Source: https://code-de.org/en/data_protection
Timestamp: 2019-04-24 08:39:24+00:00

Document:
The controller as per Art. 4 (7) EU General Data Protection Regulation (GDPR) is the German Federal Ministry of Transport and Digital Infrastructure (Bundesministerium für Verkehr und Digitale Infrastruktur, BMVI), Invalidenstraße 44, D-10115 Berlin, Telephone: +49 (0)30 18 300-0, Email: poststelle@bmvi-bund.de-mail.de (see our Imprint).
You can reach out to our data protection officer by sending an email to datenschutz@bmvi-bund.de or a letter to our postal address for the attention of the "Datenschutzbeauftragter". Any data subject can contact our data protection officer with questions or comments regarding data protection directly at any time.
b) Moreover, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent data protection supervisory authority for the BMVI is the German Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für Datenschutz und Informationsfreiheit, BfDI).
b) Transient cookies are automatically deleted when you close your browser. They include, in particular, session cookies. Session cookies store a so-called session ID, which allows different requests from your browser to be attributed to the same session. This enables your computer to be recognised if you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are deleted automatically after a preset period of time, which can differ from cookie to cookie. You can delete these cookies using the security settings of your browser.
When you contact us by email or using our "User Helpdesk" contact form, the data you provide (name and email address) as well as your message is stored by us to enable us to answer your questions. We delete the data collected in this context once it is no longer necessary for us to store it, or we restrict the processing where statutory data retention periods exist.
If the request is based on rights of the data subject under the German Freedom of Information Act (Informationsfreiheitsgesetz) or on other rights of access to information under public law, the legal basis for the processing is Art. 6 (1) (c) GDPR. If this is not the case, but the processing still serves a task which is carried out in the public interest, the legal basis is Art. 6 (1) (e) GDPR. Other requests which are not answered as part of the fulfilment of tasks in the public interest, will be answered at the request of the data subject and constitute a service of the BMVI; the legal basis for the aforementioned data processing is, in this case, Art. 6 (1) (f) GDPR.
a) You may voluntarily set up a user account in order to receive full access to CODE-DE as well as, based on that, seek membership with the AGRO-DE project group, other project groups or access to additional data or the processing function of CODE-DE. If you register on our website, we collect and store your first name and surname, your email address as well as the industry and area in which you work. In addition, we are able to determine when you last modified your user information, when you last logged in and to which user groups you belong.
b) We store the aforementioned data for the purposes of contacting you in the event of problems, of compliance with the "German Act for the Protection of the Security of the Federal Republic of Germany Against Endangerment by the Distribution of Highly Detailed Terrestrial Satellite Data" (Gesetz zum Schutz vor Gefährdung der Sicherheit der Bundesrepublik Deutschland durch das Verbreiten von hochwertigen Erdfernerkundungsdaten, SatDSiG) as well as for statistical purposes in connection with user management.
c) We collect, store and process the data mentioned above on the basis of Art. 6 (1) (e) and (f) GDPR.
d) The data is stored for as long as the user retains its CODE-DE user account. If the user demands the deletion of the CODE-DE user account, the account will first be deactivated and then stored for a maximum of one month. After expiry of this one-month time period, within which the user can have the account reactivated, the CODE-DE user data is deleted.
The processing and use of data takes place exclusively in the territory of Germany, in a Member State of the European Union or in another country, which is a party to the Agreement on the European Economic Area.
Any use of personal data occurs only for the aforementioned purposes and to the extent necessary to achieve these purposes. The data is used solely by the Space Administration of the German Aerospace Center (Raumfahrtmanagement des Deutschen Zentrums für Luft- und Raumfahrt e.V.) as part of the performance of its duties for the BMVI, as well as by the BMVI. For the provision of this Copernicus Data and Exploitation Platform - Germany (CODE-DE) the BMVI has contracted a technical service provider with which it has entered into a processor agreement as per Art. 28 GDPR. The data will not be passed on to any other third parties. A transmission of personal data to other state institutions and authorities will only occur to the extent permitted under the relevant laws.
Open the Privacy Statement as PDF here.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28