Information pursuant to Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Our handling of your data and your rights
With this privacy notice, we inform you about the processing of your personal data within the framework of joint controllership pursuant to Art. 26 GDPR, as well as about your rights.
Within the framework of joint controllership, the two parties described here fulfill different purposes. These purposes are transparently described in this information obligation.
If you have any questions regarding the processing of your personal data or wish to exercise your data protection rights, you can contact either party, regardless of whether the contacted party is the one directly responsible for the processing purpose.
1. Who is responsible for data processing and whom can I contact?
Party 1:
Nippon Sanso Deutschland GmbH
Hans-Böckler-Straße 1
40476 Düsseldorf
Contact details of the Data Protection Officer:
Address as above: „ c/o Data Protection Officer “, e-mail: datenschutz.germany@eu.nipponsanso.com
Party 1 uses personal data (dash-cam recordings) for the following purposes within the framework of accident or incident investigation.
Party 2:
Schenk Tanktransport GmbH
Am Stadthafen 12-18
45881 Gelsenkirchen
Contact details of the Data Protection Officer:
Address as above: „c/o Data Protection Officer“, e-mail: consulting@datenschutzexperte.de
2. What sources and data are used?
The aforementioned parties process video recordings from dash-cams, which may involve the processing of the following personal data on a case-by-case basis:
Party 1
- License plate numbers
- Images of people in the vicinity
- Driver data (name, first name, driver ID ID)
- Recording of an administrative offense (accident)
Party 2
- Employee data
- Contact details
- Login-Data
- Biometric data (Video recordings – dashcam)
- Driver data
- GPS-Data
In the event of an incident, a video sequence of a total of 8 seconds is saved and processed by the parties. This includes 4 seconds before and after the incident for evaluation. To technically enable this, a background recording of up to 4 minutes takes place.
The incident could be triggered, for example, by a sudden hard braking or the deployment of the airbag in the vehicle.
3. Which purposes are my data processed for (purpose of processing) and on what legal basis?
The processing of personal data is necessary to protect the legitimate interests of the controllers and/or for the establishment, exercise, or defense of legal claims. The legal basis arises from Art. 6(1)(f) GDPR as well as Art. 9(2)(b) & (f) GDPR.
Party 1
Party 1 processes personal data (dash-cam recordings) for the following purposes:
- Accident or incident investigation
Party 1 has a legitimate interest in understanding the sequence of events in the case of an accident or incident, for the establishment, exercise, or defense of legal claims.
Party 2
Party 2 pursues the following purposes, which may involve the processing of personal data (dash-cam recordings:
- Installation
- Operation of hardware and software
- Use of recordings for operational purposes
- Troubleshooting
- Accident or incident investigation
Party 2 has a legitimate interest in understanding the sequence of events in the case of an accident or incident, for the establishment, exercise, or defense of legal claims.
4. Who receives my data?
Your personal data will only be shared by the parties in compliance with the GDPR and the BDSG and for the purposes mentioned above.
The use and forwarding of the data for other purposes is not intended.
5. How long are my data stored?
Your personal If a recording is made by mistake, for example, due to a sudden hard braking without further consequences, the data will be deleted for technical reasons at the latest after one year, without any further processing taking place. Generally, deletion occurs after the evaluation.
If the recording took place due to an accident or for the establishment, exercise, or defense of legal claims, the data will be deleted after these legal claims have been clarified, provided that no further retention is required. In these cases, the personal data will be deleted after the legally prescribed retention period.
6. Are data transferred to a third country or an international organisation?
In the course of order processing, personal data are also processed in a third country. Appropriate safeguards pursuant to Art. 46 GDPR are in place for this (conclusion of an EU standard contract).
A copy for review can be requested via the above-mentioned contact details of the Data Protection Officer.
7. What other data protection rights do I have?
Under the respective legal conditions, you have the right to:
- Access (Art. 15 GDPR),
- Rectification (Art. 16 GDPR),
- Erasure (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- As well as data portability (Art. 20 GDPR).
You can exercise these rights centrally with either of the two mentioned parties..
Additionally, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Competent supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen>
Postfach 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
E-mail: poststelle@ldi.nrw.de