PRIVACY POLICY – VIDEO SURVEILLANCE
This Privacy Policy explains how we process your personal data when video surveillance technology is used.
WHAT ARE PERSONAL DATA?
Personal data means any information relating to an identified or identifiable natural person. This can be data that can be used to identify you, such as your name, address, e-mail address and your user behaviour when you access our website.
RESPONSIBLE ORGANISATION
The responsible organisation pursuant to Article 4, no. 7 of the General Data Protection Regulation (GDPR) is ARQIS von Einem Panzer-Heemeier Schulze Witty Yamaguchi Rechtsanwälte Partnerschaftsgesellschaft mbB, Breite Straße 28, 40213 Düsseldorf.
We have appointed a data protection officer. You can reach our data protection officer at the above address or at datenschutz@arquis.com. Letters should be sent for attention of the “Data Protection Officer”.
WHAT PERSONAL DATA DO WE COLLECT?
Our camera systems capture physical images (face, physical features) and the movements of the person being recorded.
These data could be used to draw conclusions about health, political opinions, religious or philosophical beliefs (so-called special categories of personal data). The collection of special categories of personal data is not the primary purpose of the video surveillance.
HOW DO WE USE YOUR PERSONAL DATA? WHAT IS THE LEGAL BASE FOR THIS USE?
We use, store and process information, including personal data, about you for the following purposes and on the following legal bases:
To exercise our domiciliary right. A domiciliary right is the right holder’s authority to decide who is permitted to enter and remain within a pacified property or building.
To prevent criminal acts and preserve evidence. On the one hand, video surveillance serves the purpose of preventing criminal acts. On the other, it is used for the purpose of evidence preservation and investigation of criminal acts.
The use of video surveillance systems for the purpose of exercising a domiciliary right, to prevent criminal acts and to preserve evidence of criminal acts is in our legitimate interest. The legal basis is Article 6 (1) (f) GDPR.
ARE MY PERSONAL DATA AND INFORMATION SHARED WITH OTHER PEOPLE?
All data are processed on a need-to-know basis. Only the department or person in our organisation who is assigned to the function of video recording assessment has access to the video recordings and only to the extent which is necessary for the assessment of the recordings and, if necessary, their processing.
We transfer video recordings to the competent law enforcement authorities if this is necessary for the reason that the assessment of the video recordings indicates potentially criminal behaviour. The legal basis for the transfer of video recordings to law enforcement authorities is Article 6 (1) (f) GDPR.
HOW LONG ARE THE DATA STORED FOR?
The video recordings are deleted two working days at the latest after their assessment.
DOES PROFILING TAKE PLACE?
No. We do not use any profiling technology.
YOUR RIGHTS
The data subject has the right to obtain from us confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information listed in Article 15 GDPR.
The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her (Article 16 GDPR).
The data subject has the right to obtain from us the erasure of personal data concerning him or her without undue delay if one of the grounds listed in Article 17 GDPR applies, e.g. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (right to erasure).
The data subject has the right to request us to restrict processing if one of the criteria listed in Article 18 GDPR applies, e.g. if the data subject has objected to processing pending verification of whether legitimate grounds for processing the data exist.
The data subject has the right to object, on grounds relating to his or her particular situation, to the processing of your personal data. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the data subject’s interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims (Article 21 GDPR).
Without prejudice to any other administrative or judicial remedy every data subject has the right to lodge a complaint with a supervisory authority if he or she considers that the processing of personal data relating to him or her infringes the GDPR (Article 77 GDPR). The data subject can assert the right at a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.