Recipients or categories of recipients of the data
The video recordings are stored and processed exclusively at PAYONE and at Worldline Germany GmbH, which operates the video surveillance system for PAYONE. Data will only be transferred to third parties in cases where the recordings are required as evidence for the prosecution of criminal offenses and/or for the enforcement of civil law claims, to the competent authorities (in particular law enforcement authorities and courts).
Data is not transferred to third countries outside the EU or the EEA, where the level of data protection may be lower than within the EU and the EEA.
Rights of the data subjects
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR, in each case subject to the statutory requirements. The restrictions under Sections 34 and 35 BDSG (new) also apply to the right of access and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). This can, for example, be lodged with the supervisory authority responsible for PAYONE: The Hessian Data Protection Officer, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, https://datenschutz.hessen.de/can be exercised.