Physical Premises & Facilities
CCTV Privacy Notice and Physical Signage
Last Updated: 27 October 2026
This policy sets the rules for video surveillance at offices.com.gr business premises to protect people and property. It is applied together with the GDPR (EU 2016/679), Greek law and guidance from the Hellenic Data Protection Authority (HDPA).
1. Data Controller and Contact
The data controller for the CCTV system is Emmanuel Chatzakis. For information or to exercise your rights, email info@offices.com.gr or write to Emmanuel Chatzakis, c/o PARAGON Consulting Services E.E., 91Γ Alexandrou Papanastasiou Ave., 714 09 Heraklion, Crete, Greece.
2. Purpose and Legal Basis
The purpose is to protect people, premises and property and investigate specific security incidents. The legal basis is the business’s legitimate interest under Article 6(1)(f) GDPR, where surveillance is necessary and proportionate and the interests have been balanced against individual rights. Entering the premises is not treated as consent.
3. Camera Coverage and Restrictions
In standard office premises, coverage must be limited to necessary entrance and exit points. This policy does not permit general monitoring of corridors, reception workstations, private offices or coworking desks. A camera near an entrance must focus on access, not on people’s ongoing work.
Recording is not allowed in meeting rooms, the Multipurpose Room, toilets or their entrance areas, rest areas or other private spaces. Audio recording, employee performance monitoring and facial recognition are not permitted. Coverage must not extend to neighbouring premises or public streets without a specific lawful basis.
Signs at each location must identify the monitored area before people enter it. Ask management for the specific camera coverage and retention period.
4. Retention
Footage is kept only for a necessary, documented period and is deleted automatically. The general maximum is fifteen (15) days. A shorter period applies when sufficient for the purpose or required for the particular location.
Following a security incident, a lawful authority request or a valid restriction request, only the relevant extract may be preserved for the lawful period needed for investigation or legal claims. This does not justify extending retention of the whole archive.
5. Access, Recipients and Security
Access is limited to authorised people for security purposes and, where needed, technical providers subject to confidentiality and appropriate contractual safeguards. Footage is disclosed to authorities or other recipients only on a specific lawful basis. It is not published or made freely available for viewing by clients or third parties.
Any use of services outside the EEA requires the safeguards in Chapter V GDPR and specific information for affected people. This policy does not allow automated decisions or profiling based on footage.
6. Your Rights and Complaints
You may request information and access and, where the legal conditions are met, erasure or restriction. You may object to processing based on legitimate interests. Rights are assessed alongside the rights of others and any lawful need to preserve footage.
Include the location, date and approximate time so the footage can be identified before deletion. Proportionate identity checks may be needed. Access is provided while protecting other people’s images. We respond within one month, subject to a lawful extension notified in time.
You may complain to the Hellenic Data Protection Authority. See also our Customer Privacy Policy and the HDPA guidance on video surveillance.
7. Physical Signage and On-Site Information
A clear sign must be visible before entering a monitored area. It must show a camera symbol, the purpose, controller, key information about rights and how to access the full notice. Publishing this page does not replace a physical sign. Its location and wording must match actual camera coverage and operation.
Core sign information: Video surveillance to protect people and property · Controller: Emmanuel Chatzakis · Contact: info@offices.com.gr, +30 2810 320 579 · Legal basis: legitimate interests · Retention up to 15 days, subject to the conditions in this policy · Access and objection rights, and other rights where legal conditions are met · Full notice: offices.com.gr, Legal, CCTV Policy.
The full notice must also be available in a suitable non-digital format on request. A sign does not make otherwise prohibited recording lawful.
