Video surveillance

Data Protection Information on Video Surveillance at Westfield Donau Zentrum (including The Kitchen) (19.03.2024)

  1. Data Controller
    Unibail-Rodamco Austria Verwaltungs GmbH (FN 106621 x), Donaustadtstraße 1/6. OG, 1220 Vienna, Tel: +43 (0) 1 202 32 00 110, Email: dz.centermanagement@urw.com

  2. Data Subjects
    Persons who are in the video-surveilled area

  3. Purposes of Processing
    Property protection (protection of property and employee safety); protection against damage (fulfilling traffic safety obligations, liability to customers, etc.); prevention, containment, and investigation of criminal behavior by persons in the video-surveilled area; each with exclusive evaluation in the defined case for the purpose specified.

  4. Legal Basis for Processing
    Article 6(1)(f) General Data Protection Regulation (legitimate interest of the controller or a third party), potentially § 12(2) No. 4 in conjunction with § 3 No. 1 Data Protection Act; §§ 353 et seq. Austrian Civil Code, § 80 Austrian Code of Criminal Procedure 1975.
    The video surveillance was implemented due to previous legal violations and is only carried out in areas affected by the controller's management. No video surveillance takes place in areas that belong to the most personal areas of life (e.g., restrooms). Video surveillance serves to protect the legitimate interests listed in point 3.

  5. Categories of Personal Data
    5.1 For persons in the video-surveilled area: Image data of the affected persons (appearance, behavior, identifying marks); location of the image recording (room, camera location); time of image recording (date, time, start/end of recording).
    5.2 For persons identified exclusively in the context of video surveillance for specific incidents: Identity of the affected persons, if recognizable from the recording by the evaluator; role of the affected persons (e.g., perpetrator, victim, witness), if recognizable from the recording.

  6. Recipients of Personal Data
    6.1 Responsible authorities or courts for securing evidence in criminal matters: §§ 80 et seq., 109 et seq. Criminal Procedure Code (StPO) in conjunction with § 12(5) in conjunction with § 2(3) Data Protection Act, as amended.
    6.2 Security authorities for public safety purposes: §§ 53(5) SPG in conjunction with § 12(5) in conjunction with § 2(3) Data Protection Act, as amended.
    6.3 Courts for securing evidence in civil matters: §§ 384 et seq., ZPO in conjunction with § 12(5) in conjunction with § 2(3) Data Protection Act, as amended.
    6.4 Insurance companies solely for the processing of insurance claims; lawyers solely for enforcing or defending legal claims: §§ 12(5) in conjunction with § 2(4) Data Protection Act, as amended.
    6.5 Siwacht Bewachungsdienst Gesellschaft m.b.H. (FN 81451g), APS-123alarm Sicherheitstechnik GmbH (FN 388975y) as processors.

  7. Storage Duration or Criteria for Storage Duration
    72 hours (§ 13(3) Data Protection Act)

  8. Provision of Data Legally/Contractually Required, Required for Conclusion of a Contract; Obligation of the Data Subject to Provide Data, Consequences of Non-Provision
    The provision of data is voluntary. However, access to the video-surveilled area is not possible without providing the data (the intended purpose cannot be achieved by other means).

  9. Information on Rights
    Each data subject has the right to request information from the controller regarding their personal data, to access, rectify, or delete their data, to object to the processing, or to request the restriction of processing.
    These rights can be exercised by email to at-datenschutz@urw.com. Each data subject has the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, if they believe that the controller is processing their personal data in a manner that does not comply with the General Data Protection Regulation.