INFORMATION REGARDING CCTV

1. DATA CONTROLLER:

AFRICA MOROCCO LINK, headquartered in Angle Avenue Oujda and Avenue Tantan, Propriete dite Perla Oficinas, 11eme etage, TANGER - MOROCCO e-mail: aml@aml.ma.

2. DATA PROTECTION OFFICER:

PISTIOLIS – TRIANTAFYLLOS & ASSOCIATES LAW FIRM, ANDERSEN LEGAL, Greece, email: dpo@attica-group.com

3. PURPOSE AND LEGAL BASIS OF THE DATA PROCESSING:

We use closed-circuit television (CCTV) in order to protect premises, ships, natural persons or/and goods (security). The processing is necessary for the purposes of the legitimate interests we pursue as a data controller (article 6 para. 1. (f) GDPR) and / or a statutory obligation in this regard to take measures for the protection of space (e.g. obligation of owner, ship-owner, etc.), as each time this arises or is imposed by applicable law.

4. LEGAL INTERESTS

Our legal interest is the need to protect our premises as detailed above and the goods included against illegal actions, such as, indicatively, thefts. We also need to ensure life safety, physical integrity, health as well as the property of our staff and of third parties lawfully located in the areas under surveillance. We only collect image data and limit the surveillance to places where we have previously assessed that there is an increased possibility of illegal actions e.g. such as thefts, on the cashiers, or in the entrance, without focusing on places where privacy of the persons captured by the CCTV may be severely restricted, including their right to respect of their personal data.

5. RECIPIENTS

The material held is accessible only by our competent / authorized personnel who is in charge of security of the premises as detailed above. This material shall not be disclosed to third parties without the consent of the data subject, except in the following cases: (a) to the competent judicial, prosecutorial and police authorities when it contains information necessary to investigate a criminal offense involving persons or goods of the data controller; (b) to the competent judicial, prosecutorial and police authorities when lawfully requesting data in the performance of their duties, and (c) to the victim or perpetrator of a criminal offense, in the case of data which may constitute evidence of the offense.

6. DATA RETENTION

We keep the data of the building premises for ten (10) days, following which they are automatically deleted. In the ships, we keep the data for as long as it is provided by the Safety Regulations and in accordance with the principles of proportionality and minimization for a time period not exceeding fifteen (15) days. In the event that during these periods an incident occurs, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns third parties, we will keep the video for up to three (3) more months. In particular, it is pointed out that, in the case of video surveillance systems installed on ships, some of them monitor the movements of individuals in real time, without storing and recording the data received.

7. DATA SUBJECTS’ RIGHTS

Data subjects have the following rights:

You may exercise your rights by sending an e-mail to dpo@attica-group.com or a letter to our postal address 1-7, Lysikratous Street & Evripidou Street, GR-17674, Kallithea or by submitting the request to us in person, at the address of the company. To examine a request related to your image, you should tell us when you were within the range of the cameras and give us a picture of you to facilitate us to locate your data and hide the data of third parties pictured. Alternatively, we give you the opportunity to come to our facilities to show you the images in which you appear. Moreover, we would like you to note that exercising the right to object or the right to erasure does not imply the immediate erasure of data or the modification of the processing. In any case, we will answer you in detail as soon as possible, within the deadlines set by the GDPR.

8. RIGHT TO LODGE A COMPLAINT

In case you consider that the processing of your data violates Regulation (EU) 2016/679, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Greece is the Hellenic Data Protection Authority, Kifisias Avenue 1-3, 11523, Athens, https://www.dpa.gr/, telephone number +302106475600.