Privacy Policy

Name and Contact Details of the Data Controller and the Data Protection Officer

This privacy notice applies to data processing by:

The Data Protection Officer of the Senatskanzlei can be reached at:

Collection and Storage of Personal Data, and the Nature and Purpose of Their Use

• When Visiting the Website

  When you access our website www.rathaus.bremen.de, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automated deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

  The mentioned data is processed by us for the following purposes:

  • Ensuring a smooth connection setup of the website,
  • Ensuring comfortable use of our website,
  • Evaluation of system security and stability,
  • For further administrative purposes.

  The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

  In addition, we use cookies and analysis services when you visit our website. Further details can be found under sections 4 and 5 of this privacy policy.

• When Subscribing to Our Newsletter

  If you have expressly consented according to Art. 6 para. 1 sentence 1 lit. a GDPR, we use your email address to regularly send you our newsletter. To receive the newsletter, providing an email address is sufficient.

  You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to buergermeister-news@sk.bremen.de by email.

• When Using Our Contact Form

  For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid email address so that we know who the inquiry is from and to be able to answer it. Further information can be provided voluntarily.

  Data processing for the purpose of contacting us is carried out according to Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent.

  The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.

Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

• You have given your explicit consent according to Art. 6 para. 1 sentence 1 lit. a GDPR,
• The disclosure is necessary according to Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• In the event that there is a legal obligation for disclosure according to Art. 6 para. 1 sentence 1 lit. c GDPR,
• This is legally permissible and necessary according to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.

Cookies

The Senate Chancellery uses cookies on its websites. Cookies are small text files that can be stored and read on the user's device. A distinction is made between session cookies, which are deleted once the user closes their browser, and permanent cookies, which are stored beyond an individual session. Cookies may contain data that enable the recognition of the device used. However, some cookies also contain only information on specific settings that are not personally identifiable. The Senate Chancellery uses session cookies on its websites. Processing is carried out based on Article 6(1)(f) GDPR and in the interest of optimizing user guidance. You can also participate in polls on our website. A session cookie is also used in this case to prevent multiple voting.

Usage Data
To improve the quality of the websites, the Senate Chancellery stores data about individual access to our site for statistical purposes. This data set consists of:

• The page from which the file was requested
• The name of the file
• The date and time of the request
• The amount of data transferred
• The access status (file transferred, file not found)
• A description of the type of web browser used
• The IP address of the requesting computer, which is shortened so that personal reference is no longer possible.

For this purpose, the Senate Chancellery uses the Matomo software. It has been configured to only use anonymized IP addresses and not to set any cookies. No pseudonyms are used. The visitor count is therefore solely based on anonymous data.

Newsletter Description and Scope of Data Processing
On the websites of the Senate Chancellery, users can subscribe to free newsletters. When registering for the newsletter, the data from the input form is transmitted to the Senate Chancellery:

• Email address
• Name (optional)
• Editorial department (optional)
• Publisher (optional)
• Telephone number (optional)

Additionally, the following data is collected during registration:

• Date and time of registration.

As part of the registration process, your consent is obtained for processing the data, and reference is made to this privacy policy.

No data is shared with third parties in connection with processing the data for sending newsletters. The data is used exclusively for sending newsletters.

Legal Basis for Data Processing
The legal basis for processing the data after a user registers for the newsletter is Article 6(1)(a) GDPR, provided the user has given their consent.

Purpose of Data Processing
Collecting the user’s email address serves the purpose of delivering the newsletter. Collecting other personal data during the registration process helps prevent misuse of the services or email address used. The optional data serves to establish personal contact as part of public relations work.

Storage Duration
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored as long as the newsletter subscription is active.

Objection and Removal Option
The newsletter subscription can be canceled by the affected user at any time. A corresponding link is provided in each newsletter for this purpose. This also allows users to withdraw their consent to store the personal data collected during the registration process.

Registration Description and Scope of Data Processing
Users can register on the Senate Chancellery website by providing personal data. The data is entered into an input form and transmitted to and stored by the Senate Chancellery. No data is shared with third parties. The following data is collected during the registration process:

• First and last name
• Email address

Additionally, at the time of registration, the following data is stored:

• Date and time of registration.

As part of the registration process, the user’s consent to process this data is obtained.

Legal Basis for Data Processing
The legal basis for processing the data is Article 6(1)(a) GDPR, provided the user has given their consent.

Purpose of Data Processing
User registration is necessary for receiving newsletters.

Storage Duration
Data is deleted as soon as it is no longer required for achieving the purpose for which it was collected. This applies to data collected during registration when the registration on the Senate Chancellery’s websites is deleted or modified.

Objection and Removal Option
Users can cancel their registration at any time. Stored data can be modified at any time by sending an email to:
senatspressestelle@sk.bremen.de

Contact Form and Email Contact Description and Scope of Data Processing
The Senate Chancellery’s website contains a contact form for electronic communication. If a user makes use of this option, the data entered in the input form is transmitted to and stored by the Senate Chancellery. This data includes:

• First and last name
• Email address
• Telephone number (optional)
• Fax number (optional)

At the time of sending the message, the following data is also stored:

• Date and time of registration.

As part of the submission process, users’ consent is obtained for processing their data, and reference is made to this privacy policy. Alternatively, users can contact us via the provided email address. In this case, the user’s personal data transmitted via email is stored.

No data is shared with third parties in this context. The data is used exclusively for processing the conversation.

Legal Basis for Data ProcessingThe legal basis for processing data is Article 6(1)(a) GDPR, provided the user has given their consent. The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR.

Purpose of Data Processing
Processing personal data from the input form is solely for handling user inquiries. If users contact us via email, there is a legitimate interest in processing the data. Other personal data processed during submission is used to prevent misuse of the contact form and ensure the security of our IT systems.

Storage Duration
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input fields and emails, this occurs when the respective conversation with the user has ended. A conversation is considered ended when it can be inferred from the circumstances that the issue in question has been conclusively resolved.
Any additional personal data collected during submission is deleted after seven days at the latest.

Objection and Removal Option
Users can withdraw their consent to process their personal data at any time. If users contact the Senate Chancellery via email, they can object to storing their personal data at any time. In such a case, the conversation cannot continue. An objection can be made via email to:
kontaktformular@sk.bremen.de

All personal data stored during contact will be deleted in this case.

Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the controller:

1. Right to Information

   You can request confirmation from the controller as to whether personal data concerning you is being processed by the Senate Chancellery. If such processing is taking place, you can request the following information from the controller:

   1. The purposes for which the personal data is processed
      
   2. The categories of personal data that are processed
      
   3. The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed
      
   4. The planned duration of storage of the personal data concerning you or, if specific details are not possible, criteria for determining the storage period
      
   5. The existence of a right to rectification or deletion of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing
      
   6. The existence of a right to lodge a complaint with a supervisory authority
      
   7. All available information about the source of the data if the personal data was not collected from the data subject
      
   8. The existence of automated decision-making, including profiling, as per Article 22(1) and (4) GDPR, and – at least in such cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

   You have the right to request information on whether personal data concerning you is transferred to a third country or an international organization. In this regard, you can request to be informed of the appropriate safeguards pursuant to Article 46 GDPR related to the transfer.

2. Right to Rectification

   You have the right to request the correction or completion of inaccurate or incomplete personal data concerning you from the controller. The controller must carry out the rectification without undue delay.

3. Right to Restriction of Processing

   Under the following conditions, you can request the restriction of the processing of personal data concerning you:
   

   • If you contest the accuracy of the personal data concerning you for a period that allows the controller to verify its accuracy
   • If the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of its use
   • If the controller no longer needs the personal data for processing purposes, but you need it to establish, exercise, or defend legal claims
   • If you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller’s legitimate reasons override yours

   If processing of your personal data has been restricted, this data – apart from storage – may only be processed with your consent, for the assertion, exercise, or defense of legal claims, for the protection of another natural or legal person’s rights, or for reasons of significant public interest of the Union or a Member State. If the restriction of processing has been lifted, you will be informed by the controller in advance.

4. Right to Erasure
   • Obligation to delete
     You can request the controller to delete your personal data without undue delay, and the controller is obliged to delete this data without undue delay if one of the following reasons applies:
     
     • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed
     • You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing
     • You object to processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate reasons for processing, or you object to processing pursuant to Article 21(2) GDPR
     • Your personal data has been unlawfully processed
     • The deletion of your personal data is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject
     • The personal data concerning you was collected in relation to information society services offered in accordance with Article 8(1) GDPR
   • Notification to third parties

     If the controller has made the personal data concerning you public and is obliged to delete it under Article 17(1) GDPR, the controller shall take appropriate measures, including technical measures, considering available technology and implementation costs, to inform data processors that you have requested the deletion of all links to this personal data or copies or replications of this personal data.

   • Exceptions

     The right to erasure does not apply where processing is necessary:

     • To exercise the right to freedom of expression and information
     • To comply with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller
     • For reasons of public interest in the field of public health as per Article 9(2)(h) and (i) and Article 9(3) GDPR
     • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes per Article 89(1) GDPR, where the right to erasure would likely render impossible or seriously impair the achievement of the objectives of such processing
     • To assert, exercise, or defend legal claims
5. Right to Notification

   If you have exercised your right to rectification, erasure, or restriction of processing, the controller must notify all recipients to whom your personal data has been disclosed of these changes, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

6. Right to Data Portability

   You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the data was provided, provided that:
   

   • The processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
   • The processing is carried out by automated means
7. Right to Object

   You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

   The controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing is for the assertion, exercise, or defense of legal claims.

8. Right to Lodge a Complaint with a Supervisory Authority

   Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

Embedded Videos on This Website

On our website, we embed videos that are not stored on our servers. To ensure that accessing our webpages with embedded videos does not automatically result in third-party content being loaded, we initially display only locally stored preview images of the videos. This prevents the third-party provider from receiving any information.

Only after clicking on the preview image will third-party content be loaded. As a result, the third-party provider receives information that you have accessed our website, along with the technically necessary usage data. Additionally, the third-party provider may implement tracking technologies. We have no influence over further data processing by the third-party provider. By clicking on the preview image, you give us your consent to load third-party content.

Embedding is based on your consent in accordance with Article 6(1)(a) of the GDPR, provided you have given your consent by clicking on the preview image. Please note that embedding many videos may result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access your data for security and surveillance purposes without informing you or allowing you to take legal action. If we use providers in insecure third countries and you give your consent, the data transfer to an insecure third country takes place based on Article 49(1)(a) of the GDPR.