Privacy Policy for Video Surveillance

1. Categories of data processed

In the context of video surveillance, Siemens processes the following personal data:

• Optical video recordings of the company premises, including the entrance and the immediately adjacent outdoor area (no sound recording is made) and
• Date and time of the recordings.

2. Purpose of processing

Siemens processes your personal data for the following purposes:

• to prevent, detect and investigate criminal offences (such as theft and vandalism),
• to be able to exercise our domiciliary rights and
• to prevent, detect and clarify unauthorised access to the company premises.

3. Legal basis for processing

The legal basis for the data processing is "the safeguarding of legitimate interests" of Siemens within the meaning of Article 6 (1) (f) of the General Data Protection Regulation, which consists of making video recordings in order to achieve the above-mentioned purposes.

4. Transfer and disclosure of personal data

Siemens will transfer your personal data to:

• other Siemens Group companies, if this is necessary to fulfill the above-mentioned purposes,
• Courts, arbitral tribunals, authorities or legal advisors, if this is necessary for compliance with applicable law, or for the establishment, exercise or defense of legal claims.

5. Storage periods

Video recordings are generally deleted within five days. Longer storage is only possible in individual cases if longer storage is necessary for the purposes mentioned for the investigation and evaluation of the video recordings (e.g. if there is sufficient suspicion of a criminal offence and the investigation and evaluation of the video recording is necessary in the course of an investigation). In this case, the video recordings are deleted after the scan is completed.

6. Your rights

Under applicable data protection law, you may have the right to:

• request confirmation as to whether Siemens is processing personal data about you and obtain information about the personal data processed by Siemens and other information,
• request the rectification of inaccurate and, if necessary, the completion of incomplete personal data,
• request the erasure of the personal data processed by Siemens,
• request the restriction of the processing of personal data by Siemens,
• request the transfer of the data, or
• object to the processing of personal data by Siemens.

Further information and explanations on the rights addressed can be found on the European Commission's "Rights for Citizens" website under https://commission.europa.eu/law/law-topic/data-protection/reform/rights-citizens_de.

7. Contact person

The Siemens Data Protection Organization provides support for all questions relating to data protection. Complaints may also be lodged against the Siemens Data Protection Organization and the rights mentioned in this Privacy Statement may be asserted. The Siemens Data Protection Organization can be contacted at datenschutz.sag.at@siemens.com. For more information, please visit www.siemens.at/datenschutz. The Siemens Data Protection Organization always strives to address and remedy your inquiries and complaints. In addition to contacting the Siemens data protection organization, you also have the option of contacting the responsible data protection supervisory authority at any time. An overview of national and international data protection authorities is available at https://commission.europa.eu/law/law-topic/data-protection/reform/rights-citizens/redress/what-are-data-protection-authorities-dpas-and-how-do-i-contact-them_de.