Transparency and trustworthy handling of your personal data is important to us. Therefore, in accordance with the statutory data protection provisions we want to keep you informed about how we process your personal data and how you can exercise your rights.

1. Controller

Controller of your personal data pursuant to Art. 4 para 7 of the EU General Data Protection Regulation (GDPR) is the following:

2. Data Protection Officer

You can contact our data protection officer by mail at:

RWE Renewables Denmark A/S
Data Protection Officer
Vesterbrogade 1L
1620 Copenhagen V
Denmark

You can also send an email to dpo-north-europe@rwe.com.

3. Personal data we process and its purposes

The controller monitors its buildings and premises through video recording and live video transmission (live streams). As a general rule, public areas are not subject to video surveillance.

Video surveillance serves several purposes: detecting security-relevant events, providing an optical connection for the remote control and monitoring of other systems, verifying individuals, preserving evidence in the event of security-relevant incidents or suspected criminal offenses, and safeguarding domiciliary rights for us and third parties. Essentially, it contributes to comprehensive building and personal security. With the aid of video surveillance, immediate measures can be initiated, if necessary, to address irregularities. Automated decision-making including profiling is not conducted.

4. Sources of the data

The personal data is obtained within the detection range of video surveillance systems. Areas under video surveillance are marked with corresponding signs. In instances where the law mandates video surveillance in specific areas, we cannot allow individuals to stay without being subjected to video surveillance. In all other cases, video surveillance can be waived if you communicate your justified objections to us in advance, and we cannot demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms.

5. Legal basis for processing your data

The use of video surveillance is based on our legitimate interests and, if applicable, the legitimate interests of third parties for the purposes listed in section 3 pursuant to Art. 6 para 1 lit. f) GDPR. In individual cases, the controller may be obliged to carry out video surveillance of specific areas due to applicable legal requirements. The legal basis for such monitoring is compliance with legal obligations pursuant to Art. 6 para 1 lit. c) GDPR.

6. Data recipients

The analysis of video data occurs only when deemed necessary. Individual tasks and services may be undertaken by carefully selected and commissioned service providers (e.g. IT), who are obligated to meet the data protection and security requirements of the data controller.

Your data will be stored exclusively within the European Union. Transmission of video surveillance data to third parties will take place only if there is a legitimate interest in doing so and provided that this does not conflict with any overriding interests of the data subjects.

In the event of a breach of house rules, the commission of a criminal offense or when required by law, recordings can or must be handed over to judicial and law enforcement authorities, such as the police or public prosecutor's office.

7. Data storage period

As a general rule, recorded video surveillance data is deleted once it is no longer necessary for its purpose, within a maximum of 7 days. In certain circumstances, the retention period can be longer if it is necessary for its purpose and falls within the limits applicable in the local jurisdiction. If the processing of recorded video surveillance data is carried out to preserve evidence in the event of security-related incidents or suspicion of criminal offenses, it will be deleted promptly upon the conclusion of the respective process, provided there are no statutory retention periods or other compelling reasons to retain the data.

8. Your data protection rights

You can assert the following rights under the respective legal conditions:

• the right to obtain information on data processing and a copy of the data processed,
• the right to have incorrect data corrected,
• the right to have your data erased if there is no legal reason for further retention,
• the right to request restriction of processing,
• the right to data portability with regard to all data that you have provided to us, and