In­for­ma­tion about how we pro­cess per­son­al da­ta in the con­text of the video surveil­lance of our lo­ca­tions and build­ings

The German Aerospace Center (Deutsche Zentrum für Luft- und Raumfahrt e.V.; henceforth: 'DLR' ) takes the protection of personal data very seriously.

In accordance with the EU General Data Protection Regulation (GDPR) applicable as of 25 May 2018, we would like to inform you about how we process your personal data and about the rights to which you are entitled. This information will be updated as necessary and provided to you.

1. Name and address of the controller

The controller in terms of GDPR is:
Deutsches Zentrum für Luft- und Raumfahrt e. V. (DLR)
German Aerospace Center
Linder Höhe, 51147 Cologne, Germany
Telephone: +49 2203 601-0
Internet: https://www.dlr.de

2. Name and address of the data protection officer

The controller's data protection officer is:
Uwe Gorschütz, Deutsches Zentrum für Luft- und Raumfahrt e. V., Linder Höhe, 51147 Cologne;
E-Mail: datenschutz@dlr.de

3. Specific purposes of the processing activity

Video surveillance of our sites and buildings is used to protect individuals and property, prevent accidents and damage, as well as to exercise our domestic authority and prevent trespassing during and outside business hours.

4. Legal basis for the processing activity

The legal basis for the processing activity is Art. 6 (1) (c), (e), (f) GDPR. Our legitimate interest in video surveillance is the exercise of domestic authority, the protection of individuals and property, the prevention of accidents and the avoidance of damage.

5. Categories of personal data

Within the scope of the processing activity, recordings are made by various video cameras (each with a wide angle and specific viewing direction). This may involve the recording of persons entering or leaving a DLR site or building.

6. Recipients of personal data

Personal data is only disclosed within our organisation to those institutions entrusted with the processing of the data. A transfer of data shall only take place in compliance with confidentiality and only to the extent permitted by a legal basis.

7. Storage period

Personal data shall only be processed as long as necessary. As a general rule, the need for processing ceases after a period of seven days. In addition, data retention may take place in individual cases if this has been provided for by the European or national legislature in Union regulations, laws or other provisions to which the person responsible is subject.

8. Rights of data subjects

When your personal data are processed, you are a data subject within the meaning of the GDPR, which entitles you to the following data subject rights in accordance with the provisions set out below. In order to exercise these rights, please contact the office indicated in Section 1 or 2.

Pursuant to GDPR Art. 15 of, you have the right to request information about the personal data we process. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your personal data have been or will be disclosed, the planned storage period and the existence of the rights explained in this section 4 and 6.

Pursuant to GDPR Article 16, you have the right to obtain from us without undue delay the rectification of inaccurate or incomplete personal data concerning you.

Pursuant to GDPR Article 17, you have the right to request from us the erasure of your personal data, provided that processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

Pursuant to Article 18 GDPR, you have the right to the restriction of processing where the accuracy of the personal data is contested by you, the processing is unlawful, or we no longer need the personal data but you reject their erasure because they are required by you for the establishment, exercise, or defence of legal claims. You are also entitled to this right to restriction of processing pursuant to Article 18 GDPR if you have submitted an objection to processing pursuant to Article 21 GDPR.

Pursuant to GDPR Article 20, you shall have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format and you have the right to transmit those data to another controller.

Pursuant to GDPR Article 7 (3), you have the right to withdraw your consent at any time. Subsequently we shall no longer have the right to continue the data processing based on your consent, with future effect.

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. Generally, you should be able to contact the supervisory authority of your regular place of residence, your place of work, or our offices to do so. The responsible supervisory authority is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

9. Right to object

If personal data is processed on the basis of legitimate interests in accordance with Article 6 (f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided there are reasons for this that result from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation, unless the processing is necessary to fulfil a task in the public interest, Article 21 (6) GDPR.

10. Automated decision-making

Automated decision-making does not take place.