Data Protection

1. Privacy policy

This is the privacy policy for the use of this portal and all subdomains belonging to these domains. The user agrees to the data protection provisions set out here.

All formulations mentioned in the following that refer specifically to one gender are to be understood as expressly applying to all genders.
The processing of personal data within the framework of the use of the aforementioned websites, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the EU Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Altenburger Land district, in particular the Thuringian Data Protection Act.

By means of this data protection declaration, the public is informed about the type, scope and purpose of the personal data collected, used and processed by the district of Altenburger Land when using the above-mentioned websites. Furthermore, data subjects are informed of their rights by means of this data protection declaration.

2. Contact details of the controller (Art. 13 Paragraph 1 a GDPR)

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Landratsamt Altenburger Land
Mr Uwe Melzer
District administrator
Lindenaustraße 9
04600 Altenburg
Phone: 03447 586-200
Mail: buero.landrat@altenburgerland.de

3. Contact details of the data protection officer within the authority (Art. 13 Paragraph 1 b GDPR)

Landratsamt Altenburger Land
Data Protection Officer
Lindenaustraße 9
04600 Altenburg
Phone: 03447 586-250
Mail: datenschutz@altenburgerland.de

4. General information on data processing

4.1 Scope and legal basis

Personal data of the users are only processed as far as this is necessary for the provision of a functional website of the district of Altenburger Land as well as the contents and services. The processing of personal data is regularly only carried out after or with the consent of the user, unless a prior consent would not be possible for actual reasons or is permissible due to legal provisions. The district of Altenburger Land is the responsible body (see point 2).

This web offer of the Altenburger Land district and its individual offers are part of the public relations work of the Altenburger Land district office. The legal basis for the processing of personal data in the context of public relations work is Art. 6 (1) lit. e GDPR. Insofar as we obtain consent for processing operations of personal data, Art. 6 para. 1 lit. a EU Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which you are a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to pre-contractual measures.

4.2 Disclosure of personal data to third parties and processors

As a matter of principle, we do not transfer any personal data to third parties without your express consent. If it is necessary to do so within the scope of data processing, this is done on the basis of the aforementioned legal grounds (section 4.1).

In the event of a legal obligation or an obligation arising from a court order, your data will be transferred to bodies entitled to receive information.
If data has to be passed on to service providers within the scope of so-called order processing, this is done on the basis of Art. 28 GDPR.

4.3 Data deletion and storage period

Your personal data will be deleted as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

4.4 Existence of an automated decision-making process

We do not use automated decision-making or profiling.

5. Provision of the website and creation of log files (log files)

5.1 Description and scope of data processing

The website of the district of Altenburger Land collects a series of general data and information with each call-up of the website by a data subject or automated system. This general data and information is stored in the log files of the server.
Recorded are:

  1. the browser types and versions used,
  2. the operating system used by the accessing system
  3. the website from which an accessing system arrives at the Landkreis website (so-called referrer),
  4. the sub-websites which are accessed via an accessing system on the district's Internet site,
  5. the date and time of an access to the Internet page,
  6. an Internet protocol address (IP address),
  7. other similar data and information that serve to avert danger in the event of attacks on the information technology systems.

When using these general data and information, the district of Altenburger Land does not draw any conclusions about the data subject. The data stored in the log files are not stored together with other personal data of the user.

5.2 Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. e GDPR.

5.3 Purpose of data processing

This information is required in order to

  1. correctly deliver the contents of the district's website,
  2. to ensure the permanent functionality of the information technology systems and the technology of the website, as well as
  3. to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

Therefore, the data and information collected is, on the one hand, statistically evaluated and, on the other hand, it is analysed with the aim of increasing data protection and data security, so as to ensure an optimal level of protection for the personal data processed by the Landratsamt Altenburger Land. An evaluation of the data for marketing purposes does not take place in this context.

5.4 Duration of storage

The data will be deleted after 14 days.

5.5 Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the technical operation of the website. There is no possibility for the user to object.

6. Use of cookies

The Internet pages of the district of Altenburger Land only establish essential cookies, which are necessary for the technical operation of the Internet pages as well as for the implementation of the web analysis by Matomo (section 7.).

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

7. Web analysis by Matomo (Piwik)

7.1 Description and scope of data processing

The controller has integrated the Matomo component on this website. Matomo is an open source software tool for web analysis. Web analysis is the collection, collation and evaluation of data on the behaviour of visitors to websites. Web analysis is mainly used to optimise a website and for cost-benefit analysis of internet advertising.

If individual pages of our website are called up, the following data is stored:

  • Anonymised IP address: For anonymisation, the IP address is truncated halfway through.
  • Date and time of the visit
  • Title of the displayed website
  • URL of the displayed website
  • URL of the previously viewed website (referrer)
  • Screen resolution
  • Downloaded files
  • Outgoing links clicked
  • Time elapsed between calling up the web page and displaying it to the user (page speed)
  • Browser used (User-Agent Header)
  • Browser language (Accept-Language header)
  • Geographical region from which the site is accessed: The allocation is based on the browser language and the anonymised IP address.

The software runs exclusively on the servers of our website. Personal user data is only stored there. The data is not passed on to third parties.

The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

Matomo sets a cookie on the information technology system of the person concerned. By setting the cookie, the district of Altenburger Land is enabled to analyse the use of the website. Each time one of the individual pages of this website is called up, the internet browser on the information technology system of the data subject is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis.

7.2 Legal basis for data processing

The legal basis for the processing of the users' personal data is Art. 6 para. 1 lit. f GDPR.

7.3 Purpose of data processing

The purpose of the Matomo component is to analyse the flow of visitors to this website. The controller uses the data and information obtained to, among other things, evaluate the use of this website in order to compile online reports showing the activities on the district's internet pages. This helps to continuously improve the website and its user-friendliness.
By anonymising the IP address, the interest of users in the protection of their personal data is adequately taken into account.

7.4 Duration of storage

The data will be deleted after 3 months.

7.5 Possibility of objection and removal

The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Matomo from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Matomo can be deleted at any time via an internet browser or other software programmes.

8. Registration on Internet pages of connected portals

8.1 Description and scope of data processing

The data subject has the possibility to register on the website of the controller by providing personal data. Which personal data are transmitted to the controller in the process results from the respective input mask used for the registration. By registering on the website of the controller, the IP address assigned by the internet service provider (ISP) of the data subject, the date and the time of registration are also stored.

8.2 Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. A GDPR if the user has given his consent.

8.3 Purpose of data processing

The personal data entered by the data subject is collected and stored exclusively for internal use by the data controller and for its own purposes. The data will not be passed on to third parties unless there is a legal obligation to pass on the data or the data is passed on for the purpose of criminal prosecution.

8.4 Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified.

8.5 Possibility of objection and removal

The registration of the data subject by providing personal data serves the purpose of the controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to modify the personal data provided during registration or to have it completely deleted from the data stock of the controller at any time.

The controller shall provide any data subject at any time, upon request, with information on what personal data is stored about the data subject. Furthermore, the controller shall correct or delete personal data at the request or indication of the data subject, provided that this does not conflict with any statutory retention obligations. The entire staff of the controller shall be available to the data subject as contact persons in this context.

9. Contact option via the website

9.1 Description and scope of data processing

Based on statutory provisions, the website of the Landkreis Altenburger Land contains data which enables a quick electronic contact and direct communication by e-mail. If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject will be stored automatically.

9.2 Legal basis for data processing

The legal basis for the processing of the data is Art. 6 (1) GDPR.

9.3 Purpose of data processing

Such personal data transmitted on a voluntary basis by a data subject to the data controller shall be stored for the purpose of processing or contacting the data subject. This personal data is not passed on to third parties.

9.4 Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

9.5 Possibility of objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.

10. Information about your rights

10.1 Right to information - Art. 15 GDPR

You can request confirmation from us as the controller as to whether personal data relating to you is being processed by us.
If such processing is taking place, you may request information from the controller about the following:

  • the purposes for which the personal data are processed;
  • the categories of personal data which are processed;
  • the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
  • the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;
  • the existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • any available information on the origin of the data if the personal data is not collected from the data subject;
  • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information on whether personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer. Reference is also made to the right to data portability, Art. 20 GDPR.

10.2 Right to rectification - Art. 16 GDPR

You have a right to rectification and/or completion vis-à-vis us as the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must make the correction without undue delay.

10.3 Right to restriction of processing - Art. 18 GDPR

You may request the restriction of the processing of personal data concerning you under the following conditions:

  • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
  • the controller no longer needs the personal data for the purposes of the processing but you need them for the establishment, exercise or defence of legal claims;
  • or if you have objected to the processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller's legitimate grounds override your grounds.

If the processing of personal data relating to you has been restricted, such data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

10.4 Right to erasure - Art. 17 GDPR

a) Obligation to erase

You may request the controller to erase the personal data concerning you without undue delay and the controller is obliged to erase such data without undue delay if one of the following reasons applies:

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
  • You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
  • The personal data concerning you have been processed unlawfully.
  • The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data concerning you has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process the personal data that you, as the data subject, have requested them to erase all links to, or copies or replications of, that personal data.

c) Exceptions

The right to erasure does not apply to the extent that the processing is necessary

  • for the exercise of the right to freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
  • for the assertion, exercise or defence of legal claims.

10.5 Right to information - Art. 19 GDPR

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed of these recipients by the controller.

10.6 Right to data portability - Art. 20 GDPR

You have the right to obtain from the controller the personal data relating to you in a commonly used, machine-readable format in order to have it transferred to another controller if necessary, provided that

  1. the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and
  2. the processing is carried out with the aid of automated procedures.

When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transferred directly from us to another controller, where technically feasible.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

10.7 Right of objection - Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) GDPR.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

10.8 Right to revoke the declaration of consent under data protection law - Art. 7 (3) GDPR

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

10.9 Right to complain to a supervisory authority - Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

11. Competent supervisory authority

Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)
PO Box 900455
99107 Erfurt
https://www.tlfdi.de

12. Facebook

With its Facebook presence, the Altenburger Land District Office uses the technical platform of Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).

The Altenburger Land District Office points out that data is processed by this provider when Facebook is called up. The Landratsamt has no influence on the way this is done.

Which data Facebook stores in detail and how the company uses this data is not exactly known. You use the Facebook page and its functions on your own responsibility. This applies in particular to interactive functions (such as commenting, sharing, rating).

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your end device in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: https://de-de.facebook.com/help/pages/insights

The data collected when using the Facebook page is processed by Facebook. You can find out what information Facebook receives and how it is processed in Facebook's privacy policy: https://www.facebook.com/about/privacy

This privacy policy applies to the Facebook page of the Altenburger Land District Office. For answering questions that you ask us as a personal message and in comments, we need personal data in individual cases (name of the Facebook profile) to be able to answer you. We will only use this data for the purpose you have requested, for example to answer the question or to contact you.