Information on the processing of your data by video surveillance systems

1. Which information does this document contain for you?

To protect our property and against vandalism, we operate video surveillance systems at our sites. Our facilities are also equipped with video camera systems for quality assurance and accident prevention purposes. We ensure that we meet the requirements of the German Data Protection Ordinance (DSGVO) and other applicable data protection laws. In what follows, we provide you with a detailed insight into our handling of your data and your rights.

2. Who is responsible for processing and who is our data protection officer? 

Responsible for processing is

thyssenkrupp Materials Services GmbH
thyssenkrupp Allee 1
45143 Essen
Germany
Phone: +49 0201 844-0

The data protection officer of thyssenkrupp Materials Services GmbH can be reached at materials-services@thyssenkrupp-materials.com

3. What do the video surveillance systems record?

Our video surveillance systems record areas worthy of protection, buildings in our possession and relevant sections of our production facilities. There is no automatic recognition of persons on the video images. 

4. For what purposes are data processed and on which legal basis?

Video surveillance is used to exercise domiciliary rights, to prevent criminal offences and to assert, exercise or defend legal claims. The legal basis for video surveillance is Art. 6 para. 1 lit. f) GDPR, whereby our interests arise from the aforementioned purposes. Insofar as special categories of personal data are processed, this is done on the basis of Art. 9 para. 2 lit. f) GDPR.

5. Who receives the records?

We use the records when damage has occurred or an alarm has been triggered. Within our company, only those persons and bodies are granted access to the records who are involved in clarifying the facts. 

Depending on the event, the security companies commissioned by us may also have access to the data in order to prevent the act and support us in clearing up the matter. In the event of criminal offences, we hand over the records as evidence to our legal advisers and to the competent authorities. 

6. How long are records stored?

IIf there is no indication of damage, the recordings are automatically deleted. This usually takes place within 72 hours.

7. Which data protection rights can you claim as the person affected?

You have the right to request information about the data stored about you, Art. 15 GDPR. In addition, you may request the rectification or erasure of your data, Art. 16, 17 GDPR. You may also be entitled to restrict the processing of your data and a right to release the data you provided in a structured, common, machine-readable format, provided this does not affect the rights and freedoms of others, Art. 18, 20 GDPR.  

To exercise your rights, please contact the responsible body or data protection officer listed under section 2. 

In addition, you have a right of objection, which is explained in more detail at the end of this privacy policy. 

You also have the option to file a complaint with a data protection authority, Art. 77 GDPR. The right of appeal is without prejudice to any other administrative or judicial remedy. The data protection authority responsible for us is: 

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf

Information about your right of objection according to Art. 21 of the General Data Protection Regulation (GDPR) 

For reasons that arise from your particular situation, you have the right to object to the processing of your personal data at any time pursuant to Article 6 para. 1 f of the GDPR (data processing on the basis of a balance of interests); this also applies to any profiling based on this provision as defined in Article 4 No. 4 GDPR.  

If you file your objection, we will no longer process your personal data unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.  

The objection can be informal and should ideally be addressed with the responsible body or data protection officer listed in the privacy statement under section 2.