Site Security
Attention
CCTV
Name and contact details of the controller:
Gross & Perthun GmbH
Industriestraße 12-14
68169 Mannheim
Mail: privacy@sherwin.com
Phone: +49 (621) - 330 92 - 0
Contact details of the data protection officer (if applicable):
Mail: Thorsten.Ihler@fieldfisher-tech.com
Phone: +49 (0)40 87 88 69 80
Purposes and legal basis of data processing:
Purpose: Site security
Legal basis: Art. 6(1)(f) GDPR (legitimate interests of the controller or a third party)
Legitimate interests pursued:
Protection against unauthorised access, theft and other criminal offences.
Storage period or criteria for determining the duration:
14 days, except in the event of an incident (in the event of incidents, the data will be retained for as long as necessary for the relevant investigations and proceedings).
Recipients or categories of recipients of the data (if data is transferred):
This will not happen in the normal course of business. However, should an incident occur, it is possible that data related to the incident may be shared with appropriate third parties (e.g. internal/group management, internal/group human resources department, internal/group legal department, law enforcement agencies).
Information on the rights of data subjects:
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed; if this is the case, he or she has the right to access this personal data and to the information specified in detail in Art. 15 GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Article 16 GDPR).
The data subject has the right to request that the controller erase personal data concerning them without delay if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to request that the controller restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to the processing, for the duration of the review by the controller.
The data subject has the right to object at any time to the processing of personal data concerning them on grounds relating to their particular situation. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims (Article 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right with a supervisory authority in the Member State of their residence, place of work or place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
September 2025
