Data Protection Information regarding Photos or Video Recordings
Information on the processing of personal data when using photos or video recordings of your person
1. What information does this document contain for you?
thyssenkrupp nucera AG & Co. KGaA (“we”) informs you about the possible use of photos or video recordings of your person (“recordings”).
[purpose for the data processing in detail]
We make sure that we comply with the requirements of the applicable data protection laws. Below you can find a detailed overview of how we handle your data and your rights.
2. Who is responsible for the data processing and who is the Data Protection Officer?
The controller for the data processing is your employer:
thyssenkrupp nucera AG & Co. KGaA
Freie-Vogel-Str. 385 a
44269 Dortmund
Germany
Email: info@thyssenkrupp-nucera.com
The Data Protection Officer of thyssenkrupp nucera AG & Co. KGaA can be reached at:
Email: dataprotection@thyssenkrupp-nucera.com
3. What categories of data do we process and where do they come from?
The categories of data processed include photos and video recordings of you and possibly your name. This data is collected directly from you or provided by you. The provision of this data is completely voluntary.
4. Who receives your data?
Your data will be processed within NCA by the employees responsible for communications and public relations.
Furthermore, other bodies and, if applicable, processors (with a correspondingly concluded order processing contract) may receive access to your personal data, which they require for processing or for the fulfillment of contractual or legal obligations or which you have named in your voluntary consent above.
Inasmuch as your photo/film recordings are used externally (e.g. on social media platforms), third parties may have unrestricted access to them.
5. For what purpose do we process the data and what is the legal basis?
Your data will be processed for communications and public relations (editorial and promotional purposes) in connection with [event/action].
The processing of your recordings is based on your consent (Art. 6 para. 1 lit. a GDPR) – if you choose to give it. Providing your recordings as well as your consent is completely voluntary, and you are under no obligation to provide it.
6. Will your data be transferred to a third country (outside the EU/EEA)?
If you consent to the publication of your recordings, it cannot be ruled out that your recordings may then be processed in third countries outside the EU (such as the USA), which do not have an appropriate level of data protection and where, in particular, access by local authorities may not be effectively prevented.
7. Which data protection rights can you assert as an affected person?
You have the right to request information about the data stored about you, Art. 15 GDPR. In addition, you have the right to request the rectification or erasure of your data, Art. 16, 17 GDPR. You may also have the right to restrict the processing of your data, Art. 18 GDPR, and the right to data portability, Art. 20 GDPR, provided that this does not adversely affect the rights and freedoms of other persons.
Information about your right to object under Art. 21 GDPR
For reasons that arise from your particular situation, you have the right to object to the processing of your personal data at any time pursuant to Art. 6 para. 1 f GDPR (data processing on the basis of a balance of interests); this also applies to any profiling based on this provision as defined in Art. 4 No. 4 GDPR.
If you file your objection, we will no longer process your personal data unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
If you have given us your consent to the processing of your personal data, you can withdraw this at any time without any formal requirements and without any adverse effects.
Please note that the revocation has no effect on the legality of the data processing carried out before the revocation and that it does not extend to data processing for which another authorization exists and which may therefore also be carried out without your consent.
To exercise your rights, please contact us using the contact details provided in Sec. 2.
8. Where can you file a complaint?
Without prejudice to any other administrative or judicial remedy, as an affected person, you have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them infringes the GDPR (Art. 77 GDPR). You can exercise this right with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement.