Controller

42 Wolfsburg/Berlin e.V.

Porschestraße 2c
38440 Wolfsburg
datenschutz@42wolfsburg.de

Purpose and Legal Basis:

Video surveillance is carried out to exercise our right to control access to our premises, to prevent criminal offenses, and to secure evidence in the event of criminal offenses. The legal basis for video surveillance is Article 6(1)(f) GDPR, whereby our legitimate interests arise from the aforementioned purposes.

Storage Period

The video recordings are stored on our video servers for 72 hours and then irrevocably deleted.

Data Processors

Video recordings are transferred to our security service providers. Our service providers are contractually obligated to comply with data protection regulations by means of a data processing agreement pursuant to Article 28 GDPR.

The following companies are involved in the collection, processing, and storage of video recordings:

SECONTEC GmbH
Georgstraße 38
30159 Hannover

SECONTEC Services GmbH
Nonnenstraße 21
04229 Leipzig

Further Data Transfer to Third Parties and Third Countries

Data will not be transferred to any other third parties or to third countries.

Information on the Rights of Data Subjects

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Article 15 of the GDPR.

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Article 16 of the GDPR).

The data subject has the right to request that the controller erase personal data concerning him or her without undue delay where one of the grounds listed in Article 17 of the GDPR applies, for example, where the data are no longer necessary for the purposes for which they were collected (right to erasure).

The data subject has the right to request that the controller restrict the processing of his or her personal data where one of the conditions listed in Article 18 of the GDPR applies, for example, where the data subject has objected to processing, pending the verification by the controller.

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defence of legal claims (Article 21 of the GDPR).

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right with a supervisory authority in the Member State of his or her habitual residence, place of work, or the place of the alleged infringement. In Lower Saxony, the competent supervisory authority is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover