Data Protection Declaration 

Information on the processing of personal data in video surveillance according to articles 12, 13, 21 GDPR

We take the protection of your personal data very seriously. We process your data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and other laws on the protection of personal data. In the following, we will inform you about the processing of your data in accordance with Art. 12 ff. GDPR.

For what purposes and on what legal basis do we process your personal data? (Art. 13 para. 1 letter c), d) GDPR)

The collection and processing of personal data during video surveillance is generally permitted in accordance with Article 6 (1) (f) GDPR for the exercise of our “Hausrecht” and for the protection of legitimate interests for specifically defined purposes, provided that it is necessary and there are no indications that the interests of those affected that are worthy of protection outweigh them.

We have an interest in ensuring that the safety of employees is maintained in the publicly accessible part of the building with the self-service lockers and the other parts of the building and that the house rules and property of the company are protected
Our interest in ensuring security in the building, in upholding our house rules and in preventing and, if necessary, prosecuting violations outweighs the legitimate interests of those affected in ensuring that their data is not recorded and processed as part of video surveillance.

Those affected are made aware of the video surveillance by means of comprehensive information and, in particular, by means of clearly visible signs before entering the video-monitored areas. If they enter the area, they do so with knowledge that the area is under video surveillance.
The video data is not evaluated regularly, but only when necessary (e.g. in the event of break-ins, thefts, damage to property or suspicion of a crime). The data is generally only stored for a very limited period of time and only processed further if this is necessary to avert a danger or to prosecute criminal acts.
There is no biometric evaluation of the video data (e.g. facial recognition).

What personal data do we store and use?

We only store and use the personal data that is necessary to achieve the purposes mentioned above. Processing only takes place if there is no indication that the legitimate interests of the data subject outweigh them.

Who receives your personal data? (Article 13 paragraph 1 letter e), f) GDPR)

As a general rule, we do not pass on personal data to third parties unless you have given your consent or there is another legal basis (e.g. for criminal prosecution or the enforcement of civil law claims).

How long will the data be stored? (Article 13 paragraph 2 letter a) GDPR)

In principle, we only store your data for as long as it is necessary to achieve the purpose, i.e. we generally delete our video recordings within 3 days if there is no suspicion of a criminal offense or if your legitimate interest precludes further storage. Something different only applies if we are forced to keep the recordings for a longer period.

What rights do you have? (Article 13 paragraph 2 letters b), c), d), e) GDPR)

According to Art. 15 GDPR, you have the right to information. This means that you can request confirmation from us as to whether we process personal data concerning you. If this is the case, you have the right to get a copy of the data in accordance with Art. 15 GDPR.

According to Art. 16 GDPR, you have the right to rectification. This means that you can request that we rectify any inaccurate personal data concerning you.

According to Art. 17 GDPR, you have the right to erasure (“right to be forgotten”). This means that you can request that we immediately erase personal data concerning you – unless we cannot erase your data because we must, for example, comply with statutory retention periods.

According to Art. 18 GDPR, you have the right to restrict processing. This means that we are no longer allowed to process your personal data - apart from storing it.

According to Art. 20 GDPR, you have the right to data portability. This means that you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another controller.

According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent at any time for the future.

According to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.

There is no automated decision-making or profiling in accordance with Art. 22 (1) and (4) GDPR.

Sweepstakes and Their Processing

We hold sweepstakes and prize draws on a case-by-case basis. Participation is free and not mandatory. In connection with these sweepstakes and prize draws, we process the personal data you provide (first name, last name, address, email address, telephone number, and confirmation of acceptance of the terms and conditions of participation) solely for the purpose of conducting the respective promotion and, if applicable, sending prizes to the selected winners. We will also publish your name when announcing the winners on our website and our social media channels. The processing of personal data is based on your explicit consent pursuant to Art. 6 para. 1 lit. a) GDPR. Your personal data will be deleted after the promotion has ended, unless statutory or other retention periods apply.

Competent supervisory authority

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Street address: Kavalleriestr. 2 - 4, 40312 Düsseldorf
Postal address: PO Box 20 04 44, 40102 Düsseldorf
Tel.: +49 (0) 211/38424-0
E-mail address: poststelle@ldi.nrw.de 
Postal address: PO Box 20 04 44, 40102 Düsseldorf
Tel.: +49 (0) 211/38424-0
E-mail address: poststelle@ldi.nrw.de 
 
If you have any questions about data protection or wish to exercise your rights, please contact our data protection officer in writing by email or post (see contact details above).