Data protection notice for livestream sessions

Data protection notice for livestream sessions 

With the following information, we want to give you an overview of the processing 
of your personal data by and in connection with the production and 
publication of photo and film recordings or during livestream sessions, as well as an overview of 
your rights under data protection law.

Controller

The Controller pursuant to Art. 4 para 7 GDPR is

ALDI International Services SE & Co. oHG
ALDI SOUTH Group
Mintarder Straße 36–40
45481 Mülheim an der Ruhr

E-mail: it.recruiting@aldi-sued.com

The Controller’s Data Protection Officer can be reached by e-mail at: datenschutz(at)aldi-sued.de

We hereby expressly inform you that the contents of any e-mail you send to the above e-mail address may also be read by persons other than our Data Protection Officer. If you would like to exchange confidential information, please initially use this e-mail address to request direct contact with the Data Protection Officer.

Types of data processed

We process personal data we receive from you when you register for a livestream session and during the actual session:

• Basic data (e.g. names) 
• Contact details (e.g. e-mail address) 
• Content data (e.g. text entries, photographs, videos) 
• Meta/communication data (e.g. device information, IP addresses) 

The photo, audio and video recordings are produced as part of the events and occasions, usually by employees of the Talent Attraction and Talent Acquisition teams and the ALDI SOUTH IT Media Production Service team. In some cases, we also engage external service providers. We ensure that these providers also comply with data protection law and prohibit them from using the recordings for their own purposes.

Purpose of the production and utilisation of the data

The data collected during our events or livestream sessions is used for the purposes of: 

• providing our online offer, functions and content 
• answering contact enquiries and communicating with users 
• measuring reach and marketing 

We produce photo, audio and video recordings to present and document our work. We use the photos, audio and video recordings produced during the livestream sessions to report on our events. The images and video recordings of the public events or livestream sessions may be published: 

• on the homepages of the business entities of the ALDI SOUTH Group 
• on the following social media channels of the ALDI SOUTH Group, among others: Facebook, Instagram, YouTube, LinkedIn, Twitch
• in internal presentations
• as part of competitions and similar events for recruiting topics

Legal basis for data processing

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and other data protection laws and the German Artistic Copyright Act (Kunsturhebergesetz, KUG). The following legal bases apply to the production of photographs, audio and video recordings, and their publication:

Preparation and publication: processing is based on the legitimate interest of ALDI International Services SE & Co. oHG pursuant to Art. 6 para 1 lit. f) GDPR.

Data recipient

If we stream photos and film recordings live on video platforms via Microsoft Teams Webinar or on LinkedIn, or if we publish them on social media channels, the data will be transmitted there and if necessary to other platforms and will also be processed by the operators of the social media platforms. You can view the data protection information of these third-party service providers here: 

Facebook, Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Dublin, Ireland, privacy policy: www.facebook.com/privacy/policy/, privacycenter.instagram.com/policy
YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, privacy policy: policies.google.com/privacy
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, privacy policy: de.linkedin.com/legal/privacy-policy?
Twitch: 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA, privacy policy: www.twitch.tv/p/de-de/legal/privacy-notice/

Transmission to third countries

Our data processing takes place in Germany and in the EU; we do not transfer 
data to a third country or to an international organisation. 
However, photos and films may be transferred to a third country outside the EU 
if the recordings are published on a social media channel 
and the operator of the social media platform is based outside the EU. The 
parent companies of Facebook (including Instagram), Twitter, YouTube and LinkedIn
are based in the United States, so your data may also be transferred there.

Duration of data storage

We store your data for as long as is necessary to provide our services to you or for as long as we have a legitimate interest in the continued storage. Your IP address and other transmitted device information will be deleted after a livestream session. The photo data and, if applicable, audio and film data and personal data may be stored indefinitely, as this is the only way we can permanently document our activities. Recordings of events that have already taken place may also remain in the public domain indefinitely.

Data protection rights

You have the right, for reasons relating to your particular situation, to object at any time to processing of personal data concerning you on the basis of Art. 6 para 1 lit. f) GDPR. The revocation of consent or objection does not affect the lawfulness of the data processing that has been completed on the basis of the consent or the performance of tasks in the period up to the revocation of consent or objection. The revocation of consent or objection can generally be lodged without any formal requirements. For documentation purposes, however, we ask that you declare your revocation of consent and objection by post or e-mail using the contact details shown at the beginning of this notice. Please use the subject “Objection to data processing”. If you object to data processing, we will no longer process the personal data concerned and will delete it unless a legal provision permits further processing or – in the case of a justified objection – we can cite compelling legitimate reasons that outweigh your interests, rights and freedoms, or if the processing is used to assert, exercise or defend legal claims (Art. 7 and 21 GDPR). We will delete photos and film recordings that we have published on our homepage or our social media channels immediately after receiving your objection and will also inform the bodies to which your data has been transmitted (in particular the operators of the social media channels) in accordance with Art. 17 and 19 GDPR. Please note, however, that this cannot include permanent erasure from the internet, as the possibility cannot be ruled out that the files are located in temporary storage, screenshots from third parties, etc. If your personal data is processed, you have the right to receive information about the personal data stored about you (Art. 15 GDPR). If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you may request erasure or restriction of processing (Art. 17 and 18 GDPR). You have the right under certain conditions to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, if the processing is based on consent or on a contract and is carried out using an automated procedure (Art. 20 GDPR). If you assert the rights mentioned above, we will check whether the legal requirements for this are met and you will receive a corresponding notification from us. If necessary, we will ask you to identify yourself; we are obliged to do so if there are any doubts.