Privacy Notice on the processing of personal data through a video surveillance system
Data controller
Kyriakides Georgopoulos Law Firm is a law firm incorporated in Greece, registered under the Athens Bar Association number 080009, with head offices at 28 Dimitriou Soutsou Street, 11521 Athens, Greece, telephone: +30 210 817 1500 (hereinafter referred to as ‘KG’).
Purpose of processing and legal basis
The video surveillance system is used for the purpose of protecting persons and property. The processing is necessary for the purposes of the legitimate interests pursued by KG as the data controller [Article 6(1)(f) of the General Data Protection Regulation (EU) 2016/679 – hereinafter the ‘GDPR’].
Analysis of legitimate interests
KG’s legitimate interest lies in the need to protect its premises and the goods located therein from unlawful acts, such as, for example, theft, damage to third-party property, or assault. The same applies to the safety of life, physical integrity, health and property of staff and third parties lawfully present on the premises. Video recording concerns only visual data, not audio, and is limited to areas assessed as presenting an increased likelihood of unlawful acts, such as at entry/exit points, without the cameras focusing on areas where this might unduly restrict the privacy of the individuals recorded, including their right to the protection of personal data.
Recipients
The footage is accessible only to KG’s authorised administrative staff and to those responsible for the security and safety of the premises (security guards). This footage is not disclosed to third parties, except in the following cases: (a) to the competent judicial, prosecuting and police authorities where it contains information necessary for the investigation of a criminal offence involving persons or property of the data controller; (b) to the competent judicial, prosecuting and police authorities when they lawfully request data in the course of their duties; and (c) to the victim or perpetrator of a criminal offence, where the data may constitute evidence of the offence.
KG does not transfer your data outside the European Economic Area.
Retention period
The cameras enable live streaming and video recording. The recorded data is stored for fourteen (14) days, after which it is securely deleted. Should an incident occur during this period, a section of the video is isolated and retained for up to one (1) additional month, for the purpose of investigating the incident and initiating legal proceedings to defend KG’s legitimate interests, whilst if the incident involves a third party, the video is retained for up to an additional three (3) months.
Rights of data subjects
Data subjects have, depending on the circumstances, the following rights:
- Right of access: you have the right to find out whether your images are being processed by KG and, if so, to receive a copy of them.
- Right to restriction of processing: you have the right to request that the processing of your data be restricted, for example by asking that your data not be erased where you consider it necessary for the establishment, exercise or defence of legal claims.
- Right to object: you have the right to object to the processing.
- Right to erasure: you have the right to request the erasure of your data.
You may exercise your rights by contacting KG at the e-mail address kgprivacy@kglawfirm.gr. If you submit a request relating to your images, you must specify the approximate time you were within range of the cameras and provide a photograph of yourself, to help KG locate the footage showing you and blur any third parties who also appear in it. Alternatively, you may visit the KG premises to view the images in which you appear. Please note that exercising your right to object or the right to erasure does not entail the immediate erasure of data or the modification of the processing. In any event, you will receive a detailed response to your request as soon as possible, within the time limits set out in the GDPR.
Right to lodge a complaint with the supervisory authority
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifisias ave, 115 23, Athens, on its website: www.dpa.gr, or call 210 647 5600.
Last Updated 14/10/2026