Video Surveillance

Data Protection Information on Video Surveillance in Westfield Shopping City Süd (including Multiplex and Loading Bays in the Outdoor Area)
(As of 13.02.2024)

1. Controller

Unibail-Rodamco Austria Verwaltungs GmbH (FN 106621 x);
Donaustadtstraße 1/6. OG, 1220 Vienna
Tel: +43 (0) 1 202 32 00 110
Email: scs.centermanagement@urw.com
Website: www.at.westfield.com/scs

2. Data Subjects

Individuals present in the video-monitored area

3. Purpose of Processing

• Protection of property

  (protection of property and employees)

• Prevention of damage

  (fulfilling traffic safety obligations, contractual liability towards customers, etc.)

• Prevention, mitigation, and investigation of criminal behavior

  by individuals in the video-monitored area

• Exclusive evaluation in case of an incident defined by the purpose designation

4. Legal Basis for Processing

• Article 6(1)(f) GDPR

  (legitimate interest of the controller or a third party)

• § 12(2) Z 4 in conjunction with § 12(3) Z 1 of the Data Protection Act

• §§ 353 ff General Civil Code, § 80 Code of Criminal Procedure 1975

The video surveillance was implemented due to previous legal violations and is carried out only in areas managed by the controller. No video surveillance is conducted in areas belonging to an individual’s most private sphere (e.g., restrooms). Video surveillance serves to protect the legitimate interests mentioned in Section 2.

5. Categories of Personal Data

5.1 Data of individuals present in the video-monitored area:

• Image data of the affected individuals (appearance, behavior, license plates)

• Location of the recording (room, camera location)

• Time of recording (date, time, start/end of recording)

5.2 For individuals identified in the event of an incident:

• Identity of the individuals, if recognizable from the footage

• Role of the individuals (e.g., perpetrator, victim, witness), if recognizable from the footage

6. Categories of Recipients of Personal Data

• 6.1 Competent authorities or courts

  for securing evidence in criminal cases (§§ 80 and 109 ff Code of Criminal Procedure in conjunction with § 12(5) in conjunction with § 12(2) Z 3 Data Protection Act)

• 6.2 Security authorities

  for security police purposes (§§ 53(5) Security Police Act in conjunction with § 12(5) in conjunction with § 12(2) Z 3 Data Protection Act)

• 6.3 Courts

  for securing evidence in civil cases (§§ 384 ff Civil Procedure Code in conjunction with § 12(5) in conjunction with § 12(2) Z 3 Data Protection Act)

• 6.4 Insurance companies

  exclusively for handling insurance claims;

  lawyers

  exclusively for enforcing or defending legal claims (§§ 12(5) in conjunction with § 12(2) Z 4 Data Protection Act)

• 6.5 Data processors:

  • Siwacht Bewachungsdienst Gesellschaft m.b.H. (FN 81451g)

  • main technische dienstleistung gmbh (FN 258639 b)

  • Salzgeber GmbH (FN 257425t)

7. Retention Period or Criteria for Retention

72 hours (§ 13(3) Data Protection Act)

Note: The IKEA area is excluded from this. The controller for the IKEA area is IKEA Möbelvertrieb OHG.

8. Provision of Data

Providing data is voluntary. However, entry into the video-monitored area without providing data is not possible (the intended purpose cannot be achieved by other means).

9. Information on Rights

Every data subject has the right to:

• Access personal data

• Request correction or deletion of data

• Object to processing

• Request processing restrictions

These rights can be exercised by emailing at-datenschutz@urw.com.

Additionally, there is a right to lodge a complaint with the Austrian Data Protection Authority:
Barichgasse 40-42, 1030 Vienna, if the data subject believes that the controller is processing personal data in violation of the GDPR.