Transparency and a confidential handling of your personal data are an important basis for successful cooperation. Therefore, pursuant to Articles 13, 14 and 21 of the European General Data Protection Regulation (GDPR), we inform you about the processing of your personal data in accordance with the statutory provisions as well as the procedure for exercising your rights.

1. Data controller

is the data controller with regard to the video surveillance pursuant to Art. 4 no. 7 (“GDPR”).

2. Contact details of the Data Protection Officer

If you have any questions or suggestions regarding data protection, please contact our Data Protection Officer:

RWE AG 
Group Data Protection Officer
RWE Platz 6
45141 Essen
E-Mail at dataprotection@rwe.com

3. What personal data is processed and for what purpose?

The data controller monitors the buildings and premises inside and outside of the security-relevant areas by means of video recording and video transmission (livestreams). In principle, no general video surveillance of public spaces takes place.

Video surveillance is used to detect security-relevant events, to provide a visual connection for remote controlling of other facilities, for personal verification and, if necessary, for the preservation of evidence in case of security-relevant events or a suspicion of the occurrence of criminal offences, and to safeguard domestic authority both for the controller and for third parties. It also essentially contributes to a comprehensive security of buildings and persons. If necessary, video surveillance can be used to take immediate action to eliminate any irregularities.  

4.  Which sources does the personal data originate from?

The provision of the data is a result of accessing the area covered by video surveillance systems. At locations where video surveillance is in operation, this is indicated by a corresponding sign.  Insofar as video surveillance is required by law in certain areas, access is not possible without providing the data. In all other cases, video surveillance can be dispensed with if you inform us in advance of your justified objections (objection) and if we cannot demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms (weighing of interests). A profiling does not take place.

5. What is the legal basis of the data processing?

The use of video surveillance is based on legitimate interests of the data controller and, if applicable, of those of third parties (Art. 6 para. 1 lit. f GDPR) for the purposes listed in section 3. In individual cases, legal regulations for individual locations may require the data controller party to carry out video surveillance in certain areas. In addition to Art. 6 para. 1 lit. f GDPR, the legal basis of such surveillance would be a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.

6. Data recipients

The video data is only evaluated if there is a valid reason to do so. The aforementioned companies have individual tasks and services performed by carefully selected and commissioned (IT) service providers. These service providers are obligated to comply with the data protection and security requirements of the aforementioned companies.

Your data will be stored exclusively in the European Union.

Data from video surveillance will only be transmitted to third parties if there is a legitimate interest and unless there are no overriding interests of the data subjects.

In the event of a breach of house rules, the perpetration of a criminal offence or if stipulated by law, the recordings can or must be handed over to security authorities (police to the public prosecutor's office). 

7. Data retention

Recorded video surveillance data are generally deleted after 10 days at the latest.

If recorded video surveillance data are processed for the preservation of evidence in the case of security-relevant events or a suspicion of the existence of criminal offences, they are deleted as soon as the respective process is completed and there are no legal retention periods or other objective reasons to the contrary.

8. Your rights

You can exercise the following rights under the legal requirements: 

• Art. 15 GDPR the right to obtain information on data processing and a copy of the processed data,
• Art. 16 GDPR the right to have incorrect data rectified,
• Art. 17 GDPR the right to have your data deleted, provided there is no legal reason for further storage,
• Art. 18 GDPR the right to restriction of processing,

To exercise your rights, please contact the responsible data controller listed under no. 1.

9. Questions or complaints

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a competent supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

An overview of the State Data Protection Commissioners with their contact information can be found on the following website of the Federal Commissioner for Data Protection and Freedom of Information.

Last update June 2024