CCTV
Information on data processing in accordance with Article 13 of the GDPR regarding CCTV
1. Contact details of the data controller
Weinberghotel Edelacker GmbH
Schloss 25
06632 Freyburg/Unstrut
Telephone: 034464 – 350
Email:
2. Contact details of the Data Protection Officer
Janus Datenschutz GmbH
Löbdergraben 28
07743 Jena
Telephone: +49 (0)3641 – 236295 - 0
Email:
3. Purpose and legal basis of data processing
The processing is based on Article 6(1)(f) of the GDPR. The legitimate interest lies in the protection of property, the prevention of criminal offences and the enforcement of the organisation’s rights of access. Video surveillance is limited to what is strictly necessary and is carried out whilst taking into account the rights and freedoms of the data subjects.
3.1) Purpose of data processing
Video surveillance for the purpose of self-protection (protection of the organisation’s property and that of its employees, and protection of the controller’s liability (fulfilment of road safety obligations, contractual liability towards customers, etc.)) as well as for the purpose of preventing, containing and investigating behaviour relevant under criminal law, insofar as this affects the controller’s area of responsibility, with evaluation limited exclusively to the specific incident defined by the purpose.
3.2) Legitimate interest
Protection of property, protection of staff, exercise of the right to manage one’s own premises
4. Retention period
Data from publicly accessible areas is generally stored for 72 hours; where necessary, for the duration of the proceedings.
5. Recipients or categories of recipients
- Competent authority or court (to preserve evidence in criminal matters), security authorities (for public security purposes)
- Courts (to preserve evidence in civil matters)
- Employees, witnesses, victims (in the context of enforcing claims)
- Insurance companies (exclusively for the settlement of insurance claims)
- Lawyers, courts, authorities and other bodies for the purpose of law enforcement
- The data will not be disclosed to recipients who use this data for their own purposes.
6. Data portability
There is no right to data portability.
7. Information on the rights of data subjects
The data subject has the right to request confirmation from the controller as to whether personal data concerning them is being processed; if this is the case, they have the right to access this personal data and to the information specified in detail in Article 15 of the GDPR.
The data subject has the right to request from the controller the rectification without delay of any inaccurate personal data concerning them and, where applicable, the completion of any incomplete personal data (Article 16 of the GDPR).
The data subject has the right to request from the controller that personal data concerning them be erased without undue delay, provided that the grounds set out in detail in Article 17 of the GDPR apply, e.g. where the data are no longer necessary for the purposes for which they were collected (right to erasure).
The data subject has the right to request that the controller restrict processing if one of the conditions set out in Article 18 of the GDPR is met, e.g. if the data subject has objected to the processing, for the duration of the controller’s assessment.
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims (Article 21 of the GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them infringes the GDPR (Article 77 of the GDPR). The data subject may exercise this right with a supervisory authority in the Member State of their habitual residence, place of work or the place where the alleged infringement occurred.
