Information on the processing

thyssenkrupp AG ("we") inform you about the planned use of your photo or video clip ("recordings") in the context of we care. The we care initiative serves to continuously raise awareness of occupational safety and health issues among all employees in the thyssenkrupp group of companies.

As part of this year's communication campaign "#howareyou", we plan to publish posters and other communication materials. The aim is to raise awareness among colleagues that the question "How are you?" is particularly important at the moment. We want to motivate everyone to ask themselves and others this question and provide assistance on how to ask this question honestly and how to deal with the answer.

With your admission, you support us in presenting the topics of occupational safety and health in an appealing way. We communicate from colleagues for colleagues. We plan to use your recording on posters, in Power Point slides and other communication materials that will be made available to tk units worldwide.

In doing so, we ensure that we comply with the requirements of applicable data protection laws. Below we provide a detailed overview of how we handle your data and rights.

1. Who is Controller for processing and who is the data protection officer?

The Controller for processing is your employer, the

thyssenkrupp AG
thyssenkrupp Allee 1, 45143 Essen, Germany
Telephone: +49 201 844-0

 You can reach the data protection officer of thyssenkrupp AG at datenschutzbeauftragter@thyssenkrupp.com. 

2. What categories of data do we process for the campaign and where do they come from?

 The categories of data processed include

• Your photo(s)
• Your video clip(s)

This data is collected directly from you or provided by you. The provision of this data is entirely voluntary and there are no negative consequences for not providing it.

3. Who gets your data? 

The materials are made available to all interested recipients in the thyssenkrupp group of companies by e-mail, via we.net, in newsletters, in the brandfactory and in the thyssenkrupp media pool. The documents are used worldwide. You can upload your recording to the media pool yourself via the we care website. We reserve the right to sort out inappropriate recordings and delete them if necessary.

4. For what purposes and on what legal basis is data processed?

We process your data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and all other applicable laws.

The processing of your admission serves the realization of the ongoing communication campaign within the framework of we care.

The processing of your recording takes place on the basis of your explicit consent (Art. 6 para. 1 lit. a GDPR) - if you decide to give it. Your consent is completely voluntary and there is no obligation for you to give it. Not giving your consent has no negative consequences for your employment relationship. You can revoke your consent at any time with effect for the future. Please note, however, that deleting your videos or photos after giving your consent involves considerable effort and is not easily possible.

5. How long will your data be stored?

We delete your data as soon as it is no longer required for the above-mentioned purposes (i.e. when the communication campaign has ended) or as soon as you revoke your consent.

6. Are you obliged to provide your data?

The provision of your recording is voluntary and the processing is based on your consent. You have the possibility to exercise your rights described under point 8.

7. Will your data be transferred to a third country (outside the EU/EEA)?

The materials are to be used worldwide in electronic form. This includes transfer to third countries. There may not be an adequate level of data protection there. Due to the way your recording is used, it is impossible for us to provide appropriate safeguards for the continued use of your recording. Your data may be may be less protected. We therefore only transfer your recording on the basis of your explicity consent. By giving your consent, you agree to the worldwide use of your recording.

You can request more information on this by using the contact details above.

8.  What data protection rights can you assert as a data subject?

You have the right to request information about the data stored about you, Art. 15 GDPR. In addition, you can demand the correction or deletion of your data, Art. 16, 17 GDPR. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, standard and machine-readable format, provided this does not affect the rights and freedoms of other persons, Art. 18, 20 GDPR.

If you have given us consent for data processing, you can revoke this consent at any time without any formalities and without any adverse effects on your employment relationship. Please note that the revocation has no effect on the lawfulness of the data processing that took place prior to the revocation and that it does not extend to such data processing for which another authorisation exists and which may therefore also be carried out without your consent.

To exercise these rights, please contact the data controller or data protection officer named in section 1.

In addition, you have a right to object, which is explained in more detail at the end of this data protection notice.

You also have the possibility to lodge a complaint with a data protection supervisory authority, Art. 77 GDPR. The right of appeal is without prejudice to any other administrative or judicial remedy. The data protection supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
O Box 20 04 44
40102 Düsseldorf Tel.: 0211/38424-0
Fax: +49 211/38424-10
E-mail: poststelle@ldi.nrw.de

Information about your right to object according to Art. 21 of the General Data Protection Regulation (GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the GDPR (processing of data on the basis of a balance of interests); this also applies to any profiling based on this provision within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be made without any formalities and should, if possible, be addressed to the responsible body or data protection officer named in the data protection statement under point 2.

If the tk controller is based outside the EU/EEA and you wish to protect your data protection rights, please contact our data protection officer.