We would like to inform you about how we collect personal data when you use our website. Personal data is any data which relates to you personally, such as your name, address, e-mail addresses, and user behavior. The controller responsible for processing your personal data through this website is digid GmbH, Robert-Koch-Straße 30A, 55129 Mainz, e-mail: firstname.lastname@example.org. You can contact our data privacy officer using the email address email@example.com or our postal address, with the addition of ‘The Data Privacy Officer’.
If you use our website for information only, without registering or otherwise providing us with information, then we will only collect the personal data which your browser sends to our ser- ver. If you wish to view our website, we will collect the following information, which is technically necessary to display our website to you and to ensure it remains stable and secure (the legal basis is Art. 6 Par. 1 cl. 1 lit. f GDPR):
Date and time of enquiry
Time zone difference from Greenwich Mean Time (GMT) Content of request (actual page)
Access status / HTTP status code Quantity of data transmitted
Website from which the request was sent Browser
Operating system and its interface
Language and version of browser software.
Logfile information is kept for a maximum of seven days for security reasons (such as the investigation of misuse and fraudulent activities), then it is deleted. Any data which needs to be kept for evidence purposes will not be deleted until the particular case has been resolved fully. The legal basis is Art. 6 Par. 1, lit. f GDPR.
Personal data is only collected by us if and to the extent that you provide it to us on your own account, such as when making contact or submitting an application. We will handle this data confidentially and only use it for the original purpose for which it was sent, which is usually for processing and handling your enquiry. Your data is not usually given to third parties, unless we are obliged or legally allowed to, or if you have given us your consent, or if we have been ordered to do so by the authorities. If your enquiry relates to one of our group companies, then we will of course forward it to that company. If you contact us by e-mail, then your e-mail will be stored in our mail system. We may store your enquiry and the data associated with it in our CRM system. The e-mails themselves are not stored with their content encrypted. Our contact form is transport-encrypted using SSL/TLS, which you can recognize by the ‘https’ before the URL. Our mail server also uses conventional transport encryption protocols. The legal basis of this is Art. 6 Par. 1 lit. b GDPR.
Google will not connect the IP address sent to them by your browser as part of Google Analytics with other Google data.
You can prevent the saving of cookies via the corresponding setting in your browser software. However, if you do so, please note that this may mean that you cannot use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie about your use of the website (including your IP address), and from processing that data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively you can block the collection of your data for specific devices using the following link. By doing this, an ‘opt-out cookie’ is set which prevents your data from being collected from then onwards. This website uses Google Analytics with the extension ‘_anonymizeIp()’. This means that IP addresses are handled in truncated form, so they cannot be associated with any particular people. So, if the data collected about you can be related to you as a person, this is immediately excluded and the personal data is therefore deleted immediately.
We use Google Analytics to analyze the use of our website and regularly improve it. The statistics we acquire help us to improve our website and make it more interesting for you as a user. To cover the exceptional circumstances in which personal data is sent to the USA, Google has submitted itself to the EU-US PrivacyShield, (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). The legal basis for using Google Analytics is Art. 6 Par. 1 cl. 1 lit. f GDPR.
INFORMATION ABOUT THIRD-PARTY PROVIDER
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland,
Fax: +353 (1) 436 1001
User terms: http://www.google.com/analytics/terms/de.html
Data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Data privacy statement: http://www.google.de/intl/de/policies/privacy
Users’ personal data is deleted or anonymized after 14 months.
HOSTING AND DISTRIBUTION
For the purpose of hosting and distributing website content, we use the product ‘Google Cloud’ supplied by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, which processes our data on our behalf. Hosting is done exclusively at the Google Cloud computer center in Frankfurt am Main. Google Cloud is also Privacy Shield certified, which guarantees that personal data will be processed in compliance with European data privacy laws, even if outside the European Economic Area (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Including Google Cloud in the process is done on the basis of our legitimate interests in securely and efficiently providing our website, and optimizing it, pursuant to Art. 6 Par. 1 lit. f. GDPR in conjunction with Art. 28 GDPR (order processing).
This website incorporates embedded videos that are stored on the platform of the provider YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA., and which can be played directly from our website.
Our website is configured in such a way that your browser first sets up a link with YoutTube’s servers, and sends your IP address to them when you click on the video. If you are logged into YouTube, then this information can be linked to your user account. You can prevent this from happening by logging out of YouTube before playing the video.
With regard to the way YouTube uses your data in conjunction with embedded videos, please refer to YouTube’s data privacy statement, which is available at https://www.google.de/intl/de/policies/privacy .
We embed YouTube videos to make our website more attractive to you and to make the way our website operates more economical. The legal basis for that is Art. 6 Par. 1 cl. 1 lit. f GDPR.
You have the right to find out whether we are processing your personal data at any time, ac- cording to Art. 15 GDPR. If we are, then we have other additional information duties as a result. You also have the right to have your data corrected pursuant to Art. 16 GDPR, deleted according to Art. 17 GDPR and for its processing to be limited pursuant to Art. 18 GDPR, provided no other legal regulations say otherwise.
Of course, you can at any time revoke your consent to have your data processed according to Art. 6 Par. 1 lit. a or Art. 9, Par. 2 lit. a GDPR without providing reasons. This does not affect the legality of processing done up to that point.
You also have the right to data portability according to Art. 21 GDPR.
You also have, pursuant to Art. 20 GDPR, the right to object to the processing of your data, in particular processing on the basis of Art. 6 Par. 1 lit. e or f GDPR. Should you wish to exercise that right, please tell us the reason why you do not want us to keep processing your personal data the way we are. If your objection is justified, we will assess the case and either stop processing your data, amend the way we do it, or inform you of the compelling reasons we have for continuing to process it, these reasons being deemed worthy of protection.
You also have the right to complain to the responsible regulatory authorities, which can be found here: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_node.html