Privacy Policy

Contents

Notice on Joint Controllership between KREATIVES SACHSEN GmbH and Landesverband der Kultur- und Kreativwirtschaft Sachsen e.V.

For certain processing activities (e.g., CRM database, membership management, events, personnel administration), KREATIVES SACHSEN GmbH and Landesverband der Kultur- und Kreativwirtschaft Sachsen e.V. work closely together. We have jointly determined who processes which data for what purpose (Art. 26 GDPR).

What does this mean for you? Even though we are joint controllers, we have allocated the tasks internally:

  • Central point of contact: For all questions regarding data protection and the exercising of your rights, you can primarily contact .
  • Rights: Irrespective of our internal allocation of responsibilities, you may exercise your rights (access, erasure, etc.) against either party.
  • Information obligations: We have primarily assigned the fulfillment of the information obligations to the party where the data is collected or which maintains direct contact.

Data Protection for Attendees of Our Events

At events, photo, video, or audio recordings are made on the basis of Art. 6 Para. 1 lit. f GDPR to enable documentation and reporting. This material may be published on digital and analog media by KREATIVES SACHSEN or the Landesverband der Kultur- und Kreativwirtschaft Sachsen e. V.

The recordings are made by employees of KREATIVES SACHSEN or the state association (Landesverband), as well as by externally commissioned photographers. If you explicitly do not wish your data to be processed, please inform the staff or the photographers.

You have the right to revoke your consent in whole or in part at any time. In the event of a revocation, we will delete the affected recordings unless we are entitled or obliged to continue using them under another legal basis.

Below, we inform you about how we process your data and what rights you are entitled to under data protection regulations.

1. Name and Contact Details of the Data Controller

KREATIVES SACHSEN GmbH and Landesverband der Kultur- und Kreativwirtschaft Sachsen e.V. Kraftwerk Mitte 7 01067 Dresden

2. Purposes of Processing Personal Data and Legal BasisWe use photographs for documentation purposes and publish them for public relations and to announce upcoming events on our website, on social media, as well as in print media and products.

The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR, to safeguard our legitimate interests.

Our legitimate interests:

  • Recordings in which individual persons are not identifiable or “blend into” a group.

  • Recordings of large crowds where individuals are not recognizable.

The publication of recordings of individual persons or minors only takes place with explicit consent or the explicit consent of the legal guardians. The processing is then carried out on the basis of Art. 6 Para. 1 lit. a GDPR.

3. Categories of Personal Data

  • Recordings of attendees / visitors

  • Time and location of the recordings

4. Recipients of Personal Data
We transmit your personal data to:

  • Internal departments

  • External photographers

5. Storage Duration of Your Personal Data
Photographs requiring consent will be deleted internally and removed from the internet immediately upon revocation of consent. The photographs will no longer be used in new print media and products.

We would like to point out that information on the internet is accessible worldwide and can be found using search engines and linked to other information, from which personality profiles about individuals may potentially be created. Information posted on the internet, including photos, can easily be copied and distributed further. There are specialized archiving services whose goal is to permanently document the state of certain websites at specific times. This can result in information published on the internet continuing to be found elsewhere even after its deletion from the original site. Furthermore, we point out that, according to currently available information, photos and data on certain social media platforms may possibly not be deleted at all, but rather only hidden from public view. There is currently insufficient information regarding the internal use of photos and data by certain social media platforms—for example, for the creation of personality profiles.

Otherwise, photos are stored until the purpose for them no longer applies.

6. Your Rights
In accordance with Art. 15 et seq. GDPR, you have the right to information, rectification, deletion, and restriction of processing regarding your personal data, as well as the right to data portability.

Insofar as we base the processing of photographs on legitimate interests (Art. 6 Para. 1 Sentence 1 lit. f GDPR), you may, for reasons arising from your particular situation, object to the processing (Art. 21 Para. 1 GDPR).

Insofar as the publication of recordings only takes place with your explicit consent or your explicit consent as a legal guardian (Art. 6 Para. 1 lit. a GDPR), you can revoke your consent at any time. Regarding deletion, we refer to Section 6 (Note: the original German text refers back to Section 6 here, though storage/deletion is handled in Section 5).

Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Art. 77 GDPR.

To exercise your rights, please contact the controller named under point 1 or the data protection officer named under point 2, preferably in writing.

General Privacy Policy

Landesverband der Kultur- und Kreativwirtschaft Sachsen e.V. and KREATIVES SACHSEN GmbH (hereinafter: We) operate internet presences under the addresses/domains

https://betakonferenz.de
https://kreatives-sachsen.de
https://kreative-in-sachsen.de
https://werkschau-sachsen.de
https://kreativorte-sachsen.de

https://bpm-sachsen.de
https://kreativlandtransfer.de
https://lvkkwsachsen.de
https://maker-region.de
https://kreativorte-mitteldeutschland.de
https://verlagspreis-sachsen.de

(hereinafter: Websites).

In accordance with Article 13 and Article 14 of the General Data Protection Regulation (GDPR), we hereby inform you about which personal data is collected and processed in connection with visiting one of the websites and using the online services provided thereon. Below you will find information on the following points:

  1. Name and address of the controller
  2. General information on data processing

III. Provision of the websites and creation of log files

  1. Use of cookies
  2. Contact form and e-mail contact
  3. Registration / user account

VII. Use of script libraries (Google Fonts)

VIII. Web analytics by Google Analytics (with anonymization function)

  1. Web analytics with Matomo
  2. Use of YouTube
  3. Use of Google Maps

XII. Use of OpenStreetMap

XIII. Links to social media presences

XIV. Newsletter mailing via mailingwork

  1. Your rights as a data subject

I. Name and address of the controller

The joint controllers for data processing on these websites within the meaning of Art. 26 GDPR are:

  1. Landesverband der Kultur- und Kreativwirtschaft Sachsen e.V.
    Kraftwerk Mitte 7, 01067 Dresden
  2. KREATIVES SACHSEN GmbH
    Kraftwerk Mitte 7, 01067 Dresden

Central point of contact for data protection inquiries:

E-Mail: Phone: +49 157 81503319

II. General information on data processing

As a matter of principle, we only collect personal data from you as a visitor to our websites to the extent necessary to provide a proper display of our websites or to enable the use of our content and services. Processing generally only takes place if you have given us your prior consent to do so, or if legal regulations permit us to process the data.

Your personal data will be deleted as soon as the purpose for which we stored it ceases to apply. An exception only applies if we are obligated by a legal provision to store the data for a longer period, or if you have given us your consent for an extended use of your personal data.

III. Provision of the websites and creation of log files

  1. Description and scope of data processing

Every time our websites are accessed, we or our hosting provider automatically collect data about the access to the server on which our websites are stored. The following data is collected in this context:

  1. Name of the accessed file,
  2. Date and time of access,
  3. Access status (file transferred/file not found),
  4. Amount of data transferred,
  5. Information about the browser type and version of your system,
  6. Information about the operating system of your system,
  7. IP address of the internet connection used by your system, and
  8. Website from which your system accessed our website (referrer URL)

This data is also automatically stored in log files of our system. The IP address is only stored in anonymized form. The data is not stored together with other personal data belonging to you. The creation of personal user profiles is therefore not possible.

  1. Purpose of data processing, legal basis

The storage of your IP address by our system during your visit to the websites is necessary to enable the websites to be delivered to the computer system you are using. For this purpose, your IP address must remain stored for the duration of the session.

The storage in log files takes place to ensure the functionality of the websites. In addition, the data serves us to optimize the websites and to ensure the

security of our information technology systems (e.g., to investigate abuse or fraudulent activities).

The legal basis for the temporary storage is Art. 6 (1) (f) GDPR. Our legitimate interest in the data processing lies in being able to provide functional websites and ensure the security of our systems.

  1. Duration of storage

Log file information is stored for a maximum of 7 days. After the 7 days have expired, the log files are deleted. Data whose further retention is necessary for evidential purposes is exempt from deletion until the final clarification of the respective incident.

  1. Right to object and possibility of removal

The collection of data for the provision of the websites and the storage of the data in log files and protocol files is absolutely necessary for the secure operation of our websites. There is consequently no possibility for you to object.

IV. Use of cookies

  1. Description and scope of data processing

Our websites use individual cookies. These are files that are transferred to and stored on the visitor’s terminal device when the website using them is accessed. If you visit a website that uses a cookie, it is transferred to your device and stored there in your browser. The cookie contains a unique identifier. This makes your system or the browser used on it uniquely identifiable to the provider of the cookie. Various data and information about you or your system can be collected and stored within the cookie.

If data is only stored for the duration of your visit or your browser session, these are so-called temporary cookies (also session cookies or transient cookies). Such a cookie can, for example, store the shopping cart of an online shop or the login status for a closed user area. Temporary cookies are deleted when you leave the visited website and close your browser. In contrast, permanent cookies (also referred to as persistent cookies) remain stored on your system even after closing the browser. As a result, the stored data remains available for new browser sessions at a later point in time. Such cookies can be used, for example, for marketing purposes, such as to record specific interests and individual user behavior and to display advertising adapted to this. Finally, third-party cookies (as opposed to first-party cookies) are cookies that do not originate from the website controller, but from third-party providers.

We use both our own cookies and third-party cookies (e.g., Google Analytics, Google Maps) on our websites. Our own cookies that we use store a session ID, language settings, and, if applicable, your login data as well as the confirmation of our cookie banner. Information about the third-party cookies and the related data processing can be found below in the section for the respective tool.

  1. Purpose of data processing, legal basis

Our own cookies that we use serve to ensure the use of the websites and their functionalities. The session ID must be recorded so that the connection can be maintained when switching between individual pages. Language settings are recorded so that our websites are displayed to you in the correct language. Login data must be stored so that you can remain logged into your user account, if applicable, during your visit to our websites.

Finally, your confirmation of our cookie banner is stored so that the banner is not displayed to you again with every subsequent page view. Overall, by storing data via cookies, we are pursuing our legitimate interest in offering you the best possible functionality of the websites as well as a customer-friendly and effective design of your page visits. The legal basis in this respect is Art. 6 (1) (f) GDPR. The user data collected by our cookies is not used to create personal user profiles.

  1. Duration of storage

Temporary cookies are only stored temporarily on your system and are deleted as soon as you close your browser. Permanent cookies remain on your system even after a browser session has ended until they are deleted. Since cookies are generally stored on your system and the information stored in them is transmitted from there to our site, you also have full control over the use of cookies.

  1. Right to object and possibility of removal

Since cookies are stored on your computer for the browser you are using, you as a user can also actively influence the data processing. You can restrict or completely prevent the use of cookies at any time with effect for the future. If you generally do not want cookies to be stored on your computer, please deactivate the corresponding option in the system settings of your browser. You can delete already stored cookies there at any time. If you only wish to change the cookie settings for our websites or revoke a consent granted to us for the use of cookies with effect for the future, you can access the “Cookie Settings” (“Cookie-Einstellungen”) button in the respective footer of the website and change your selection there. Please note that you may no longer be able to use all functions of our websites in full if you generally prevent the storage of cookies on your system. Further information on cookies and usage-based online marketing can be found, for example, on the EU website www.youronlinechoices.com. There you can also object to the use of cookies for the purposes of usage-based online marketing entirely or for individual providers.

V. Contact form and e-mail contact

  1. Description and scope of data processing

Contact forms for electronic communication are integrated on our websites. In addition, there is the option to contact us by e-mail using the provided e-mail addresses.

Contact forms

If you use the option to contact us via the contact form, the data you enter in the input mask and any attached documents will be transmitted to us and stored. The transmission takes place via an encrypted connection. When the message is sent, the IP address of the internet connection you are using and the date and time of sending are also stored. The data transmitted by you in connection with the contact will be stored by us and used to the extent necessary to process your inquiry. The data and documents transmitted to us via the contact form will only be passed on to third parties if and to the extent this is necessary to process your inquiry or to fulfill the legal obligations incumbent upon us in this regard. Your data will not be passed on to third parties beyond this.

E-mail contact

Alternatively, it is possible to contact us via the e-mail address we have provided for this purpose. If you use this option, we will also store the personal data transmitted with the e-mail and use it to process your request. Your data will not be passed on to third parties in connection with the contact.

  1. Purpose of data processing, legal basis

The sole purpose of processing personal data from inquiries via our contact forms or by e-mail is to process the matter underlying your contact. The legal basis for processing the data you transmit is Art. 6 (1) (f) GDPR. Our legitimate interest in the processing lies in being able to process your request. If your contact is aimed at concluding a contract, the legal basis for the processing is Art. 6 (1) (b) GDPR.

  1. Duration of storage

The data transmitted to us is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data transmitted via the contact form or by e-mail, this is generally the case when the matter in question has been conclusively clarified and the conversation with you has therefore ended.

  1. Right to object and possibility of removal

You have the right to request the deletion of the personal data transmitted to us in connection with an inquiry at any time. In this case, all affected data will be deleted, provided it is not required for the performance of a contract or the implementation of pre-contractual measures, and provided no contractual or legal obligations preclude deletion.

VI. Registration / user account

  1. Description and scope of data processing

On our websites, we offer you the opportunity to create a user account by providing personal data. Via this user account, you can then store various details and information for yourself and/or your company, e.g., your own industry directory entry, and publish them on the websites. When creating a user account and setting it up, personal data is also collected and processed.

User account:

To create a user account, you enter data into an input mask, which is transmitted to us and stored. This data is not passed on to third parties. The following data is collected during the registration process:

  1. Your first and last name,
  2. a username,
  3. your e-mail address,
  4. and a password

At the time of registration, the following data is also stored:

  1. the IP address of the internet connection used by your system,
  2. and the date and time of registration

Contents of the user account, e.g., industry directory entry:

The information and data entered by you there after creating a user account (e.g., the name and address of your creative business, the market in which you operate, and your contact details), as well as any documents you may have uploaded, are transmitted to our server and stored there upon confirming the save button. Industry directory entries and other advertisements intended for publication are published on the respective website and can thus be viewed by any visitor to the website.

  1. Purpose of data processing, legal basis

The processing of data in the context of registration on our websites serves to offer you the opportunity to create a user account there and to store and manage individual information through it. The processing and publication of data in the context of your publications on our websites, such as an industry directory entry, serves to enable you to inform the interested public about your creative business and to be found quickly and specifically by potential clients. The legal basis for processing the data is Art. 6 (1) (f) GDPR. Our legitimate interest consists in enabling you to publish industry directory entries and other publications on our websites.

  1. Duration of storage

The data is stored for as long as is necessary to achieve the purpose for which it was collected. For the data collected during the registration process, this is generally the case for as long as you remain registered on the respective website with a user account. The data collected when creating an industry directory entry is stored by us until you delete it yourself.

  1. Right to object and possibility of removal

You have the possibility to remove created content, such as industry directory entries, or to completely terminate your user account at any time. If you use this option, we will delete your data immediately, unless it is still required for the complete execution of a contract with you. After full execution of all contracts and the deletion of your user account, we will only process your data to the extent necessary to fulfill our legal obligations, e.g., retention periods under tax and commercial law. For any further processing, your data will be blocked and deleted after these retention periods have expired, provided you have not expressly consented to a further use of your data or further data usage is legally permitted for other reasons.

VII. Use of script libraries (Google Fonts)

In order to present the content of our websites correctly and in a graphically appealing manner across all browsers, we use Google Fonts, a script and font library of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (Google). The provider of Google services in the territory of the European Union and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Further information on Google Fonts can be found at https://fonts.google.com/.

The Google Fonts are installed locally on our web space. A connection to Google servers does not take place.

VIII. Web analytics by Google Analytics (with anonymization function)

To use Google Analytics in a data protection-compliant manner, the service must be deactivated when the website is first accessed and is only to be activated upon confirmation of the cookie via the cookie consent banner. The following formulation assumes such use.

  1. Description and scope of data processing

We use functions of Google Analytics on our websites. Google Analytics is a web analytics service. The operating company of the service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The provider of Google services in the territory of the European Union and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Web analytics refers to the collection, gathering, and evaluation of data regarding the surfing behavior of website visitors. For this purpose, various data of the visitor is collected during a visit to a website.

To ensure data protection on our websites, Google Analytics is deactivated when you first visit one of our websites. If you consent to the use of Google Analytics, the service is activated and various cookies (_ga and ga[CONTAINER-ID]) are stored on your system (for general information on cookies, see section IV.). Through these, the following data is subsequently collected:

  1. The IP address of the connection from which you access our site,
  2. the location of the access,
  3. the website you accessed,
  4. the website from which you reached our website (referrer URL),
  5. the subpages you access from the accessed website,
  6. the duration of your stay on the website, as well as
  7. the frequency of access to our website.

The information collected by the cookies regarding your use (including your IP address) is transmitted to Google servers and stored there. Google uses this information to evaluate your use of our websites, to compile reports on this for us, and to offer or provide further services associated with website and internet use.

We cannot rule out that the servers on which Google processes the received data are located outside the territory of the European Union, for example in the USA. Google could also transfer the information to third parties. However, to ensure the protection of the data collected from you and other users, we have concluded a data processing agreement with Google. As a result, Google is obligated to process the data collected on our behalf in accordance with the requirements of the GDPR. Google is certified under the “EU-US Data Privacy Framework” (DPF). The EU Commission has determined that the US ensures an adequate level of data protection for companies certified under the DPF.

  1. Purpose of data processing, legal basis

The processing enables us to analyze your surfing behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our internet presence and its user-friendliness. In addition, the use of Google Analytics serves audience measurement and market research. The legal basis for the processing is Art. 6 (1) (a) GDPR.

  1. Duration of storage

The data transmitted by us as well as the data linked to cookies are automatically deleted as follows:

Cookie Deletion after

_ga and ga[CONTAINER-ID]

  1. Right to object and possibility of removal

The cookies of the Google Analytics software tool are stored on your computer. The specified data is transmitted from it to Google. As a user, you can therefore actively influence the data processing. By changing the settings in your internet browser, you can deactivate or restrict the use of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to fully use all functions of the respective website.

Furthermore, you can prevent the collection of the data generated by the Google Analytics cookie and related to your use of the websites (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser add-on to deactivate Google Analytics HERE. This browser add-on informs Google Analytics that no data and information regarding website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If your system is deleted, formatted, or reinstalled after the installation of the browser add-on, you must also reinstall the add-on to deactivate Google Analytics. Further information and Google’s applicable privacy provisions can be retrieved at http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/privacy/. Google Analytics is explained in more detail under the link https://www.google.com/intl/de_de/analytics/. Further information on restricting or preventing the use of cookies can be found above under section V. 4.

IX. Web analytics with Matomo

Nature and purpose of processing

We use the open-source software tool Matomo on our website to analyze the surfing behavior of our users. If individual pages of our website are accessed, the following data is stored:

  • Three bytes of the IP address of the user’s accessing system (anonymized)
  • The accessed webpage
  • The website from which the user reached the accessed webpage (referrer)
  • The subpages accessed from the accessed webpage
  • The duration of stay on the webpage
  • Frequency of access to the webpage
  • Technical data such as browser, operating system, screen resolution

The software runs exclusively on our own servers. The storage of users’ personal data only takes place there. The data is not passed on to third parties.

Anonymization of the IP address

We have configured Matomo so that IP addresses are not stored in full, but rather that 1 byte of the IP address is masked (e.g., 192.168.1.xxx). In this way, it is no longer possible to assign the shortened IP address to the accessing computer.

Legal basis

The processing of the data takes place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The consent can be revoked at any time.

The consent covers the storage of cookies on your terminal device as well as access to information stored on your terminal device (e.g., device information) in order to analyze user behavior.

Duration of storage

The data is deleted as soon as it is no longer required for our recording purposes (indefinite period).

Right to object (Opt-Out)

You can revoke your consent at any time with effect for the future by clicking on the cookie settings in the respective footer of the website to change your selection. The lawfulness of the processing carried out prior to the revocation remains unaffected.

X. Use of YouTube

To integrate YouTube videos in a data protection-compliant manner, the service must be deactivated when the website is first accessed and is only to be activated upon confirmation via the cookie consent banner or directly by clicking on the placeholder for the video. The following formulation assumes such use.

Videos that have been published on YouTube (hereinafter: YouTube videos) are integrated into our websites. YouTube is an internet video portal that enables the free publication of video clips as well as their equally free viewing, rating, and commenting.

The operating company of YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Further information about YouTube can be retrieved at https://www.youtube.com/yt/about/de/.

If you access a YouTube video that is integrated on a subpage of our websites, the internet browser you are using is prompted to download and display this video from YouTube. As part of this process, YouTube and Google also gain knowledge that this video is being accessed via the IP address of your internet connection on the subpage of our website. If you are logged in via a user account with YouTube and/or Google, YouTube and/or Google can also register your visit to the affected subpage even without you accessing the video. In this case, YouTube and/or Google can specifically assign your activities on our websites to you personally or to the account you are using. This information is highly likely collected and further evaluated by YouTube and/or Google. You can prevent the described assignment and evaluation by logging out of your YouTube account before accessing one of our websites.

Further information on the collection, processing, and use of personal data by YouTube and Google can be found in YouTube’s privacy provisions, which are available at https://www.google.de/intl/de/policies/privacy/.

XI. Verwendung von Google Maps

To use Google Maps in a data protection-compliant manner, the service must be deactivated when the website is first accessed and is only to be activated upon confirmation of the cookie via the cookie consent banner or directly by clicking on the placeholder for the map section. The following formulation assumes such use.

To visually display geographical information, we use the Google Maps API on our websites. The API (Application Programming Interface) is an interface with which we integrate map material from Google Maps into our websites. The provider of Google Maps is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. The provider of Google services in the territory of the European Union and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).

To ensure data protection on the websites, Google Maps is deactivated when you first visit them. If you consent to the use of Google Maps and its cookies, the service is activated to ensure the correct display of the Google Maps maps on our websites. When accessing the subpage with the Google Maps functionality, Google subsequently stores a cookie on your system via your internet browser and establishes a connection to a Google server.

Through the connection to a Google server, Google can recognize that your request has been sent from one of our websites. In addition, Google recognizes that the geographical information is transmitted to the IP address assigned to the internet connection you are using. The legal basis for the use of Google Maps is Art. 6 (1) (a) GDPR.

We cannot rule out that Google uses servers outside the territory of the European Union, in particular in the USA, to provide the Google Maps functionality. However, Google assures to comply with the EU data protection requirements even when processing data in the USA. The use of Google Maps and the processing of the data collected by Google in this context takes place on the basis of the respective Google Terms of Service (https://policies.google.com/terms?gl=DE&hl=de) and the Additional Terms of Service for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html. Additional information from Google can be found at https://adssettings.google.de/ or at https://policies.google.com/privacy .

If you do not agree with this processing of your data by Google, you have the option of preventing the installation of cookies by making the appropriate settings in your internet browser. Details on this can be found above under the section “Cookies” (Section V.).

XII. Use of OpenStreetMap

For the visual representation of geographical information, map sections of the open-source mapping service OpenStreetMap (hereinafter: OSM) are integrated on our website. The provider of OSM is the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom (hereinafter: OSMF).

To ensure the provision of OSM in accordance with data protection law requirements, OpenStreetMap is deactivated when you first access our website. If you give your consent to the use of OSM, the service will be activated. If you subsequently access a subpage of our website that contains an interactive OSM map, your terminal device establishes a connection to one of the OSMF servers, whereby the IP address of the internet connection you are using and further data relating to your terminal device are also transmitted. OSMF is responsible for the subsequent processing. Detailed information on this can be found in the OSMF privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy.

The legal basis for the transfer of data to OSMF is Art. 6 (1) (a) GDPR, based on the consent you have granted. The transmission of the IP address of the internet connection you are using and further data relating to your terminal device is necessary in order to establish a connection with OSMF servers and to be able to use the interactive maps from OSMF.

The servers used by OSMF are located, at least partially, in countries outside the EU and the EEA. When using OSM, it is therefore likely that personal data will also be transferred to third countries. This transfer takes place on the basis of Art. 45 (1) sentence 1 GDPR. All further information on the handling of your data can be found here at OSMF.

If you do not agree with the described data processing within the scope of using OSM, you are free not to grant the requested consent. In addition, you can also revoke consent already granted at any time by adjusting the privacy settings on our website (a link to the privacy settings can be inserted here if possible), thereby preventing the transmission of personal data to OSMF for the future.

XIII. Links to social media presences

We maintain online presences on the following social media portals

  • Facebook
  • Instagram
  • LinkedIn
  • Xing
  • X
  • YouTube

We use these to get in touch with individuals interested in our offerings and information who are active on these platforms, and to inform them about our offerings there as well. Our websites contain buttons that link to these presences.

If you use one of the buttons, you will be redirected to our presence within the respective portal. If you contact us there, we will process the data you transmit in accordance with its intended purpose. Please note in this context that the terms of use and data processing rules of the respective operator apply to the processing of your data within the social media portals, and we therefore have only limited influence on how personal data that you transmit to us within the framework of these platforms is processed.

Further information on the collection and use of data as well as your related rights and protection options are provided by the portal operators in their privacy notices. In addition, we refer to our

Privacy Policy: Facebook
Privacy Policy: Instagram
Privacy Policy: LinkedIn
Privacy Policy: Xing
Privacy Policy: Twitter
Privacy Policy: YouTube

XIV. Newsletter mailing via mailingwork

  1. Description and scope of data processing

On our websites, we offer you the opportunity to subscribe to free newsletters. If you use this opportunity, the data from the input mask is transmitted to us when you register for the newsletter. Specifically, this includes your e-mail address as well as your title, first and last name, and institution as voluntary information. The only mandatory information is your e-mail address. The further data is voluntary and is used to be able to address you personally.

In addition, the following data is collected when the registration is submitted:

  1. the IP address of the internet connection used by your system
  2. Date and time of registration

After registration, we send a message to the specified e-mail address requesting confirmation of the newsletter registration. This serves to prevent newsletter registrations with third-party e-mail addresses. If you confirm the registration using the designated link, we store and log the time of confirmation. After complete registration, we will send you the subscribed newsletters.

For the sending and organization of the newsletter, we use the software mailingwork from the provider Positive Group Chemnitz GmbH, Schönherrstr. 8, 09113 Chemnitz (hereinafter: mailingwork). We have concluded a data processing agreement with mailingwork pursuant to Art. 28 GDPR, which ensures compliance with data protection requirements.

Further information on how the service provider handles your personal data can be found on the mailingwork website at https://mailingwork.de/datenschutzerklaerung.

We would like to point out that we evaluate your user behavior in connection with the subscription and use of our newsletters. For this evaluation, the sent e-mails contain so-called web beacons or tracking pixels. These are single-pixel image files stored on our website. For the evaluations, we link the aforementioned data and the web beacons with your e-mail address and an individual ID. Links contained in the newsletter also contain this ID. This is how we record when you read our newsletters and which links you click in them, and from this we deduce your personal interests.

  1. Purpose of data processing, legal basis

The collection of your data in connection with subscribing to our newsletter serves to be able to deliver the newsletter to you. The legal basis for processing the data after registration for the newsletter is Art. 6 (1) (a) GDPR, based on your consent. The logging of your registration for the newsletter and the confirmation of the e-mail address has the purpose of executing a registration process in accordance with legal requirements. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in being able to prove the legally compliant registration and, if necessary, being able to contribute to the clarification of the misuse of your personal data.

The data processing in connection with the collection and evaluation of your use of our newsletters serves to design the newsletter according to your interests. Using the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. The legal basis for the processing is Art. 6 (1) (a) GDPR in this respect as well, based on your consent.

  1. Duration of storage

Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Your data is therefore stored for as long as the newsletter subscription is active. After unsubscription, we store the data purely statistically and anonymously.

  1. Right to object and possibility of removal

You can cancel the newsletter subscription at any time. For this purpose, a corresponding link is provided in every newsletter.

You can also object to the tracking of your user behavior at any time by clicking on the separate link provided in every newsletter e-mail and deactivating this option in your profile, or by informing us via another contact channel. Furthermore, the described tracking is not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be displayed to you in full, and you may not be able to use all functions. If you display the images manually, the tracking described above will also become active.

XV. Your rights as a data subject

If personal data concerning you is processed by us within the scope of the use of our websites or in any other context, you are a data subject within the meaning of the GDPR. Consequently, you have the following rights vis-à-vis us as the controller:

  1. Right of access, Art. 15 GDPR

You can request confirmation from us at any time as to whether personal data concerning you is being processed by us. If such processing is taking place, you have a right to further access and information regarding:

  1. the purposes for which the personal data is processed;
  2. the categories of personal data that are processed;
  3. the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
  4. the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, the criteria used to determine that period;
  5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by us, or a right to object to such processing;
  6. the existence of a right to lodge a complaint with a supervisory authority;
  7. any available information as to the source of the data where the personal data is not collected from you;
  8. the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.

  1. Right to rectification, Art. 16 GDPR

You have a right to rectification and/or completion vis-à-vis us if the processed personal data concerning you is inaccurate or incomplete. If you exercise this right, we will make the rectification without undue delay.

  1. Right to restriction of processing, Art. 18 GDPR

You can request the restriction of the processing of personal data concerning you from us if:

  1. you contest the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the data;
  2. the processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead;
  3. we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
  4. you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override yours.

Where processing of personal data concerning you has been restricted upon your corresponding request, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained restriction of processing pursuant to the aforementioned conditions, you shall be informed by us before the restriction of processing is lifted.

  1. Right to erasure, Art. 17 GDPR

You can request from us that the personal data concerning you be erased without undue delay. We are obligated to erase this data without undue delay where one of the following grounds applies:

  1. the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  2. you withdraw your consent on which the processing is based according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and where there is no other legal ground for the processing;
  3. you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing;
  4. you object to the processing pursuant to Art. 21 (2) GDPR;
  5. the personal data concerning you has been unlawfully processed;
  6. the personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject, or
  7. the personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

Where we have made the personal data concerning you public and are obliged pursuant to Art. 17 (1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

The right to erasure does not apply to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information;
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
  3. for reasons of public interest in the area of public health in accordance with Art. 9 (2) (h) and (i) as well as Art. 9 (3) GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  5. for the establishment, exercise or defense of legal claims.
  1. Right to notification, Art. 19 GDPR

If you have asserted the right to rectification, erasure, or restriction of processing vis-à-vis us, we are obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients upon request.

  1. Right to data portability, Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from us, where:

  1. the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR; and
  2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible. The freedoms and rights of others shall not be adversely affected by this.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

  1. Right to object, Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR. This also applies to profiling based on those provisions.

We shall no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

  1. Right to withdraw the declaration of consent, Art. 7 (3) GDPR

If we process your personal data on the basis of a corresponding consent, you have the right to withdraw your declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

  1. Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

If you lodge a complaint, the supervisory authority shall inform you on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

This privacy policy was translated into English using artificial intelligence. Original text: https://www.lvkkwsachsen.de/datenschutz/