Video surveillance notice

Notice regarding the processing of personal data through the video surveillance system

1. 1. Data Controller:
      BIKE IT EΕ, Leof. Meg. Alexandrou 2, Thessaloniki 546 40, tel: 2310888920
      
      
   2. Purpose of processing and legal basis:
      We use a surveillance system for the purpose of protecting individuals and goods. Processing is necessary for the purposes of legitimate interests pursued by us as a controller (Article 6(1)(f) GDPR).

• Analysis of legitimate interests
  Οur legitimate interest lies in the need to protect our premises and the assets found there from unlawful acts, such as theft. The same applies to the security of the life, physical integrity, health and property of our staff and third parties lawfully present on the premises. We only collect image data and limit the capture to areas where we have assessed that there is an increased likelihood of committing illegal acts e.g. theft, such as at our counters and at the entrance, without focusing on areas where the privacy of the persons whose image is taken may be overly restricted, including their right to respect τheir personal data.
  
  

• Recipients
  The stored material is accessible only by our authorised personnel who are in charge of the security of the premises. This material shall not be transmitted to third parties, except in the following cases: a) to the authorised judicial, prosecutorial and police authorities when it contains data necessary for the investigation of a criminal act involving individuals or assets of the controller, b) to the authorised judicial, prosecutorial and police authorities when they request data lawfully in the exercise of their duties, and c) to the victim or perpetrator of a criminal act, when it concerns data which may constitute evidence of a criminal act.

• Data retention period
  We store the data for three (3) days, after which they are automatically deleted. In case we detect an incident during this period, we will isolate part of the video and retain it for up to one (1) more month in order to investigate the incident and initiate legal proceedings to defend our legitimate interests, while if the incident concerns a third party we will retain the video for up to three (3) more months.

• Rights of data subjects
  

Data subjects have the following rights:

• Right of access: you have the right to learn whether we are processing your image and, if so, to receive a copy of it.
• Right to restriction: you have the right to ask us to restrict processing, such as not deleting data that you consider necessary for the establishment, exercise or support of legal claims.
• Right to object: you have the right to object to processing.
• Right to erasure: you have the right to request us to erase your data.
  
  You can exercise your rights by sending an e-mail to info@bikeitrentals.com or by submitting the request to us in person, at the address of the store. In order for us to process a request related to your image, you will need to identify approximately when you were in the range of the cameras and provide us with an image of you to help us identify your own data and hide the data of third parties featured. 

Alternatively, we give you the option of visiting our premises to identify the images in which you appear. Please note that exercising the right of objection or erasure does not imply the immediate erasure of data or the modification of processing. In any case, we will reply to you in detail as soon as possible, within the time limits defined by the GDPR.

• Right to lodge a complaint

If you believe that the processing of your data violates Regulation (EU) 2016/679, you have the right to lodge a complaint to a supervisory authority.

The authorised supervisory authority in Greece is the Data Protection Authority, Kifissia 1-3, 115 23, Athens, Greece, https://www.dpa.gr/, tel. +30 2106475600