Video observation and video surveillance

Gasteig München GmbH
Represented by the Managing Director Stephanie Jenke

Address: Rosenheimer Straße 5, 81667 Munich, Germany
E-mail: zentral@gasteig.de
Tel.: +49 (0)89 48098-0

The term “personal data” includes all information relating to an identified or identifiable natural person. In the following cases, we may process your personal data relating to your visit to our premises or one of our events for the purposes stated below and based on the legal basis mentioned:

• Event-related video observation without recording in or in front of the event halls for the purpose of the proper execution of events.
• Location-based video surveillance with recording to prevent and prosecute theft or vandalism and for traffic control.

Legal basis for processing your personal data: Legitimate interest of the controller, Gasteig München GmbH, in accordance with Sect. 4(1)(3) of the Bundesdatenschutzgesetz (German Federal Data Protection Act).

Your personal data that is processed for the above-mentioned purposes during your visit at our premises or one of our events will be transmitted or made accessible to other recipients only if this is necessary for us to process your request or if we have entrusted other recipients with the performance of individual tasks or services and access to these personal data is thereby necessary or cannot be excluded. The recipients or categories of recipients of personal data that may be processed during your visit to our premises or of one of our events for the above-mentioned purposes are:

• Internal departments involved in completing the required business processes (e.g. Events Management and Execution, IT)
• Event-related video observation: Individual employees of the Hochschule für Musik und Theater, the Munich Philharmonic, Bayerischer Rundfunk, Gasteig Kult und Speise GmbH (all based in Munich) as well as individual employees of the respective organisers for the purposes of the proper execution of events.
• Event-related video observation and location-based video surveillance: Event security company Veranstaltungsdienst Paul Mayr & Co. KG, headquartered in Munich, Germany, for the purpose of organising events in accordance with the regulations, for the prevention and prosecution of theft or vandalism, and for traffic control.

The transfer of your personal data that may be processed for the above-mentioned purposes as a result of your visit to our premises or one of our events to the above-mentioned recipients is carried out on the basis of the justified interest of the controller, Gasteig München GmbH, in accordance with Article 6(1) point (f) of the European General Data Protection Regulation (GDPR) or on the basis of order processing in accordance with Article 28(1) GDPR.

In addition, your personal data that may be processed for the above-mentioned purposes as a result of your visit to our premises or one of our events will be transmitted to government institutions or authorities to the extent that we are legally obliged to provide this information or are obliged to provide this information by official or court ruling or if this is necessary to prosecute criminal offences against us or third parties or to assert, exercise or defend civil law claims due to the justified interest of the controller, Gasteig München GmbH, in accordance with Article 6(1) point (f) GDPR.

We do not transfer your personal data that may be processed for the above-mentioned purposes as a result of your visit to our premises or one of our events to recipients in a third country or to international organisations.

Your personal data that may be processed for the above-mentioned purposes as a result of your visit to our premises or one of our events will only be stored for as long as is necessary to fulfil the purposes for which it is processed.

• Event-related video observation: No personal data that may be processed for the above-mentioned purposes due to your visit to one of our events is stored.
• Location-based video surveillance: Your personal data that may be processed for the above-mentioned purposes due to your visit to our premises is stored. The duration of storage varies depending on the purpose of storage and can be up to 28 days.

You have the following rights regarding your personal data that may be processed for the above-mentioned purposes as a result of your visit to our premises or one of our events.

• The right to access in accordance with Article 15 GDPR:
  You have the right to request information from the controller about the personal data stored about you and other information relating to this personal data.
• The right to rectification in accordance with Article 16 GDPR:
  You have the right to obtain from the controller rectification of inaccurate personal data concerning you.
• The right to erasure in accordance with Article 17 GDPR:
  You have the right to obtain from the controller the erasure of personal data concerning you.
• Right to restrict processing in accordance with Article 18 GDPR:
  You have the right to request the controller to restrict the processing of personal data concerning you.
• Right to object in accordance with Article 21(1) GDPR:
  You have the right to object at any time to the processing of your personal data in accordance with Article 6(1) point (e) or (f) GDPR.
• Right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR:
  If, as data subject, you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. Competent supervisory authority: Bavarian Data Protection Authority, Promenade 27 (Schloss), 91522 Ansbach, Germany; Tel.: +49 981 531300, Fax: +49 981 53981300, e-mail: poststelle@lda.bayern.de.

The exercise of your rights to restriction of processing or objection may mean that you can visit our premises or our events only to a limited extent or not at all.

Automated decision making, including profiling on the basis of your personal data that may be processed due to your visit to our premises or one of our events for the above-mentioned purposes does not take place. Similarly, the provision of your personal data is not required by law or contract and is not necessary for the conclusion of a contract. Furthermore, Gasteig München GmbH is under no obligation to provide your personal data in this context.

You can address your above rights directly to the contact details provided under “Name and contact details of the controller” in this Privacy Policy.

Data Protection Officer of Gasteig München GmbH

℅ TÜV SÜD Akademie GmbH

Westendstraße 160

80339 Munich

E-mail: dsb.gasteig@tuvsud.com

If, in addition to this Privacy Policy, any questions have remained unanswered with regard to your personal data that may be processed for the above-mentioned purposes due to your visit to our premises or one of our events, you can address them directly to the contact data provided under “Name and contact details of the controller” or “Contact details of the Data Protection Officer” in this Privacy Policy.

As at: August 2022