Controller:

Liechtensteinische Landesbank (Österreich) AG, Hessgasse 1, 1010 Vienna, Austria, Telephone: +43 1 536 16-0

Contact details of the Data Protection Officer:

Liechtensteinische Landesbank (Österreich) AG, Data Protection Officer, Hessgasse 1, 1010 Vienna, Austria, Telephone: +43 1 536 16-0

1. Which categories of data are processed and what are the sources?

We use video surveillance (live streams) to monitor securityrelevant areas inside and outside our buildings and premises. Upon activation of the motion detector, video recording
commences too.

As soon as you enter an area covered by video surveillance, you become the subject of this data processing. Only image data are processed.

2. What are the purposes of and the legal basis for the processing of your data?

We have a legitimate interest in using video surveillance (Article 6 (1) lit. f GDPR). It plays a key role in ensuring a comprehensible protection of premises, persons and property while allowing us to save personnel resources.

Depending on the prevailing circumstances of the locations concerned, we use video surveillance for the following purposes:

• to secure the outer facade of the building against vandalism
• to ensure the (necessary) monitoring of alarmed doors
• to detect illegal attempts to enter our premises
• to recognise obstructed emergency exits

Video surveillance allows us to take immediate countermeasures to eliminate issues related to the above-mentioned aspects. It serves not only to protect our buildings and premises but is meant to ensure your personal safety.

3. Who will have access to the personal data and for how long will they be stored?

Video data are evaluated only where necessary. We may task external service providers in Austria or in the European Economic Area with evaluating the video surveillance data. In addition to the live streams, such service providers are also granted access to the recordings of the video cameras depending on their respective, contractually defined area of responsibility.

In case of an infringement of house rules, a criminal offence being committed, or if required by statutory provisions, the recordings can or must be handed over to law enforcement authorities.

Video material is not generally recorded or stored.

Where recordings are made – namely when the motion detector is activated – they will be deleted by way of overwriting after four weeks at the latest, unless they are required in the context of investigative proceedings.

4. Is there any automated decision-making including profiling?

Video surveillance involves neither automated decision-making nor profiling.

5. What data protection rights do you have?

Every data subject has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure («right to be forgotten») pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, as well as the right to object pursuant to Article 21 GDPR (details provided below). Furthermore, data subjects have the right to lodge a complaint with the data protection supervisory authority pursuant to Article 77 GDPR.

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6 (1) lit. f of the GDPR (processing of data based on a legitimate interest). Any objection shall apply to the respective individual case only. Objections may be made via any of the contact channels detailed above. There are no formal requirements for submitting objections. If you object, we will no longer process your personal data unless we can demonstrate that compelling legitimate grounds for the processing exist that outweigh your interests, rights and freedoms, or the processing is for the purpose of establishing, exercising or defending legal claims.

6. Are you obliged to provide your data?

The data are provided when you enter an area covered by video surveillance devices. At places where we use video surveillance, this will be indicated by appropriate signage. Provided that you state your legitimate reasons (objection) to us beforehand, and provided that we are unable to provide any compelling legitimate reasons for the processing which outweigh your own interests, rights and freedoms (balancing of interests), video surveillance may be waived in the specific individual case.

For information on other kinds of data processing carried out by us, please see our general data protection notice at www.llb.at/privacy or use our contact details indicated
above.

As at: November 2019

Updates

We will adapt and / or update this data protection notice, in particular in response to new technological developments, with a view to complying with amended statutory provisions and / or stipulations by public authorities, as well as based on organisational changes. All such adaptations and / or updates will be published on our website at www.llb.at/privacy. Upon request, we will provide our current data protection notice as a PDF file or on paper, but we recommend that you always refer to our website for the most recent updates. If changes are made, we will always check whether we are required to inform you of them proactively and, should this be the case, we will fulfil our obligation to do so. Otherwise, files and hardcopies made available by us will be replaced by the latest version only upon a new request.