I. Name and address of the controller
The person responsible within the meaning of the general data protection regulation ist he:
WIRTGEN GmbH (hereafter: „we“, „us“ or "Wirtgen")
53578 Windhagen, Deutschland
Telefon: +49 (0) 2645-131 0
Telefax: +49 (0) 2645-131 392
II. Contact information for the Data Protection Officer
You can reach the data protection officer under:
The data protection officer
c/o WIRTGEN GmbH
53578 Windhagen, Deutschland
In matters of data protection, WIRTGEN GmbH is represented by the law office Vogel & Partner from Stuttgart.
III. Why we monitor our factory premises with video cameras
1. For what purpose do we monitor our premises with video cameras?
Our premises are monitored by video to ensure security. Video surveillance is used to detect dangerous situations and to coordinate security and emergency services. We also use video surveillance to prevent and prosecute vandalism, theft and other property offences. With video surveillance, we also pursue the purpose of being able to exercise our domestic authority in individual cases, in particular by imposing house bans.
2. On what legal basis do we process your data?
We process your data for the recognition and coordination of dangerous situations and for the prevention of criminal offences on the basis of Art. 6 Para. 1 lit. d) and f) DSGVO or § 4 Para. 1 S. 1 No. 3 BDSG.
We process your personal data on the basis of Art. 6 Para. 1 lit. f) DSGVO or § 4 Para. 1 S. 1 No. 2 BDSG in order to exercise our domestic rights.
With video surveillance, we pursue our legitimate interests of guaranteeing security in hazardous situations and the protection of life and limb as well as our property.
3. How long will my data be stored?
Recordings required for the purpose of preserving evidence are stored until any administrative, civil or criminal proceedings have been legally concluded. The storage period is otherwise 7 days
4. Who is involved in the processing of my data?
The following parties are involved in the processing of your data:
WIRTGEN GmbH, Reinhard-Wirtgen-Straße 2, 53578 Windhagen, Germany
Third party security service providers
If necessary, data will be passed on to third parties:
Internal departments such as plant management and occupational safety
Law enforcement and administrative authorities, courts and lawyers.
5. Is it necessary for you to provide your data and what happens if you decide not to do so?
Our factory premises are monitored by video surveillance in order to effectively implement the above-mentioned purposes. Visitors are of course free not to enter our premises if they do not agree with a video recording.
IV. Your rights according to the GDPR
1. Right to access (Art. 15 GDPR)
The data subject have the right to obtain from us confirmation as to whether or not we process your personal data, and, where that is the case, access to the personal data and the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from you directly, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for your data.
2. Right to rectification (Art. 16 GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Right to erasure (“right to be forgotten”) (Art. 17 GDPR, § 35 BDSG)
You have the right to obtain from us the erasure of your personal data without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you object to the processing pursuant to Article 21 para. 1 and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 para. 2;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject;
4. Right to restriction of processing (Art. 18 GDPR)
According to Art. 18 GDPR, we may only process data to a limited extent where one of the following applies:
You contest the accuracy of your data, until we can verify its accuracy,
The processing is unlawful and instead of requesting the erasure of the data you ask for the restriction of its use,
We no longer need the data for the purposes of processing, but you do need it to establish, exercise or defend legal claims, or
You objected to the processing pursuant to Art. 21 (1) GDPR for reasons arising from your particular situation, provided it is not yet clear whether our legitimate reasons for processing override your interests
If processing is restricted we are allowed to only store this data. Further processing shall only be permitted with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
5. Notification obligation regarding rectification or erasure of personal data or restriction of processing (Art. 19 GDPR)
Please note that we are obliged to inform all recipients of your data of any correction or deletion or any restriction on processing thereof, unless this proves impossible or involves disproportionate effort.
We will inform you about those recipients if you request it.
6. Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where the processing is:
based on your consent or contract and
carried out by automated means.
In exercising your right to data portability, you shall have the right to have the personal data transmitted directly from us to another controller, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
7. Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6 para. 1 lit. a) or f), including profiling based on those provisions. We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or grounds for the establishment, exercise or defense of legal claims.
Where you object, your data will no longer be processed for such purposes.
If you wish to object, simply send an informal message to the contact details listed above.
8. Automated individual decision-making, including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
9. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the data protection regulations.