Privacy notice regarding video surveillance

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation as well as other national data protection laws of the member states and other data protection provisions is:

Europa-Park GmbH & Co Mack KG
Europa-Park-Straße 2
77977 Rust
Telefphone: +49 7822 776 688
E-Mail: info@europapark.de

2. Contact details of the data protection officer

You can reach our data protection officer using the contact details provided above as well as by email. Please address postal correspondence to the above-mentioned address with the addition “Data Protection Officer”.

E-Mail: datenschutz@europapark.de

3. Type and scope of the processed data in video surveillance

Within the framework of video surveillance, personal data are processed. This includes, in particular, image recordings of persons who are within the detection range of the cameras.

Depending on the configuration, the following data may be processed:

• Visual data (image recordings): Recordings of persons, their behavior as well as their external appearance (e.g. clothing, body posture, movement sequences)
• Location and time of recording: Date, time as well as the specific location of the recording
• Movement data: Movements and duration of stay within the monitored area
• Vehicle-related data: License plate, vehicle type or other identifying features
• Other identifying features: Special physical characteristics or carried objects

Targeted processing of special categories of personal data (e.g. health data, biometric data for unique identification) does generally not take place. However, such processing cannot be completely excluded in individual cases (e.g. through visible health impairments).

No audio recording takes place, unless this is expressly indicated.

4. Purposes of data processing

Video surveillance serves to ensure a safe and orderly operation of the Europa-Park Resort, in particular for:

• Control and direction of visitor flows in the amusement park, water park, in hotels and other facilities
• Detection and localization of acute risks and hazardous situations
• Immediate assistance in emergencies
• Prevention of acute dangers
• Ensuring the operational safety of attractions, water attractions, hotel facilities and technical installations
• Fulfilment of traffic safety and operator obligations
• Prevention and prosecution of criminal offences
• Exercise of house rights in all areas of the resort

5. Legal basis

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, our legitimate interest.

Our legitimate interests consist in particular of:

• Ensuring a safe and orderly operational process in the amusement park, water park, hotels and other facilities
• Protecting life, health and physical integrity of visitors, guests and employees
• Early detection and effective prevention of dangers, emergencies and security-relevant situations
• Ensuring the functionality and operational safety of attractions, water attractions, hotel facilities and technical installations
• Fulfilment of statutory traffic safety and operator obligations
• Protection of the property of the controller as well as third parties against damage, vandalism and theft
• Prevention, investigation and prosecution of criminal offences as well as the securing of evidence
• Enforcement of house rights as well as the assertion, exercise and defence of legal claims

6. Recipients of the data

Access to the video recordings is granted exclusively to authorized bodies, insofar as this is necessary for the fulfilment of the purposes.

These include internal bodies (e.g. control center, security service, company fire brigade and operational managers) as well as external processors (e.g. IT and security service providers).

In addition, data is only transferred to external bodies to the extent necessary, in particular to law enforcement authorities or within the framework of legal obligations, as well as, for example, to legal advisors for the defence and assertion of our legal claims.

7. Storage duration

The video recordings are generally automatically deleted after 72 hours. A longer storage period only takes place in individual cases if this is necessary to fulfil the aforementioned purposes.

A longer storage may occur in particular if:

• A specific security-relevant incident is present
• The data is required for securing evidence
• Legal claims must be asserted or defended

In these cases, storage takes place only for the duration required in each case.

8. Your rights

Within the framework of the legal provisions, you have the following rights:

• Access to your personal data stored by us
• Rectification of incorrect data or completion of incomplete data
• Erasure of your data or restriction of processing
• Objection to the processing of your data, insofar as this is based on legitimate interests
• Right to data portability, where applicable

Please note that, in order to exercise your rights in connection with video surveillance, the most precise possible information regarding the time period, location, and your person is required in order to enable identification on the recordings.

The exercise of your rights may be restricted insofar as the rights and freedoms of third parties are affected.

You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data violates applicable data protection laws.

9. No automated decision-making (profiling)

We do not process your personal data within the framework of a procedure for automated decision-making (including profiling), nor do we intend to carry out such processing.

10. Provision of data

The provision of the data is required in the context of the visit, as without it the use of the monitored areas is possible.