Data protection information in accordance with Art. 13 EU Data Protection Regulation (DSGVO) on video surveillance at R. STAHL

For us, R. STAHL Aktiengesellschaft, Am Bahnhof 30, 74638 Waldenburg, the security and protection of your personal data is a serious concern, so we hereby inform you about the processing of your personal data in our company in accordance with Art. 13 of the German Data Protection Regulation (GDPR).

1. Who is responsible for processing my personal data?

Controller of the data processing according to Article 4 No. 7 GDPR is (hereinafter we):

R. STAHL Aktiengesellschaft
Am Bahnhof 30
74638 Waldenburg

Further details can be found in the legal details on the company's website.

General information can be found in our general data protection statement.

Data protection requests can be addressed to our data protection officer:

Data Protection Officer
Am Bahnhof 30
74638 Waldenburg
data.protection@r-stahl.com

2. Which personal data is processed for which purposes?

We process personal data in various processes. In this specific case, we process your personal data in the context of video surveillance for the purposes of danger prevention, company security and safeguarding domiciliary rights. For these purposes, we essentially process video recordings and biometric data.

2.1 What is the legal basis for data processing?

We process personal data only based on the legal provisions of the General Data Protection Regulation (GDPR) and/or specific local regulations. The processing of personal video recordings in the context of video surveillance is based on the following legal basis:

• The processing is necessary to safeguard the legitimate interests of the controller (Art. 6 (1) (f) GDPR).

We have a legitimate interest in carrying out video surveillance for the purposes of hazard prevention, plant security, and the enforcement of property rights, as well as in storage of recordings for the purposes of evidence for the exercise, enforcement, and defense of legal claims.

2.2. Special categories of personal data

The processing of personal biometric data in the context of video surveillance is based on the following legal basis:  The processing is necessary for the enforcement, exercise, or defense of legal claims (Art. 9(2)(f) GDPR).

2.3. Data processing in the employment context (only for Germany)

The above legal bases apply in accordance with Art. 88 (1) GDPR in conjunction with the following special provisions of the BDSG: 

• For the detection of criminal offenses, if there is sufficient suspicion based on factual evidence and if the processing is justified (§ 26 (1) sentence 2 BDSG).
• The processing of personal data, including special categories of personal data of employees for the purposes of the employment relationship, is based on a collective agreement (Section 26 (1) sentence 2 BDSG).

3. Who are the recipients of my data?

In general, only authorized persons within R. STAHL are entrusted with the processing of your personal data. If necessary to fulfill the abovementioned purposes, your personal data may be transferred to law enforcement authorities.

4. Data transmission

A cross border data transfer outside the European Economic Area does not take place.

5. Data storage and deletion

Generally, we only store your personal data for as long as the purpose requires and keep it for 10 days. The data is then overwritten with new records and thus deleted. An exception is made for data that must be stored for a longer period than required for the purpose, due to judicial or non-judicial proceedings.

6. Data subject rights

In the event of data processing, data subjects have the right to request information about their personal data processed by us.
These rights include the right to information about

• the purposes of processing,
• the category of personal data,
• the recipients to whom your data
• have been or will be disclosed,
• the planned storage period

as well as the right to rectification, erasure, or restriction of processing, the right to object, the right of withdraw consent, and the right to lodge a complaint.

7. Automated decision-making, profiling & AI

Automated decision-making based on the personal data mentioned here does not take place. Furthermore, your personal data will not be used for profiling purposes. We do not use artificial intelligence systems, particularly no facial recognition technologies.