Information for visitors of the Article 13 GDPR


The following information is intended to give you an overview of the processing of your personal data by the Rhenus Group and the rights to which you are entitled under data protection law. In order to fulfil our duty to provide information in accordance with Article 13 GDPR, we would be pleased to provide you with our data protection information below:

The identity and the contact details of the controller:

Rhenus SE &Co. KG
Rhenus-Platz 1
59439 Holzwickede
Phone: +49 (0) 2301 29-0
E-Mail: [email protected]

The contact details of the data protection officer:

- data protection officer -
Rhenus-Platz 1
59439 Holzwickede
E-Mail: [email protected] 

Purpose of processing and legal basis    

We collect, process and use your data for the purpose of information security of Rhenus SE & Co. KG and its subsidiaries. This applies to data that is processed on the occasion of visitor registration, your safety instruction or within the scope of our video surveillance. Your data will be processed on the basis of a legitimate interest (Article 6 Para. 1 f) GDPR).

Categories of personal data

The following data about you may be processed by us: date, surname, first name, company with address, contact person at Rhenus, number of the visitorpass, time, registration plate, signature, picture or video recording.

Recipients of the personal data

Your data will remain with Rhenus SE & Co. KG and its subsidiaries.

Duration of storage

We keep your data, which is collected within the scope of the safety instruction, for two years. We will then delete them or make them anonymous.

Data recorded within the framework of video surveillance is deleted 14 days after recording. They are only stored for a longer period of time if they are still needed for clarification or to prove a specific incident. In this case, the data will be blocked and deleted immediately after the complete completion of the clarification measures or after the requirement for proof has ceased to apply.

The data from the visitor registration will be deleted after eight weeks or, if they are in paper form, will be destroyed in accordance with data protection regulations.


Your rights as a data subject


Right of access
On request, we will inform you in writing or electronically whether and which personal data we have stored about you (Article 15 GDPR).

Right to rectification
You have the right to rectify (Article 16 GDPR) and/or complete the data vis-à-vis the data controller if the personal data processed concerning you are inaccurate or incomplete.

Right to erasure
You may request the person responsible to delete the personal data concerning you immediately (Article 17 GDPR).

Right to restriction of processing
You have the right to demand the restriction of the processing (Article 18 GDPR).

Right to object 
You have the right to object at any time, for reasons related to your particular situation, to the processing of your personal data carried out on the basis of processing carried out in the public interest and processing carried out on the basis of a balance of interests, including profiling based on this provision.

Right to data portability
You have the right to data portability (Article 20 GDPR). In other words, you have the right to receive your personal data in a machine-readable format.

Right of appeal to the supervisory authority
If you are of the opinion that the processing of your personal data is unlawful, you can complain to a supervisory authority.

Revocation of consent
If you have given your consent to the collection or use of personal data and wish to revoke it, you can revoke it at any time with effect for the future by e-mail or letter.

Provision of personal data
You are neither legally nor contractually obliged to make your data available to Rhenus SE & Co. KG for the above-mentioned purpose. However, if you refuse to make your data available, Rhenus SE & Co. KG cannot grant you access to its buildings and premises for reasons of information security.

Automated individual decision-making/profiling
An automated decision making (including profiling) does not take place with your data.