Information on the Processing of Your Personal Data pursuant to Art. 13 GDPR
Have you noticed one of our documentation or surveying drones, or a related information sign? We would like to provide you with transparent information about the background.
The use of drones for creating terrain models or documenting construction progress on large-scale sites is an efficient and cost-effective alternative to traditional GPS surveying or manual construction documentation. The recording and surveying of the existing topography is carried out through targeted drone flights. The collected data is subsequently processed and analyzed with the aid of software by our engineers. Drone flights are conducted exclusively over previously marked and designated construction site areas.
In accordance with Art. 13 GDPR, we would like to inform you below about the possible processing of personal data in the context of these operations:
1. Name and Contact Details of the Controller and the Data Protection Officer
HERING Bahnbau GmbH
Neuländer 1 | Holzhausen
D-57299 Burbach
+49 2736 27-131
gruppe@hering-bau.de
The Data Protection Officer of Hering Bahnbau GmbH is:
Dipl.-Ing. Lars Ebertz
im Auftrag der EBERTZ DATENSCHUTZ GmbH
Ober den Wiesen 17
35756 Mittenaar
www.ebertz-datenschutz.de
lars(at)ebertz-datenschutz.de
2. Collection and Storage of Personal Data as well as Type, Purpose and Use of such Data
In the context of surveying activities, it may occur that personal data – image data captured from a vertical perspective – are temporarily recorded by the system. This is neither the objective nor the purpose of the flight and surveying operations, and we assure you that such data will be promptly deleted by us! The actual purpose is the surveying of clearly designated construction site areas in order to ensure the proper and timely execution of the project. This may be carried out on behalf of a public authority or a private client.
The collection and processing of these surveying data are carried out:
- to ensure the proper execution of existing contracts,
- for the preparation of measurements.
Any personal data or data relating to private areas/properties will be promptly anonymized or deleted (cf. Art. 4 GDPR for definitions).
Data processing is generally carried out on the basis of Art. 6 (1) sentence 1 lit. b GDPR for the purposes mentioned, in order to properly process the offer/contract and to fulfil mutual obligations arising from the contract.
The data collected by us for the processing and execution of the contract will be stored until the statutory retention period expires and will then be deleted, unless we are obliged to store them for a longer period pursuant to Art. 6 (1) sentence 1 lit. c GDPR due to statutory retention and documentation obligations (from the German Commercial Code (HGB), Criminal Code (StGB) or Fiscal Code (AO)), or unless you have consented to storage beyond this period pursuant to Art. 6 (1) sentence 1 lit. a GDPR.
3.Disclosure of Data to Third Parties
Your data will not be transferred to third parties for purposes other than those listed below:
- Where this is required under Art. 6 (1) sentence 1 lit. b GDPR for the processing of your request/contract, your personal data will be passed on to third parties.
- Furthermore, in certain cases – e.g., in the event of individuals being present within the surveying/flight area – processing may be carried out on the basis of Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest / balancing of interests).
- Under no circumstances will any data outside the construction site/surveying/documentation area be disclosed!
4. Rights of Data Subjects
You have the right:
- Pursuant to Art. 7 (3) GDPR, to withdraw your consent once given to us at any time. This means that we may no longer continue the data processing based on such consent for the future.
- Pursuant to Art. 15 GDPR, to obtain information about the personal data concerning you that we process. This includes information about the categories of recipients to whom the data has been or will be disclosed, as well as the purposes and the envisaged period of storage.
- Pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.
- Pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- Pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data, where the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR.
- Pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of those data to another controller.
- Pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, place of work, or our company’s registered office.
5. Right to Object
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data on grounds relating to your particular situation.
If you wish to exercise your right to object, it is sufficient to send an e-mail to lars@ebertz-datenschutz.de.