURE MAINTENANCE AND REPAIRS PRIVATE COMPANY OF SECURITY SERVICES” with the distinctive name “INTRAPOWER” and its registered office at Chalandri Attiki, Kalogrezas 47 & Solomou 0 , 15232 Athens, email: [email protected], tel: 210-6753451 website:


  1. The purpose of processing and legal basis:


We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for the purposes of legitimate interests pursued by us as a controller (Article 6(1)(f) GDPR).


  1. Analysis of legitimate interests


Our legitimate interest consists in the need to protect our premises and the goods located therein from unlawful acts, such as, but not limited to, theft. The same applies to the security of the life, physical integrity, health and property of our staff and third parties lawfully present in the premises. We only collect image data and limit the collection to places where we have assessed that there is an increased likelihood of illegal acts being committed, without focusing on places where the privacy of the persons whose image is taken may be unduly restricted, including their right to respect for their personal data.


  1. Recipients


The material held is only accessible by our competent/authorised staff tasked with site security. This material is not transmitted to third parties without the consent of the subject, except in the following cases: (a) to the competent judicial, prosecutorial and police authorities when it contains data necessary for the investigation of a criminal offence involving persons or property of the controller; (b) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, in the exercise of their duties; and (c) to the victim or perpetrator of a criminal offence, when it concerns data which may constitute evidence of the offence.


  1. Compliance time


We keep the data for fifteen (15) days, after which they are automatically deleted. In the event that during this period we detect an incident, we isolate part of the video and keep it for up to one (1) month more, in order to investigate the incident and initiate legal proceedings to defend our legitimate interests, while if the incident concerns a third party we will keep the video for up to three (3) months more.


  1. Rights of data subjects


Data subjects have the following rights:


– Right of access: you have the right to know whether we are processing your image and, if so, to receive a copy of it.

– Right to restriction: you have the right to ask us to restrict processing, such as not deleting data that you consider necessary for the establishment, exercise or maintenance of legal claims.

– Right to object: you have the right to object to processing.

– Right to erasure: you have the right to request that we erase your data.


You can exercise your rights by sending an e-mail to [email protected]

 or by calling us on 210-6753451 or by submitting the request to us in person, at our Company’s address of establishment. In order for us to consider a request related to your image, you will need to identify approximately when you were in range of the cameras and provide us with an image of you to assist us in identifying your own data and concealing the data of third-party depicted persons. Alternatively, we give you the option of coming to our premises to show you the images in which you appear. We also point out that exercising the right to object or erasure does not imply the immediate deletion of data or the modification of processing. In any case, we will reply to you in detail as soon as possible, within the time limits set by the GDPR.