Privacy Policies

With this privacy policy, the Federal Ministry of Labour and Social Affairs (BMAS) fulfils its duties to provide information as the data protection controller pursuant to Art. 13, Art. 14, sentence 3 of Art. 7 (3) and Art. 21 (4) of the General Data Protection Regulation (GDPR).

The object of the data protection is personal data. Personal data are any information relating to an identified or identifiable natural person (otherwise known as the data subject). Personal data consequently include all information with which a person can be clearly identified or with which clear association is possible such as name, address, telephone number or email address. Personal data also include information which is necessarily generated during use of the website such as the start, the end and the extent of use or an IP address.

At the Federal Ministry of Labour and Social Affairs (BMAS), personal data are processed to the extent needed for the BMAS to perform its public duties and to meet the statutory obligations. The processing of this personal data is in accordance in particular with the European General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act (BDSG).

The data to which this relates, the purpose for which they are used and the basis upon which they are needed and processed are explained below. The privacy policy also includes information regarding how the controller and the BMAS’s Data Protection Officer can be contacted and what rights a data subject has with regard to the processing of personal data.

1. Controller and Data Protection Officer

The controller of the processing of personal data is the

Federal Ministry of Labour and Social Affairs
Wilhelmstraße 49
10117 Berlin
Germany
Tel.: Berlin office +49 (0)30 185 270 / Bonn office +49 (0)228 995 270
Email:
De-Mail:

A data subject may also contact the government’s Data Protection Officer with specific questions regarding the protection of personal data:

Data Protection Officer of the Federal Ministry of Labour and Social Affairs
53107 Bonn
Germany
Tel.: +49 (0)228 995 270
Email:

2. Information for data subjects pursuant to Art. 13 and 14 GDPR

2.1 Data processing when the website is visited

2.1.1 Purpose

Data required for the provision of services are collected and stored whenever the website www.imcb22.com is visited. The BMAS is obliged on the basis of Section 5 of the Act on the Federal Office for Information Security (BSIG) to store data on the BMAS Internet infrastructure and the Federal Government’s communication technology to protect them from attacks. These data are analysed and are required in order to initiate legal action and criminal prosecution in the event of attacks on the communication technology.

2.1.2 Type of data and source

The following data are collected and processed when the website www.imcb22.com is visited:

  • Type and version of the Internet browser
  • Operating system used
  • Date and time of the server request
  • HTTP protocol and status
  • Data volume transmitted
  • File path
  • Referrer
  • URL viewed
2.1.3 Legal basis

When the website is visited, data are processed on the basis of point (e) of Art. 6 (1) of the EU’s General Data Protection Regulation (GDPR) in conjunction with Section 5 BDSIG regarding the storing of data.

2.1.4 Recipients (poss. in a third country)

The data are stored in log files beyond the time of the visit on a server maintained by the web provider contracted by the BMAS, Digitas Pixelpark GmbH.

Data which are logged when the BMAS website is accessed are only transferred to third parties insofar as there is a legal obligation for this or the data are required to be shared for the purposes of legal action or criminal prosecution in the event of attacks on the Federal Government’s communication technology. Data are not shared under any other circumstances.

There is no intention for personal data to be transferred to recipients in a third country or to an international organisation.

2.1.6 Automated decision-making

There is no automated decision-making.

2.1.7 Obligation to provide data and consequences in the event of failure to provide data

Use of the website without the aforementioned technical connection data is not possible de facto or for legal reasons.

2.2 Web analytics on the website

2.2.1 Purpose

Usage information is analysed for statistical purposes in the context of public relations, for the purpose of improving the website and for the needs-based provision of information. Analysis is performed using the web analytics service etracker.

2.2.2 Type of data and source

The software places cookies on the users’ computers. When individual pages of our website are viewed, the following data are recorded:

The anonymised IP addresses of the visitors’ terminals (the last three characters are anonymised or truncated as soon as possible).

  • The page viewed
  • The website from which the user came to the page viewed (referrer)
  • Recognition of returning visitors and visitor history
  • The subpages accessed from the page viewed
  • The web page use time
  • The frequency of the page being viewed
2.2.3 Legal basis

The data are processed on the basis of point (e) of Art. 6 (1) GDPR in conjunction with Section 3 BDSG.

2.2.4 Recipients (poss. in a third country)

The software runs exclusively on the servers of the service provider etracker on behalf of the BMAS. Usage information is only logged there. The data are not shared with any third parties.

2.2.5 Retention period

Digitas Pixelpark GmbH analyses the usage information on behalf of the BMAS. Analysis is performed using the web analytics services etracker Analytics and Google Optimize. The users’ informed consent is obtained upon their viewing the website.

The users’ IP addresses are immediately anonymised during this process, meaning they remain anonymous to us.

The software is configured such that the IP addresses are not recorded in full, with one byte of the IP address being masked (e.g.: 192.168.100.xxx). This means it is no longer possible for the truncated IP address to be associated with the accessing terminal.

Use of the website is only logged by etracker Analytics and Google Optimize if users have given their informed consent in advance. This happens on the basis of the selection made by the users in the cookie notification dialogue at the beginning of their visit. If users wish to subsequently modify their selection or their consent or rejection, they can do so by clicking on the link below. The cookie notification dialogue then opens again and the settings can be changed accordingly.

To the cookie dialogue

This website uses what is known as a consent management system to allow the users to give their consent to or reject data processing. This sees to the technical implementation of the option of consenting to or objecting to etracker Analytics and Google Optimize.

Additionally, Google Tag Manager is used for the technical integration of etracker Analytics and Google Optimize. This allows what are known as tags to be placed on websites, establishing a technical link to various services. Tag Manager itself is a cookie-free domain and does not collect any personal data. The tool simply serves to trigger other tags which may in turn collect data, but it does not access these data. If deactivation is effected at the domain or cookie level, this applies to all the tracking tags implemented with Google Tag Manager. Tag Manager is used on this website solely to integrate etracker Analytics and Google Optimize.

2.2.6 Automated decision-making

There is no automated decision-making.

2.2.7 Obligation to provide data and consequences in the event of failure to provide data

Failure to grant consent has no bearing on the information and/or services provided on the website.

2.3 Data processing in the context of making contact

2.3.1 Purpose

Processing personal data allows us to process contact requests and, potentially, the issue addressed within the scope of this project.

2.3.2 Type of data and source

In the case of the contact channels listed below, the users’ transferred personal data are stored. These are generally their family name, first name and contact details (e.g. private or work email address etc.):

of the BMAS
International Metropolis Conference 2022
Federal Ministry of Labour and Social Affairs
Wilhelmstraße 49
10117 Berlin
Germany

2.3.3 Legal basis

The data are processed on the basis of point (e) of Art. 6 (1) GDPR in conjunction with Section 3 BDSG.

2.3.4 Recipients

Matters communicated by the users via the contact channels listed below are always processed by employees of the BMAS. Matters relating to event participation management are processed by the service provider contracted by the BMAS, facts and fiction GmbH. This rule applies to contact initiated via:

of the BMAS
International Metropolis Conference 2022
Federal Ministry of Labour and Social Affairs
Wilhelmstraße 49
10117 Berlin
Germany

Matters communicated by users via the email address info.gehoerlos[at]bmas.bund.de are processed by the employees of the service provider contracted by the BMAS, Telemark Rostock Kommunikations- und Marketinggesellschaft mbH. If a matter cannot be processed by the employees of Telemark Rostock, it is forwarded to the BMAS.

Matters communicated by users via the email address are processed by the employees of the service provider contracted by the BMAS, Digitas Pixelpark GmbH.

2.3.5 Retention period

The storage of data for the contact channels listed below is in accordance with the time limits for record retention given in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO). This rule applies to contact initiated via:

of the BMAS
International Metropolis Conference 2022
Federal Ministry of Labour and Social Affairs
Wilhelmstraße 49
10117 Berlin
Germany

When contact is initiated via , the service provider contracted by the BMAS to process matters, Telemark Rostock Kommunikations- und Marketinggesellschaft mbH, will store the users’ data solely for the purpose of processing the matters and in accordance with the statutory and contractual requirements. If a matter is forwarded to the BMAS, the storage of data is in accordance with the time limits for record retention given in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).

When contact is initiated via info[at]digitaspixelpark.com, the service provider contracted by the BMAS to process matters, Digitas Pixelpark GmbH, will store data solely for the purpose of processing the matters and in accordance with the statutory and contractual requirements. If a matter is forwarded to the BMAS, the storage of data is in accordance with the time limits for record retention given in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).

2.3.6 Automated decision-making

There is no automated decision-making.

2.3.7 Obligation to provide data and consequences in the event of failure to provide data

If the personal data listed above are not processed, there can be no participation in the contents of this project.

3. Your rights

Data subjects have rights regarding their personal data vis-à-vis the BMAS as the controller:

3.1 General data subject rights

  • Right of access (Art. 15 GDPR)
    The right of access gives the data subject comprehensive information on personal data and a number of other important criteria such as the processing purposes and the duration of storage. The exceptions regarding this right as per Section 34 BDSG apply.
  • Right to rectification (Art. 16 GDPR)
    The right to rectification enables the data subject to have inaccurate personal data corrected.
  • Right to erasure (Art. 17 GDPR)
    The right to erasure enables the data subject to have the controller erase data. However, this is only possible if, for example, the personal data are no longer needed or are processed unlawfully or consent granted in this respect is revoked. The exceptions regarding this right as per Art. 17 GDPR and Section 35 BDSG apply.
  • Right to restriction of processing (Art. 18 GDPR)
    The right to the restriction of processing enables the data subject to provisionally prohibit the further processing of personal data under certain circumstances.
  • Right to data portability (Art. 20 GDPR)
    The right to data portability enables the data subject to, under certain circumstances, receive their personal data from the controller in a commonly used, machine-readable format and forward them to another controller, if necessary. The exception regarding this right as per sentence 2 of Art. 20 (3) GDPR applies.

3.2 Right to withdraw consent to data processing

If personal data are processed on the basis of consent (point (a) of Art. 6 (1), Art.7 or point (a) of Art. 9 (2) GDPR), this consent may be withdrawn at any time (sentence 1 of Art. 7 (3) GDPR). The lawfulness of processing based on consent remains unaffected until consent is withdrawn. In certain cases, data processing limited to specific purposes may be permissible and necessary even after the withdrawal of consent (e.g. documentation purposes). Consent may be withdrawn by contacting the BMAS at the above addresses insofar as no other addressee is specified.

3.3 Right to object as per Art. 21 GDPR

If the processing of personal data is based on point (e) of Art. 6 (1) GDPR (performance of tasks in the public interest), the data subjects have the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them (Art. 21 (1) GDPR). The exceptions regarding this right as per Art. 21 GDPR and Section 36 BDSG apply. An objection may be lodged in any form that states the name and, if applicable, other means of identification (e.g. email address, postal address) and should be addressed to the BMAS address given above insofar as no other specific addressee is stipulated.

3.4 Right to lodge a complaint

Data subjects have the option of lodging a complaint with the above-mentioned Data Protection Officer(s) or with the data protection supervisory authority responsible for the BMAS:

Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Straße 153
53117 Bonn
Germany
Tel.: +49 (0)228 997 7990
Email: