Privacy Policy

Preamble

With the following privacy policy, we would like to inform you about what types of your personal data (hereinafter also briefly referred to as "data") we process for what purposes and to what extent in the context of providing the application "Stadtführer Görlitz".

The terms used are not gender-specific.

Last updated: February 25, 2024

Table of Contents

• Preamble
• Overview of Processing
• Legal Basis
• Security Measures
• International Data Transfers
• Rights of Data Subjects
• Provision of Online Services and Web Hosting

Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of Data Processed

• Content data.
• Usage data.
• Meta, communication and procedural data.

Categories of Data Subjects

• Communication partners.
• Users.

Purposes of Processing

• Contact requests and communication.
• Management and response to inquiries.
• Feedback.
• Provision of our online services and user-friendliness.
• Information technology infrastructure.

Legal Basis

Legal Basis under the GDPR:Below you will find an overview of the legal basis under the GDPR on which we process personal data. Please note that in addition to the GDPR regulations, national data protection regulations may apply in your or our place of residence or jurisdiction. Should more specific legal bases be applicable in individual cases, we will inform you of this in the privacy policy.

• Legitimate Interests (Art. 6(1)(f) GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

National Data Protection Regulations in Germany:In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. These include in particular the Act on Protection against Misuse of Personal Data in Data Processing (German Federal Data Protection Act – BDSG). The BDSG contains in particular special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases including profiling. Furthermore, state data protection laws of the individual German states may apply.

Security Measures

We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of processing and the different probabilities and extent of the risk to the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

Measures include in particular the safeguarding of confidentiality, integrity and availability of data through control of physical and electronic access to the data as well as access to it, input, transmission, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data and responses to data security threats. We also take into account the protection of personal data in the development and selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and privacy-friendly default settings.

TLS/SSL Encryption (https): To protect user data transmitted through our online services, we use TLS/SSL encryption. Secure Sockets Layer (SSL) is the standard technology for securing Internet connections by encrypting data transmitted between a website or app and a browser (or between two servers). Transport Layer Security (TLS) is an updated and more secure version of SSL. Hyper Text Transfer Protocol Secure (HTTPS) is displayed in the URL when a website is secured by an SSL/TLS certificate.

International Data Transfers

Data Processing in Third Countries: To the extent that we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or processing takes place in the context of using third-party services or disclosure or transmission of data to other persons, entities or organisations, this takes place only in accordance with legal requirements.

EU-US Trans-Atlantic Data Privacy Framework: As part of the so-called "Data Privacy Framework" (DPF), the EU Commission has recognized the level of data protection as adequate for certain companies from the USA in its adequacy decision of 10 July 2023. The list of certified companies and further information about the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ (in English). In our privacy notice we inform which of our service providers are certified under the Data Privacy Framework.

Rights of Data Subjects

Rights of Data Subjects under the GDPR: As a data subject, you have various rights under the GDPR, which arise in particular from Articles 15 to 21 of the GDPR:

• Widerspruchsrecht: Sie haben das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung der Sie betreffenden personenbezogenen Daten, die aufgrund von Art. 6 Abs. 1 lit. e oder f DSGVO erfolgt, Widerspruch einzulegen; dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling. Werden die Sie betreffenden personenbezogenen Daten verarbeitet, um Direktwerbung zu betreiben, haben Sie das Recht, jederzeit Widerspruch gegen die Verarbeitung der Sie betreffenden personenbezogenen Daten zum Zwecke derartiger Werbung einzulegen; dies gilt auch für das Profiling, soweit es mit solcher Direktwerbung in Verbindung steht.
• Widerrufsrecht bei Einwilligungen: Sie haben das Recht, erteilte Einwilligungen jederzeit zu widerrufen.
• Auskunftsrecht: Sie haben das Recht, eine Bestätigung darüber zu verlangen, ob betreffende Daten verarbeitet werden und auf Auskunft über diese Daten sowie auf weitere Informationen und Kopie der Daten entsprechend den gesetzlichen Vorgaben.
• Recht auf Berichtigung: Sie haben entsprechend den gesetzlichen Vorgaben das Recht, die Vervollständigung der Sie betreffenden Daten oder die Berichtigung der Sie betreffenden unrichtigen Daten zu verlangen.
• Recht auf Löschung und Einschränkung der Verarbeitung: Sie haben nach Maßgabe der gesetzlichen Vorgaben das Recht, zu verlangen, dass Sie betreffende Daten unverzüglich gelöscht werden, bzw. alternativ nach Maßgabe der gesetzlichen Vorgaben eine Einschränkung der Verarbeitung der Daten zu verlangen.
• Recht auf Datenübertragbarkeit: Sie haben das Recht, Sie betreffende Daten, die Sie uns bereitgestellt haben, nach Maßgabe der gesetzlichen Vorgaben in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten oder deren Übermittlung an einen anderen Verantwortlichen zu fordern.
• Beschwerde bei Aufsichtsbehörde: Entsprechend den gesetzlichen Vorgaben und unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs, haben Sie ferner das Recht, bei einer Datenschutzaufsichtsbehörde, insbesondere einer Aufsichtsbehörde im Mitgliedstaat, in dem Sie sich gewöhnlich aufhalten, der Aufsichtsbehörde Ihres Arbeitsplatzes oder des Ortes des mutmaßlichen Verstoßes, eine Beschwerde einzulegen, wenn Sie der Ansicht sei sollten, dass die Verarbeitung der Ihre Person betreffenden personenbezogenen Daten gegen die DSGVO verstößt.

Provision of Online Services and Web Hosting

We process user data in order to be able to provide our online services to them. For this purpose, we process the user's IP address, which is necessary to transmit the contents and functions of our online services to the user's browser or end device.

• Types of Data Processed: Usage data (e.g. pages visited, interest in content, access times); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, consent status).
• Data Subjects: Users (e.g. website visitors, users of online services).
• Purposes of Processing: Provision of our online services and user-friendliness. Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)).
• Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).

Further Information on Processing Processes, Procedures and Services:

• Content-Delivery-Network: We use a "Content-Delivery-Network" (CDN). A CDN is a service that helps to deliver the contents of an online offering, especially large media files such as graphics or program scripts, more quickly and securely with the help of regionally distributed and Internet-connected servers; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).

Created with free privacy policy generator from Dr. Thomas Schwenke