1. Data processor:
Company: Athens Metropolitan Expo SA; address: Athens International Airport “Eleftherios Venizelos”, Building 603A, PC: 19019; region: Spata; tel.: 0030 210 3542905

2. Purpose of processing and legal basis:
We use a surveillance system for the purpose of protecting people and assets. Processing is necessary for the purposes of the legitimate interests we pursue as a controller (Article 6, para. 1(f) GDPR).

3. Analysis of legitimate interests
Our legitimate interest consists in the need to protect our premises and the assets located in it against illegal acts, including, but not limited to, theft. This also applies for the protection of life, physical integrity, health, as well as the property of our staff and third parties who are legally present in the premises under surveillance. We only collect image data and limit recording to premises where we have assessed that there is an increased likelihood of unlawful acts, without focusing on areas where the privacy of the persons may be severely restricted, including their right to personal data respect.

4. Recipients
Video surveillance is performed only by our competent/authorized personnel responsible for the premises safety.

5. Data subject’s rights
Data subjects shall have the following rights:
• Right of access: you have the right to know whether or not we process your image and, if so, obtain a copy of it.
• Right to restriction: you have the right to ask us to restrict any processing.
• Right to object: you have the right to oppose processing, if applicable.
• Right to erasure: you have the right to request, if possible, that we delete your data.

You may exercise your rights by sending an e-mail to info@metropolitanexpo.gr or a letter to our mailing address or by submitting the request to us in person at our address. We also note that the exercise of the right to object or delete does not incur immediate modification of the video surveillance. In any event, we will respond to you as soon as possible, within the deadlines set by the GDPR.

6. Right to lodge a complaint
If you consider that the processing of your data infringes Regulation (EU) 2016/679, you are entitled to lodge a complaint with a supervisory authority.
The competent supervisory authority in Greece is the Data Protection Authority, 1-3 Kifissias St., 115
23, Athens, https://www.dpa.gr/, τηλ. 2106475600.