Source: https://juedisches-leben.erfurt.de/jl/en/service/imprint/privacy/index.html
Timestamp: 2019-02-21 21:01:52
Document Index: 160012018

Matched Legal Cases: ['Art. 28', 'Art. 15', 'Art. 20', 'Art. 16', 'Art. 18', 'Art. 17', 'Art. 19', 'Art. 20', 'Art. 21', 'Art. 7', 'Art. 77']

Privacy policy | Jüdisches Leben
1 Address of the controller
2 Address of the data privacy officer
3 General information on data processing
4 Presentation of the website and creation of log files
6 Web analytics by Matomo
7 E-mail contact and postal contact
8 Social media buttons
9 Reader function
10 Information on your rights
The data privacy officer is the
Federal capital Erfurt, municipality, Data protection officer
We process personal data of our users only to the extent necessary for the presentation and optimization of a functional website as well as our content and services
Processing personal data in the context of this public relations work is in terms of Article 6 (1) point e of the GDPR in conjunction with Section 3 of the BDSG.
This website presented by the Press and Information Office of the Federal Government (Federal Press Office) and its individual components are part of the public relations work of the Federal Press Office. The legal basis for processing personal data for which we obtain consent is Article 6 (1) point e of the EU General Data Protection Regulation (GDPR) in conjunction with Section 3 of the BDSG.
The legal basis for processing personal data which is required for the performance of a contract to which you are a party (e.g. ordering publications and newsletters) is Article 6 (1) point b of the GDPR. This also applies to pre-contractual measures.
3.3 Transfer of personal data to third parties and processors
We never transfer personal data to third parties without your express consent. If, within the framework of processing, your data is nonetheless disclosed or sent to third parties, or third parties otherwise have access to the data, this also takes place exclusively subject to the cited legal bases. If we are legally bound or obliged by court order, we have to provide your data to appropriately authorized agencies.
Sometimes we use carefully selected external service providers to process your data. If, in the course of this order processing, your data is passed on to service providers, this takes place on the basis of Art. 28 GDPR. Our processors are carefully selected, are bound by our instructions, and are subject to regular inspection. We commission only such processors who can provide sufficient guarantees that appropriate technical and organizational measures are implemented in such a manner that processing will meet the requirements subject to the GDPR and the new German Data Protection Act and ensure the protection of your rights.
3.4 Data erasure and storage duration
Your personal data will be erased or blocked, as soon as the purpose for storage is no longer required.
3.5 Existence of automated decision-making
report on successful access (HTTP-Status code),
type of web browser and version, language and operating system of the user,
referrer URL (previously visited page).
The legal basis for the temporary storage of the data and log files is Article 6 (1) point e of the GDPR in conjunction with Section 3 of the new BDSG.
The provider uses the protocol data only for statistical evaluation for the purpose of its operation, security and in order to improve the content.
The log files are deleted after 7 days.
The collection of data to present the website and storage of the data in log files is absolutely necessary for the website’s operation. There is therefore no right to objection for the user.
The legal basis for processing personal data using cookies is Article 6 (1) point e of the GDPR in conjunction with Section 3 of the new BDSG.
The purpose of using the technically necessary cookies is to enable the search function and document preview to work properly.
5.4 Duration of storage and rights to objection and deletion
The session cookies are automatically deleted when the browser session ends.
The cookie of the document preview of the search has a validity of 1 week.
The info banner cookie is valid for 90 days.
6.1 Scope of processing personal data
On our website we use the open source software tool Matomo (formerly Piwik) to analyse the surfing behaviour of our users. This is an open source web analysis tool. Matomo does not transfer any data to servers outside the control of the Municipal Council of Erfurt.
If individual pages of our website are accessed, the following data are stored.
Matomo uses cookies. These text files are saved on your computer and enable the Federal Press Office to analyse how its website is used. The information provided by the cookie is transferred to the Federal Press Office server and saved there, to enable us to analyse user behaviour. Your IP address will be immediately anonymised; users are thus anonymous. The information generated by the cookie regarding how you use the website will not be passed on to third parties.
The Municipal Council of Erfurt sees this analysis as an integral part of its online service. This information helps to consistently improve the website and optimise it according to user needs.
You can adjust your browser settings to disable cookies at any time. This might, however, mean that you are not able to use all of the website’s functions.
If you do not agree to the data generated by your visit to the website being saved and analysed, you can object to the saving and utilisation with a mouse click below. A so-called deactivation cookie will then be saved in your browser. As a result, Matomo will not record any data relating to your session (Please note: if you delete your cookies, you will also delete the deactivation cookie, which you will then have to save again at your next visit to the site).
The analysis software runs exclusively on the servers of our website. Storage of the user’s personal data only takes place there. The data are not passed on to third parties.
You can decide here whether or not a web analysis cookie may be stored in your browser, to enable the Municipal Council of Erfurt to gather and analyse statistical data.
6.2 Legal basis for processing personal data
The processing of personal data of users enables an analysis of the surfing behaviour of our users. By evaluating the collected data, we are able to generate information about the use of the individual components of our website. This helps us to continually improve our website and its user-friendliness. By anonymising the IP address, the interests of the users regarding protection of personal data are sufficiently taken into account.
The data are deleted as soon as they are no longer needed for our record-keeping purposes. The generated statistics and underlying data are not deleted.
6.5 Right to objection and deletion
You are hereby reminded of your rights to rectification, erasure and objection in terms of Articles 16, 17 and 21 GDPR; see Section 10 for more details.
You can contact us via the e-mail addresses provided, or by post. In this case, the user's personal data transmitted together with the e-mail or letter are stored.
The legal basis for processing data in the course of sending an e-mail is Article 6 (1) point e of the GDPR. If the aim of the e-mail contact is the conclusion of a contractual relationship, then Article 6 (1) point b of the GDPR also applies to the data processing.
The processing of personal data from the input form is used solely for us to handle the contact request.
The data are deleted as soon as the purpose of storage is no longer required. There is a retention period of up to three years for the personal data entered into the contact form, and the data sent by e-mail or post.
7.5 Right to objection and deletion
The party responsible for the processing has integrated the "Shariff" component on this website. The Shariff component provides social media buttons which are data protection-compliant.
The button solutions provided by the social networks usually send personal data to the respective social network as soon as a user visits a website in which a social media button has been integrated. A website using the Shariff component sends the personal data to the social networks only when the visitor to that website actively clicks one of the social media buttons.
Further information on the Shariff component is available from the computer magazine c't at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html. The use of the Shariff component is aimed at protecting the personal data of visitors to our website while at the same time allowing us to integrate a button solution for social networks on this website.
Our website uses a screen reader function from Linguatec GmbH. Voice Reader Web is a screen reader service for public internet content. Visitors to the website can activate the reader service by clicking on the reader button. Linguatec then receives the website text directly from the visitor's browser and uses it to generate an audio file. The audio file is sent back to the IP address of the user by streaming. Apart from the IP address of the user, no personal data is collected. When processing is complete, the IP address is erased. Voice Reader Web does not use cookies. It is therefore not possible to establish the identity of the user.
The information is processed exclusively on computers in Germany. The sent texts are erased once processing is complete. The audio files generated from the texts are erased once processing is complete. The IP addresses of the senders are erased once processing is complete.
Represented by: Dr. Reinhard Busch
E-Mail: datenschutz@linguatec.de
If your personal data are processed, you are affected by the GDPR and you as the data subject are entitled to the following rights from your controller:
10.1 Right of access by the data subject – Art. 15 GDPR
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed,
Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer. Please also see the Right to data portability, Art. 20 GDPR.
10.2 Right to rectification – Art. 16 GDPR
10.3 Right to restriction of processing – Art. 18 GDPR
the data subject has objected to processing pursuant to Article 21 (1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
10.4 Right to erasure – Art. 17 GDPR
a) (‘right to be forgotten’)
the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1), or point (a) of Article 9 (2), and where there is no other legal ground for the processing;
the data subject objects to the processing pursuant to Article 21 (1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2);
the personal data have been collected in relation to the offer of information society services referred to in Article 8 (1).
for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3);
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
10.5 Notification obligation – Art. 19 GDPR
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17 (1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
10.6 Right to data portability – Art. 20 GDPR
10.7 Right to object – Art. 21 GDPR
10.8 Conditions for consent – Art. 7 Paragraph 3 GDPR
10.9 Right to lodge a complaint with a supervisory authority – Art. 77 GDPR
Webcode: jl129682