1. Data controller:

Mykonos Municipal Port Authority (M.P.A. Mykonos), with VAT number 099558788, New Port of Mykonos, Tourlos, P.C. 84600, e – mail: info@mykonosports.gr, tel. 22890 28933.

2. Purpose of processing and legal basis:

We use a video surveillance system for the purpose of ensuring the security of the area within the cruise ship mooring zone and protecting the facilities of M.P.A. Mykonos, passengers and goods. The processing is necessary in the exercise of public authority vested in the data controller [article 6 par. 1e GDPR, art. 5 l. 4624/2019 in combination with the responsibilities of M.P.A. Mykonos (Government Gazette B’ 1847/2003), as in force]. The security of the area and the safety of passengers within the monitored area is the duty of the Mykonos Airport Security Service, as well as the taking of an image of any other person is also permitted, if deemed necessary for the fulfillment of the above purpose. Only image data are collected, which are limited to being taken in areas that are assessed as having an increased need for protection, with respect for the protection of the privacy of natural persons.

3. Accessibility

The stored material is accessible only by our official/ authorized personnel who are responsible for the security of the area. This material is not transmitted to third parties, with the exception of the following cases: a) to the competent judicial, prosecutorial and police authorities when it includes information necessary for the investigation of a criminal act, which concerns persons or goods of the controller, b) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, in the exercise of their duties, and c) to the victim or perpetrator of a criminal act, when it concerns data that may constitute evidence of the act.

4. Data integrity

The data are maintained for a maximum period of fifteen (15) days from their collection, after which they are automatically deleted. If during this period we identify an incident that requires investigation, we isolate part of the video and keep it for up to one (1) more month, for the purpose of investigating it, while if the incident concerns a third party, we will keep the video for up to three (3) more months. Data relating to events and falling within the scope of the intended purpose are stored and retained, if necessary, for the investigation of criminal acts, but are deleted after the issuance of an irrevocable court decision or the final cessation of criminal prosecution or the expiration of the statute of limitations. The Mykonos DLT ensures that the deletion is carried out automatically and that the data is securely destroyed so that it cannot be recovered (non-reversible data).

5. Technical and organizational security measures

By definition and by design, no zooming of the image takes place. The installation of the surveillance system is permitted following a decision by the Mykonos Port Authority and its operation is announced at key and visible points, so that those entering and leaving the port can be informed about the recording by cameras within the cruise ship mooring area. Information on the operation of the system is also provided on the Mykonos Port Authority website. The Mykonos Port Authority ensures, by using appropriate technical means, that the system monitors the predetermined area within the cruise ship mooring area and does not receive images from areas outside this scope, and appropriate technical and organizational measures are taken to protect the data collected and processed.

6. Rights of data subjects

Data subjects have the following rights:

• • • Right of access: you have the right to know whether we are processing your image and, if applicable, to receive a copy of it.

    • Right to restriction: you have the right to ask us to restrict processing, such as not deleting data that you consider necessary for the establishment, exercise or defense of legal claims.

    • Right to object: you have the right to object to processing.

    • Right to erasure: you have the right to request that we delete your data.

You can exercise your rights by sending an e-mail to dpo@mykonosports.gr or a letter to our postal address or by submitting the request to us in person at the address “Neos Limenas Mykonos, Tourlos, P.C. 84600”. In order to consider a request related to your image, you must specify to us approximately when you were within the range of the cameras and provide us with an image of you, in order to facilitate our identification of your data and the concealment of the data of third parties depicted. Alternatively, we give you the opportunity to come to our facilities to show you the images in which you appear. We also point out that the exercise of the right to object or delete does not entail the immediate deletion of data or the modification of the processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the GDPR.

7. Right to file a complaint

If you consider that the processing of data concerning you violates Regulation (EU) 2016/679, you have the right to file a complaint with a supervisory authority. The competent supervisory authority for Greece is the Personal Data Protection Authority, Kifissias 1-3, 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.