Extended Data Privacy Information for CCTV Use on Campus
Video surveillance systems (CCTV) are currently in operation on parts of the Kleve and Kamp-Lintfort Campuses of Rhine-Waal University of Applied Sciences.
Here you will find general information on the processing of related data in accordance with Article 13 of the General Data Protection Regulation (GDPR) of the European Union.
Name and Contact Details of the Controller
Rhine-Waal University of Applied Sciences
Executive Board
Marie-Curie-Str. 1
47533 Kleve
info@hochschule-rhein-waal.de
Contact Details of the Data Protection Officer
Rhine-Waal University of Applied Sciences
Appointed Data Protection Officer
Marie-Curie-Str. 1
47533 Kleve
datenschutz@hochschule-rhein-waal.de
Purpose for Processing and Legal Basis for Processing
§ 20 (1) Nr. 1 DSG NRW (Data Privacy Act of NRW), for the purpose of enforcing domiciliary rights on the premises of Rhine-Waal University of Applied Sciences, and
§ 20 (1) Nr. 2 DSG NRW), for the protection of public safety, assets or legal property
Categories of personal data that are subject to processing:
Physical features and external characteristics in the form of still images and video
Data Storage Period
Recorded video is automatically deleted after 72 hours. Specific video recordings can be stored for longer periods of time when required for the prosecution of crimes or the assertion of legal claims.
Forwarding of Data
Videos and images are never forwarded to third parties.
Exclusively during technical maintenance, supervised by Rhine-Waal University of Applied Sciences and conducted by Phone Point Telekommunikationsservice GmbH, is it possible for a third party to have access to videos recorded by the campus security system. This maintenance is governed by a processing contract between Rhine-Waal University of Applied Sciences and Phone Point Telekommunikationsservice GmbH which adheres to Article 28 of the GDPR.
Specific video recordings can be forwarded to responsible authorities for the prosecution of crimes or the assertion of legal claims.
Rights of the Data Subjects
Any person recorded by the campus CCTV system (“data subject”) has the right to request confirmation from the controller as to whether or not personal data relevant to him or her are being processed; if this is the case, the data subject has the right to access this personal data, in particular the information defined in Article 15 GDPR.
Data subjects have the right to obtain from the controller the rectification or inaccurate personal data concerning him or her without undue delay and, where appropriate, the completion of incomplete personal data as well (Article 16 of the GDPR). Data subjects have the right to obtain from the controller the erasure of personal data concerning him or her if one of the grounds set forth in Article 17 of the GDPR applies: for example, if personal data is no longer necessary for the purposes for which they were collected or processed (“right to be forgotten”).
Data subjects have the right to obtain from the controller the restriction of processing if one of the prerequisites set forth in Article 18 of the GDPR applies: for example, if a data subject contests the accuracy of the personal data, resulting in a restriction on processing for a period enabling the controller to verify the accuracy of said personal data.
All data subjects have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with the supervisory authority if the data subject considers the processing of personal data concerning him or her to be in violation of the GDPR (Article 77 of the GDPR). The responsible supervisory authority for the state of North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit NRW
Postfach 20 04 44
40102 Düsseldorf
poststelle@ldi.nrw.de