Privacy Notice Regarding Video Surveillance on the Premises of Hommel Pharma GmbH & Co. KG
Contact Information for the Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Hommel Pharma GmbH & Co. KG
Auf dem Quellberg 8
48249 Dülmen
Germany
Phone: 0800 / 500 70 70
Email: info@hommel-pharma.de
Contact Information for the Data Protection Officer
Email: hommelpharma@dsb-luther.de
Purpose of Video Surveillance and Legal Basis
Video surveillance is conducted to enforce property rights, prevent crimes, and preserve evidence in the event of a crime.
The legal basis for video surveillance is Article 6(1)(f) of the GDPR, and our legitimate interests stem from the aforementioned purposes, namely preventing unauthorized entry onto company premises, preserving evidence in the event of criminal offenses, and, where applicable, asserting civil claims.
Recipients / Disclosure of Data
The data is disclosed to service providers we have engaged to perform monitoring tasks on behalf of our company.
In cases where criminal activity is suspected, we may also disclose the data to law enforcement agencies as necessary.
Otherwise, the data will only be disclosed if there is a legal basis for such disclosure. This may be the case, in particular, when the police or other security authorities take action as part of so-called threat prevention and request access to video surveillance data.
Data Processing Outside the European Union
Personal data is not processed outside the European Union in connection with video surveillance.
Information regarding the rights of data subjects (to the extent such rights are provided by law)
The data subject has the right to request confirmation from the controller as to whether personal data concerning him or her is being processed; if so, he or she has the right to access such personal data and to receive the information specified in Article 15 of the GDPR.
When submitting a request for information, please note that we may require the person making the request to provide proof that they are who they claim to be.
The data subject also has the right to request that the controller rectify inaccurate personal data concerning him or her and, where applicable, to have incomplete personal data completed (Art. 16 of the GDPR).
The data subject has the right to request that the controller erase personal data concerning him or her without delay, provided that one of the grounds specifically listed in Article 17 of the GDPR applies, such as when the data is no longer necessary for the purposes for which it was collected (right to erasure).
The data subject has the right to request that the controller restrict processing if any of the conditions listed in Article 18 of the GDPR are met, for example, if the data subject has objected to the processing, for the duration of the controller’s review.
The data subject has the right to object at any time to the processing of personal data concerning him or her for reasons arising from his or her particular situation.
The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject believes that the processing of personal data concerning him or her violates the GDPR (Art. 77 GDPR). The data subject may exercise this right with a supervisory authority in the Member State of his or her habitual residence, place of work, or the location of the alleged infringement.
In North Rhine-Westphalia, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Deletion of Data
Video surveillance data is generally deleted after 48 hours. Audio recordings are generally not made as part of video surveillance.
Records may be retained for a longer period on a case-by-case basis if there are facts that justify the assumption that recordings from a specific time period show acts that are to be prosecuted as criminal offenses or used to assert civil claims. In such cases, the records are deleted in accordance with the statute of limitations.