Privacy Notice on Photographs
Swiss Steel Holding AG (hereinafter: "Organiser") is the organiser of the event Customer Event. In the course of the event, photographs of the participants will be taken. Against this background, the Organiser informs the participants below about the processing of their personal data in accordance with Art. 13 GDPR:
1. Controller and Data Protection Officer
The controller pursuant to Art. 4 No. 7 GDPR is
Swiss Steel Holding AG
Emmenweidstr. 90,
6020 Emmenbrücke
Switzerland
The controller belongs to the Swiss Steel Group.
The EU representative of Swiss Steel Holding AG is Swiss Steel Edelstahl GmbH, Eupener Str. 70, 40549 Düsseldorf.
You can reach our data protection officer at dpo@swisssteelgroup.com.
2. Purposes of Data Processing and Legal Basis
The photographs are made and used for the purposes of internal documentation of the event and external public relations (publication on the social network LinkedIn). The legal basis for the processing is Art. 6 para. 1 sent. 1 lit. f GDPR. It serves our legitimate interest in documenting the event and collecting image material to promote upcoming events. For external purposes, visual material on which persons are not individually recognisable is used whenever possible.
3. Recipients of the Personal Data
The Organiser has commissioned an external photographer to take the photographs. The photographs will not be passed on to third parties, with the exception of publication on the social network LinkedIn.
Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Website: https://www.linkedin.com;
Privacy policy: https://www.linkedin.com/legal/privacy-policy;
Standard contractual clauses (guaranteeing the level of data protection in the case of processing in third countries): https://legal.linkedin.com/dpa;
Option to object to LinkedIn advertising cookies (opt-out):
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out;
Data Processing Agreement (DPA): https://legal.linkedin.com/dpa.
4. Storage Period
Photographs that are not used after the event will be deleted immediately. The photographs used will be stored for a maximum period of 24 months and then deleted.
5. Rights of the Person Depicted
The person depicted has the right to information (Art. 15 GDPR), to correction or deletion (Art. 16 and 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). In addition, the person depicted has the right to complain to a data protection supervisory authority about the data processing by the organiser.
Since we base the processing of the photographs on legitimate interests (Art. 6 para. 1 sent. 1 lit. f GDPR), the person depicted may object to the processing for reasons arising from their particular situation (Art. 21 para. 1 GDPR). The person depicted must declare their objection directly to the photographer during the event.