§1 Information on the collection of personal data
(1) In the following, we provide information on the collection of personal data when using our website. Personal data are any information that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The person responsible in accordance with Article 4, paragraph 7 of the EU General Data Protection Regulation (GDPR) is Landeshauptstadt München (Referat für Stadtplanung und Bauordnung, Blumenstraße 28b, 80331 München (see our imprint)).
Our Data Protection Officer can be contacted at:
Landeshauptstadt München
Behördlicher Datenschutzbeauftragter
Burgstr. 4
80331 München
E-mail: datenschutz@muenchen.de
(3) When you contact us by e-mail, the data you provide (your e-mail address, your name and your telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after data retention is no longer necessary or restrict data processing if there are legal data retention obligations.
(4) In case we commission service providers for individual functions of our services, we will inform you in detail about the relevant processes below. In doing so, we will also state the criteria specified for the retention period.
(5) General information on consents
If you have given us your consent to process personal data for specific, additional purposes (e.g. transmission of location data), data processing will be based upon this consent. Details relating to the content of the consent are made available when requesting your consent.
§2 Your rights
(1) You have the following rights with respect to your personal data:
(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
§3 Collection of personal data when visiting our website
(1) If you use the website for informational purposes only, i.e. if you do not register or otherwise transfer information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis is Article 6 para. 1 sentence 1 lit. f GDPR):
(1) In the following, we provide information on the collection of personal data when using our website. Personal data are any information that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The person responsible in accordance with Article 4, paragraph 7 of the EU General Data Protection Regulation (GDPR) is Landeshauptstadt München (Referat für Stadtplanung und Bauordnung, Blumenstraße 28b, 80331 München (see our imprint)).
Our Data Protection Officer can be contacted at:
Landeshauptstadt München
Behördlicher Datenschutzbeauftragter
Burgstr. 4
80331 München
E-mail: datenschutz@muenchen.de
(3) When you contact us by e-mail, the data you provide (your e-mail address, your name and your telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after data retention is no longer necessary or restrict data processing if there are legal data retention obligations.
(4) In case we commission service providers for individual functions of our services, we will inform you in detail about the relevant processes below. In doing so, we will also state the criteria specified for the retention period.
(5) General information on consents
If you have given us your consent to process personal data for specific, additional purposes (e.g. transmission of location data), data processing will be based upon this consent. Details relating to the content of the consent are made available when requesting your consent.
§2 Your rights
(1) You have the following rights with respect to your personal data:
- right to information,
- right of correction or deletion,
- right to restrict processing,
- right to object to the processing,
- right of data portability.
(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
§3 Collection of personal data when visiting our website
(1) If you use the website for informational purposes only, i.e. if you do not register or otherwise transfer information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis is Article 6 para. 1 sentence 1 lit. f GDPR):
- IP address
- location data
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (concrete page)
- access status/HTTP status code
- amount of data transmitted in each case
- website from which the request is received
- browser
- session storage
- operating system and its interface
- language and version of the browser software.
§4 Further functions and offerings of our website
(1) In addition to the mere informational use of our website, we offer various services which you may use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases we use external service providers to process your data. They were carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you of the consequences thereof in the service description.
§4a Objection against or revocation of the processing of your data
(1) If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation will affect the lawfulness of processing your personal data once you have expressed it to us.
(2) Insofar as we base the processing of your personal data on a weighing of interests, you may object to the processing. This is the case if the processing is above all not necessary for the fulfilment of a contract with you, which is explained in the description of the relevant functions. In the event of such an objection, we will ask you to explain the reasons why we should not process your personal data as we have done. If your objection is justified, we will examine the facts of the case and will either stop or adapt the processing of your data or inform you on our compelling legitimate reasons for continuing the processing.
(3) Of course, you may object to the processing of your personal data for the purposes of data analysis at any time. You may inform us of any such objection using the contact details given in § 1.
§5 Hosting
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online service.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online service on the basis of our legitimate interests in an efficient and secure provisioning of this online service in accordance with Article 6 paragraph 1 letter f GDPR in conjunction with Article 28 GDPR (conclusion of Data Processing Agreement).
Your personal data is stored by our service provider Portal München on a specially protected server in Germany. We take all necessary technical and organisational security measures to store your personal data in such a way that they are protected against unauthorised access and misuse.
§6 Web analysis through etracker
(1) Our website uses the etracker analysis service. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. User profiles can be created from the data using pseudonymisation. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of your Internet browser. These cookies make it possible to recognise your browser when you visit the website again. The data collected using etracker technologies will not be used to personally identify visitors to our website without the express consent of the data subject and will not be combined with any personal data of the pseudonym holder.
(2) You may object to the collection and storage of data at any time for future effect. In order to object to the future collection and storage of your visitor data, you may obtain an opt-out cookie from etracker by clicking on the following link. This will ensure that no visitor data from your browser will be collected and stored by etracker in the future: (http://www.etracker.de/privacy?et=PEgpys).
An opt-out cookie called "cntcookie" is then set by etracker. Please do not delete this cookie as long as you wish to maintain your opt-out. For further information please refer to the etracker privacy policy: (https://www.etracker.com/datenschutz/)
§7 Amendments to the data privacy statement
We reserve the right to adapt this data privacy statement from time to time to always comply with current legal requirements or to implement changes to our services specified in the data privacy statement, e.g. when launching new services. The new privacy policy will then be applicable at your next visit.
As of: October 2020