Informations in accordance with Art. 13 of the General Data Protection Regulation for video surveillance of the precious metal security

Heraeus Precious Metals GmbH & Co. KG
Heraeusstrasse 12-14
63450 Hanau
Germany
Phone: +49 6181 35-0

Contact details of the data protection officer:
datenschutzbeauftrager@heraeus.com

• Exercise of domiciliary rights (observation of non-public areas within the plant boundaries) for the prevention of dangers and Deterrence / documentation of legal violations and Preservation of evidence and prosecution of legal claims
• Protection against unauthorized access of persons to the plant area and precious metal security area as well as deterrence / Documentation of legal violations and preservation of evidence and prosecution of legal claims
• Protection and safeguarding of life and limb in special hazardous situations
• For the investigation and clarification of documented indications suspicions of criminal offenses, security-relevant incidents and concrete suspicious cases in the business operations of the precious metal security sector.
• Protection and securing of material containing precious metals
• Preventive deterrence of property and financial offenses involving material containing precious metals by employees or by third parties outside the company
• Research & clarification in the event of suspected precious metal losses based on concrete and documented evidence

The legal basis for data processing for video surveillance of precious metal
security is Art. 6 (1) (f) GDPR.

Heraeus Precious Metals GmbH & Co. KG has a legitimate interest in protecting
its property, the property of other Heraeus companies or the property of its
customers in precious metals or objects containing precious metals against loss
through removal or other acts.

Maximum 90 days unless the video recordings are needed for longer to
investigate criminal offenses, violations of the law or accidents
The storage period is determined based on the duration of the production orders.
The review and approval of video surveillance and the associated storage period
of video images is carried out by the Data Protection Officer and the Works
Council.

Data transmission of video images to the public prosecutor's office or police takes
place within the scope of the purpose limitation for the investigation of criminal
offenses, violations of the law or accidents.

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. where the data subject has objected to processing, for the duration of the verification by the controller.
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement.

Last updated: March 2025
Version: 1.0