Complete information sheet on video surveillance

pursuant to Article 13 GDPR

Date: May 2018

1.  General aspects

Protecting your personal data is something we take very seriously. We treat your personal data confidentially and in compliance with statutory data protection regulations.

This information sheet informs you about the processing of your personal data in connection with video surveillance of the outdoor areas and also, where relevant, of indoor areas of the following properties:

  • Contrescarpe 75A, 28195 Bremen
  • Bahnhofstraße 1, 28195 Bremen
  • Grünenweg 6, 28195 Bremen
  • Möckernstraße 10, 10963 Berlin

The controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679 – ‘GDPR’), as far as the processing of personal data in connection with video surveillance is concerned, is KPS Programme Schulenberg GmbH & Co. KG, Contrescarpe 75A, 28195 Bremen, Germany, (hereinafter ‘KPS’, ‘we’, ‘us’).

You can contact us under that address, or by using the email address; Tel.: +49 (0) 421 – 36 66 0, Fax: +49 (0) 421 – 36 66 98 0.

If you have any questions relating to data protection (including the exercise of your rights described in 5) below), you can also contact our data protection officer directly. The contact details of the data protection officer are as follows: The Data Protection Officer, c/o KPS Programme Schulenberg GmbH & Co. KG, Contrescarpe 75A, 28195 Bremen, Germany;; Tel.: +49 (0) 421 – 36 66 0, Fax: +49 (0) 421 – 36 66 98 0

In the following, we tell which data we collect and for what purposes in connection with video surveillance, how we use those data, and what your rights are in that respect.

2.  Processing of your data

We process your personal data obtained as a result of video surveillance for the purposes of protecting the buildings, safeguarding property and preventing vandalism. The legal basis for such processing is provided by Article 6 (1) (f) GDPR (legitimate interests).

3.  Transfer of data to third parties

The personal data collected during video surveillance are not transferred or otherwise communicated to third parties without your consent – except in other cases explicitly described in this Privacy Notice. Exceptions include the communication of personal data to government agencies and authorities if we have a legal obligation to do so, or to prosecute criminal offences. The legal basis for such processing of your personal data is Article 6 (1) (c) GDPR (compliance with a legal obligation) and Article 6 (1) (f) and (4) GDPR (legitimate interests).

4.  Duration that your personal data are kept

As a basic principle, we store your personal data which we obtain in connection with video surveillance only for as long as this is necessary, in order to check whether further storage for the purposes specified in 2) above is necessary. A period of at least two days will generally be needed in that regard.

If our checks indicate that storage for the purposes specified in 2) is not required, we will erase the recordings without delay unless continued storage is stipulated, for example to comply with statutory archiving obligations.

The normal duration to erasure is seven days.

5.  Your rights

You have the right to demand information from us at any time about your personal data stored by us. If the statutory requirements are met, you also have rights to the rectification, erasure and restriction of processing of the respective data. You also have the right to object to your data being processed by us and the right to receive the personal data concerning you in a structured, commonly used and machine-readable format (you may arrange for said data to be transferred or communicated to other bodies).

If you believe that our processing of the personal data relating to you is in breach of the applicable data protection laws, you may file a complaint with the competent supervisory authority for data protection.

6.  Data security

KPS implements state-of-the-art technical measures to safeguard data security, in particular to protect your personal data against risks ensuing from the transmission of data and against third parties gaining knowledge of the data. These measures are continuously updated to match the current state of technological development.