Customer Information on Video Surveillance

In the following, the Rostocker Straßenbahn AG (hereinafter RSAG) provides information about the processing of the data subject’s personal data pursuant to Art. 13 and Art. 14 of the General Data Protection Regulation (GDPR).

Data Controller

Rostocker Straßenbahn AG
Hamburger Str. 115
18069 Rostock

Represented by Board Directors: Ms Yvette Hartmann and Mr Jan Bleis Local
Court of Rostock HRB 074
+49 381 - 802 1900

Contact Data for the Data Protection Officer

Rostocker Straßenbahn AG
Hamburger Straße 115
18069 Rostock

Purpose of Processing and Legal Basis

Video surveillance serves to prevent damage caused by vandalism and to raise the subjective safety of passengers and employees.
The video recordings enable evidence relating to incidents such as vandalism or violence against passengers to be preserved if the police or the department of public prosecution request it.

The legal basis for video surveillance is constituted by Article 6(1) point (f) GDPR – legitimate interest in the protection of passengers and vehicles.

Data Recipients

Relevant records are handed over to the police, public prosecution department or courts as evidence.
A transfer of data to third states does not occur and is not planned.

Duration of Data Storage/Erasure

In normal vehicle operations, video records are always made. If no incidents are reported, the hard disk is written over with current data after being saved for 24 hours and without knowledge of the recorded images.

Rights of Data Subjects

The data subject has the right to request confirmation from the controller about whether personal data relating to them is being processed; if this is the case, they have a right of access to information about this personal data and to the information listed in detail in Art. 15 GDPR.

The data subject has the right to request from the controller without undue delay rectification of inaccurate personal data relating to them and if necessary the completion of incomplete personal data (Art. 16 GDPR).

The data subject shall have the right to request from the controller the erasure of personal data concerning him or her without undue delay if one of the following grounds as detailed in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purpose for which they were collected (right to erasure).

The data subject has the right to request from the controller the restriction of processing, if one of the conditions listed in Art. 18 GDPR is applicable, e.g. if the data subject has objected to processing, for the period needed for the controller to examine the matter.

The data subject has the right for reasons arising from their specific situation to object to processing of personal data relating to them. The controller shall no longer process the personal data unless he/she can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, if they consider that the processing of personal data relating to them infringes the GDPR (Art. 77 GDPR). The data subject can assert this right with a supervisory authority in the member state of their place of habitual residence, place of work or the place of the alleged infringement.

The competent supervisory authority in Mecklenburg-Vorpommern is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern Lennéstraße 1
Schloss Schwerin 19053 Schwerin