Extended Data Privacy Information for CCTV Use on Campus

Name and Contact Details of the Controller

Rhine-Waal University of Applied Sciences

Executive Board

Marie-Curie-Str. 1

47533 Kleve

info@hochschule-rhein-waal.de

Contact Details of the Data Protection Officer

Rhine-Waal University of Applied Sciences

Appointed Data Protection Officer

Marie-Curie-Str. 1

47533 Kleve

datenschutz@hochschule-rhein-waal.de

Purpose for Processing and Legal Basis for Processing

§ 20 (1) Nr. 1 DSG NRW (Data Privacy Act of NRW), for the purpose of enforcing domiciliary rights on the premises of Rhine-Waal University of Applied Sciences, and

§ 20 (1) Nr. 2 DSG NRW), for the protection of public safety, assets or legal property

Categories of personal data that are subject to processing:

Physical features and external characteristics in the form of still images and video

Data Storage Period

Recorded video is automatically deleted after 72 hours. Specific video recordings can be stored for longer periods of time when required for the prosecution of crimes or the assertion of legal claims.

Forwarding of Data

Videos and images are never forwarded to third parties.



Exclusively during technical maintenance, supervised by Rhine-Waal University of Applied Sciences and conducted by Phone Point Telekommunikationsservice GmbH, is it possible for a third party to have access to videos recorded by the campus security system. This maintenance is governed by a processing contract between Rhine-Waal University of Applied Sciences and Phone Point Telekommunikationsservice GmbH which adheres to Article 28 of the GDPR.



Specific video recordings can be forwarded to responsible authorities for the prosecution of crimes or the assertion of legal claims.

Rights of the Data Subjects

Any person recorded by the campus CCTV system (“data subject”) has the right to request confirmation from the controller as to whether or not personal data relevant to him or her are being processed; if this is the case, the data subject has the right to access this personal data, in particular the information defined in Article 15 GDPR.



Data subjects have the right to obtain from the controller the rectification or inaccurate personal data concerning him or her without undue delay and, where appropriate, the completion of incomplete personal data as well (Article 16 of the GDPR). Data subjects have the right to obtain from the controller the erasure of personal data concerning him or her if one of the grounds set forth in Article 17 of the GDPR applies: for example, if personal data is no longer necessary for the purposes for which they were collected or processed (“right to be forgotten”).

Data subjects have the right to obtain from the controller the restriction of processing if one of the prerequisites set forth in Article 18 of the GDPR applies: for example, if a data subject contests the accuracy of the personal data, resulting in a restriction on processing for a period enabling the controller to verify the accuracy of said personal data.



All data subjects have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with the supervisory authority if the data subject considers the processing of personal data concerning him or her to be in violation of the GDPR (Article 77 of the GDPR). The responsible supervisory authority for the state of North Rhine-Westphalia is:



Landesbeauftragte für Datenschutz und Informationsfreiheit NRW

Postfach 20 04 44

40102 Düsseldorf

poststelle@ldi.nrw.de