The Spandau Arcades are under 24-hour video surveillance for security reasons.
Contact details of the data controller:
mfi Shopping Center Management GmbH
Klaus-Bungert-Straße 14
0468 Düsseldorf
Contact details of the data protection officer:
Unibail-Rodamco Germany GmbH
Klaus-Bungert-Straße 14
0468 Düsseldorf
Email: datenschutz@urw.com
Purposes and legal basis of data processing:
Exercise of the right to control access to the premises and legitimate interests (Art. 6 para. 1 lit. f GDPR)
Legitimate interests pursued:
Protection of the life, health, and/or freedom of persons present in the shopping center
Storage period or criteria for determining the storage period:
48 hours; In specific cases, individual sequences may be stored for longer periods for the purpose of enforcing claims.
Recipients or categories of recipients of the data:
Data will not be transmitted to third parties, except to state investigative authorities in the case of specific investigations.
Information on the rights of data subjects
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Article 15 of the GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Article 16 of the GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds specified in Article 17 of the GDPR applies, e.g., For example, if the data is no longer needed for the purposes for which it was collected (right to erasure). The data subject has the right to request from the controller the restriction of processing if one of the conditions listed in Article 18 GDPR applies, e.g., if the data subject has objected to the processing, for the period during which the controller verifies the objection. The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims (Article 21 GDPR).
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right with a supervisory authority in the Member State of his or her habitual residence, place of work, or the place of the alleged infringement.
In Berlin, the competent supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Telephone: +49 30 13889-0
Fax: +49 30 2155050
