Fact Sheet according to Art. 13 of the General Data Protection Regulation for Closed Circuit Television (CCTV)

Name and Contact Details of the Data Controller: Atlas Copco Holding GmbH, Langemarckstraße 35, 45141 Essen Telefon: +49 (0)201 2177 0 eMail: acessen.telefonzentrale@de.atlascopco.com Contact Details of the Data Protection Officer: datenschutz.holding@atlascopco.com Purposes and Legal Basis of Data Processing: Maintenance of domestic authority, for purposes of deterred theft and vandalism, the investigation of theft and property damage and also the implementation of the necessary technical-organizational measures relating to data security; Art. 6 para. 1 sentence 1 lit. c) and f) GDPR Legitimate Interests being pursued: Protection of our property, the prevention or investigation of criminal offenses, the assertion, exercise or defense of legal claims, the control of unauthorized access or the security of our premises. Retention Time or Criteria for the Determination of the duration: Basically seven days; should an incident occur, the recordings will be stored for the duration of the investigation and prosecution of the occurrence or the exercise, assertion or defense of any legal claims and subsequently deleted. Recipients of Category of Recipients of the data processed (in case data transfer takes place): A data transfer does not take place in principle. Disclosure to third parties, such as investigating authorities or insurance companies, will only take place if it is necessary to enforce legal claims or prosecute offenses in a specific case. Incidentally, we refer data to processors commissioned by us, e.g. the security company.

References to the Rights of Data Subjects The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and to the information listed in Art. 15 GDPR. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and where appropriate to have incomplete personal data completed (Art. 16 GDPR). The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure). The data subject shall have the right to obtain from the controller restriction of processing where one of the following prerequisites listed in detail in Art. 18 GDPR applies, e.g. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR). Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, if the data subject considers that the processing of personal data relating to him or her infringes this Regulation (Art. 77 GDPR). The data subject may assert this right with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement. In North Rhine-Westphalia, the relevant supervisory authority reads as follows: Landesbeauftragte für Datenschutz und Informationsfreiheit North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf

Deutschland