Data protection

Part A – General information

The Bavarian State Chancellery supports the Chancellor and the State Government in their constitutional duties. The carry out diverse public duties. They are available to the citizens of Bavaria as a contact partner and keep the press and the population informed of current topics and important affairs.

Thus they also process personal data in various areas, in order to carry out public duties and inform citizens as well as the general public.

This Privacy Policy explains how personal data are collected, processed and transmitted by the Bavarian State Chancellery. Furthermore, data subjects are advised of their rights in this Privacy Policy.

The following instructions, stipulated in Part A – General information, apply to all data processing procedures of the Bavarian State Chancellery. Specific data protection provisions can be found in Section B of the processing procedures described separately therein.

This Privacy Policy applies to all persons who come into or have contact with the Bavarian State Chancellery or use the services of the Bavarian State Chancellery, including users of the website and other online services of the Bavarian State Chancellery.

Third parties (for example, online platforms such as Facebook or YouTube to which there is a link on our websites) may also process personal data. This Privacy Policy does not apply to such third parties or their services, and the Bavarian State Chancellery cannot accept any liability for how these third parties may possibly use the personal data they collect. For personal data concerning the data protection practices of third parties, you are referred to these third parties direct. You are asked to observe the data protection information on the relevant pages.

You will also find Advice on Conduct in Social Networks on the state portal of the Bavarian Regional Government.

The current technical operation of this homepage is developed by:
The State Office for Digitisation, Broadband and Surveying
IT Service Centre of Bavaria
St.-Martin-Straße 47, 81541 Munich
E-mail: webmaster@bayern.de

The processing of personal data, for example, the name, address, e-mail address or telephone number of a data subject, is carried out in compliance with the requirements of the General Data Protection Regulation. The Privacy Policy of the Bavarian State Chancellery seeks to provide transparent information on the type, extent and purpose of the personal data processed by the Bavarian State Chancellery. Furthermore, data subjects are advised of their rights in this Privacy Policy.

The Bavarian State Chancellery takes proportionate technical, administrative and physical security measures to protect your data from loss, misuse, unauthorised access, publication, modification and deletion.

Name and contact details of the responsible person:

The party responsible for the data processing is the Bavarian State Chancellery, Franz-Josef-Strauß-Ring 1, 80539 Munich.
E-Mail: direkt@bayern.de

Contact details of the Data Protection Officer

datenschutzbeauftragter@stk.bayern.de

Legal basis of the processing

Unless otherwise stated below, our personal data are processed within the context of the performance of our public duties (Article 4, Sec. 1 of the Bavarian Data Protection Act – BayDSG, in connection with Article 6, Sec. 1 (e), and Article 6, Sec. 3 P. 1 of the General Data Protection Regulation (GDPR)).

If you have given your consent to the data processing, the data processing is based on Art. 6, Sec. 1 (a) of the GDPR.

Duration of storage of personal data

Your data are store after collection by the Bavarian State Chancellery only for as long as this is required for the achievement of the purpose of the storage or for as long as it is prescribed by legal provisions on storage.

Rights of data subjects

As a data subject of the data processing, you have the following rights:

  • If your personal data are processed, you have the right to obtain information about the stored data concerning you immediately (Art. 15 of the GDPR).
  • If incorrect personal data are processed, you have the right to have this corrected. Having regard to the purposes of the processing, you also have the right to request the completion of incomplete personal data, also by means of a supplemental declaration (Art. 16 of the GDPR).
  • If there are legal grounds for doing so, you may request to have the processing deleted or limited, or to object to the processing (Art. 17, 18 and 21 of the GDPR).
  • If you have given your consent to the processing or have signed an agreement on the data processing and the processing is carried out by means of automated procedures, you also have the right to data transferability (Art. 20 of the GDPR).
  • Right to withdraw consent
    If you have given your consent to the processing by the Bavarian State Chancellery by signing a similar policy and the processing concerns this consent, you may withdraw your consent for future processing at any time. This does not affect the legality of the processing that was carried out with your consent up until its withdrawal.

Should you wish to exercise any of your rights mentioned above, the Bavarian State Chancellery will check whether the legal conditions therefor are fulfilled.

Right of appeal to a supervisory authority
In addition, you have the right to lodge an appeal with the Bavarian Commission for Data Protection (Art. 77 of the GDPR).
This can be reached by using the following contact details:
Postal address: Postfach 22 12 19, 80502 München
Address: Wagmüllerstraße 18, 80538 Munich
Telephone: 089 212672-0
Fax: 089 212672-50
E-Mail: poststelle@datenschutz-bayern.de
Internet: https://www.datenschutz-bayern.de/

Further information
For more detailed information about the processing of your personal data, you can reach us by using the contact data given.

Part B – Special Part

Logging

When you visit the website of the Bavarian State Chancellery, data are transmitted to the web server over the user’s internet browser. The following data are logged during a current connection to the communication between the internet browser and the web server:

  • Date and time of the request
  • Name of the file requested
  • Page from which the file is requested
  • Access status (file transferred, file not found, etc.)
  • web browser used and operating system used
  • full IP address of the requesting computer
  • Quantity of data transferred

For reasons of technical security, in particular for the prevention of attempted attacks on the web server, these data are stored. After seven days at the latest, the data are anonymised by abbreviating the IP address at domain level, so that it is no longer possible to create a reference to individual users. For the prevention of risks to the security of the information technology, these data are forwarded to the State Office for Information Technology Security in accordance with Art. 12 of the Bavarian E-Government Act.

Cookies

To allow access to these internet services, cookies (small files) are saved onto the user’s end device for a period of 12 months. The purpose of cookies is to make the use of the home page easier and more suitable. This does not involve the storage of personal data by the Bavarian State Chancellery. Most browsers are designed in such a way that they accept the use of cookies, but this function can be switched off by setting the internet browser for the current session or permanently.
Videos in this internet service are embedded by YouTube. The service provider may store cookies on the user’s computer when videos are played. The Bavarian State Chancellery has no influence on this storage.

Third-party providers, social media and opt-in procedures

No user data are transferred to third parties, for example, to social networks, on the website under www.welcomedahoam.com without prior consent. Third-party providers may only access user data if the user

  • has actively agreed to the data transfer, for example, through the opt-in procedure.
  • leaves the regional portal over an external link. The data are transferred to third parties as soon as the new browser window opens. The data protection regulations of the page provider concerned, for example, Facebook or YouTube, apply to the recently viewed page. You are asked to observe the data protection information on the relevant pages.

You will also find Advice on Conduct in Social Networks on the state portal of the Bavarian Regional Government.

The contributions of Facebook and Google are integrated in the page in such a way that no automatic connection with the servers of the operator (Google/Facebook) is made. This means that at no time are user data transmitted to the operator concerned. The data from the social networks mentioned above are retrieved direct from the www.welcomedahoam.com server and stored there for appearance on the website.

When visiting the website www.welcomedahoam.com, you are offered the additional services of YouTube and Social Plugins of Twitter, Facebook and Google+ by using a so-called two-click solution. On the first viewing of the website, no data are transferred to the operator. Only after the users have given their consent on www.welcomedahoam.com by clicking in the opt-in procedure as appropriate, will data (including the URL and the current page as well as the user’s IP address) be transferred to the operator from now on and on further visits. Users may decide for themselves whether to agree to the activation of the YouTube videos and hence the data transfer. Users may withdraw this consent at any time and prevent any further transfer of data to the operators (opt-in procedure) by clicking as appropriate on the homepage.

Only deactivated images of the YouTube channel are embedded by default, which produce no automatic connection with the YouTube servers. Thus the operator does not receive any data from the user when the website is viewed. The user does not give his consent for data to be transferred to the operator concerned until he enables the play-back of the videos by clicking on “Permanent activation”. In order to save the settings desired by the user, a cookie is placed by the Bavaria server which saves the parameters. When these cookies are placed, however, no personal data are saved by the Bavarian State Chancellery, they only contain anonymised data for the adaptation of the browser. Consequently, the videos are active and can be played by the user. If users wish to deactivate the automatic storage of the YouTube videos, they must remove the cross under the data protection symbol which they placed to give their consent. This will also enable the settings of the cookies to be up-dated.

Active components

Active components such as Javascript, Java-Applets or Active-X-Controls are used in the information offered. These functions can be turned off by using the settings for the user’s internet browser.

Evaluations of user behaviour (web-tracking systems)

Programmes for the evaluation of the user’s behaviour are only used by the Bavarian State Chancellery in anonymised form. The IP addresses are first anonymised for this and then evaluated. The users may decide here whether to allow a cookie to be placed for a clear web analysis. If they opt for this, they enable the Bavarian State Chancellery to capture and analyse various statistical data in detail. The raw data collected is deleted after a maximum of 6 months after the evaluation. The evaluation and deletion of the data is carried out by employees of the State Office for Digitisation, Broadband and Surveying on behalf of the Bavarian State Chancellery.

If the users do not wish to allow the page operators to collect and analyse their statistical data in detail, they may use their mouse to check one of the following options:

My visit to this website should not be captured in detail by the Matomo web analysis.

Encryption

Information that is sent unencrypted to the Bavarian State Chancellery by electronic mail (e-mail) may possibly be read during transfer by third parties. The Bavarian State Chancellery is not normally able to check the identity and does not know who is behind an e-mail address. A legally secure communication by simple e-mail cannot therefore be guaranteed. As with many e-mail providers, filters are used against unsolicited advertising (SPAM filters), which in rare cases may also automatically classify regular e-mails falsely as unsolicited advertising and delete them. E-mails that contain harmful programs (viruses) are deleted automatically in all cases.

If you want to send information worth being protected to the Bavarian State Chancellery, it is recommended that this is encrypted and signed, in order to prevent unauthorised familiarisation and falsification during transmission, or sent by conventional post.
You can send e-mails encrypted with S/MIME to poststelle@stk.bayern.de
You can download the public key to the postal service here:
https://www.ebca.de/nutzung-der-ebca/zertifikate-finden/
The key of the root-CA (PCA-1 administration 15) and the intermediate certification authorities (Bavarian VPKI Class 3 Issuing CA-2016) can be found here:
Download of keys (ZIP file)
Please also advise whether and in what way the Bavarian State Chancellery can send you encrypted e-mails in response to your mailings, and – should this not be possible – whether you agree to an unencrypted reply to your communication by e-mail. If you are unable to receive encrypted e-mails, we would ask you to give your postal address to enable us to respond to your messages that are worthy of protection.

Events of the Bavarian State Chancellery, press and publicity activities

The Bavarian State Chancellery is also the organiser or co-organiser of various events.

In the event of an invitation to or participation in an event, the Bavarian State Chancellery processes personal data (name, address, etc.). This can be done through various channels of communication (e.g. by completing a form, a web form, by e-mail, by phone).

The personal data transferred to the Bavarian State Chancellery is determined by the form in question, the input mask or the data requested in a conversation.

  • Collection of data of accompanying persons

For the correct management of the event, the data of accompanying persons of the participant invited are collected and processed. Like all other persons affected by the data collection, these also have the rights mentioned above, in particular to information on the type and scope of the stored data, objection to the processing and deletion of the data. Refer to the provisions of Clause A (Rights of Data Subjects).

  • Data collection from publicly accessible sources.

The Bavarian State Chancellery also collects and processes, in addition to this purpose, data originating from public accessible sources, for example, from home pages of the data subject or from publicly accessible directories.

Further procedures for this data collection
The personal data are not passed on to third parties, but stored and processed for the internal use of the Bavarian State Government and for the purpose of the organisation and management of events (i.e. for compiling guests lists, enabling access controls, etc.). The Bavarian State Government may arrange for the data to be passed on to one or more contract workers who only use the personal data on behalf of the Bavarian State Government for internal usage for which the Bavarian State Government is responsible.

Depending on the type of the event, the Bavarian State Chancellery acts as a co-organiser alongside a further collaboration partner. In these cases, the data collected for event purposes are forwarded to our partners, who may also only use the data exclusively for the purpose correctly managing the event. What partners these are in individual cases is advised during the organisation of the event.

The data are only stored for as long as this is required for the organisation and management of the events and for the implementation of our tasks as part of our publicity work.

As the recipient of letters/invitations, you may object to the mailing of further letters/invitations at any time.

Photographs
For the implementation of the tasks included in the press and publicity activities of the Bavarian State Government, photographs are taken and used at events on which you may be recognised. You may also object to these.

Please use the contact data given above to raise advise your objection.