1. On what basis do we process your personal data (purpose of processing and legal basis)?
We process personal data based on the data protection provisions of the General Data Protection Regulation (GDPR) and the Thuringian Data Protection Act (ThürDSG). These allow data processing within the framework of Art. 6 Para. 1 GDPR:
Processing is only lawful if at least one of the following conditions is met:
a.) The data subject has given their consent to the processing of their personal data for one or more specific purposes;
b.) the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject;
c.) processing is necessary to fulfill a legal obligation to which the controller is subject;
d.) the processing is necessary to protect the vital interests of the data subject or another natural person;
e.) processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been assigned to the person responsible;
f.) processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject that require the protection of personal data outweigh them, especially if the data subject is concerned a child acts.
Letter f does not apply to the processing carried out by authorities in the performance of their duties.
If you have given us your consent to the processing of personal data, you can revoke it at any time.
This also applies to the revocation of declarations of consent that were issued before the entry into force of the GDPR, i.e. before May 25, 2018. The withdrawal of consent takes effect from the time of the withdrawal and for the future. The revocation does not affect the legality of the data processed until the revocation.
2. What sources and data do we use?
In addition to data collected directly from the data subject, we also process personal data that we determine as part of our sovereign activity or that we receive from our contractual partners or other data subjects as part of our contractual relationships. In addition, we process - insofar as this is necessary for the provision of our service - personal data that we obtain from publicly accessible sources (e.g. debtor lists, land registers, commercial and association registers, press, internet) or that we receive from other authorities or other third parties (e.g. one Credit reporting agency).
Which data is collected depends on the respective administrative activity.
3. Who gets my data?
Within the city administration of Bad Langensalza, those offices who have access to your data to fulfill their legal and contractual obligations are given access. Service providers and vicarious agents employed by us can also receive data for these purposes.
We may only pass on personal data if this is required by law or if the person concerned has given his consent. Under these conditions, recipients of personal data can be, for example:
- Public bodies and institutions (e.g. state and federal authorities, Unstrut-Hainich district, financial authorities, law enforcement authorities, courts, cadastral offices)
- Creditors or liquidators in the context of an execution
- Funding agencies within the framework of the approval of state funding programs, e.g. B. State Administration Office,
- Federal and state statistical offices
- Integration offices, social welfare offices, job centers, employment offices, company doctor, public health officer, health authorities,
- Service provider, within the framework of order processing relationships
Other data recipients may be those for which you have given us your consent to the transfer of data or for which you have released us from data secrecy in accordance with an agreement or consent or to whom we are authorized to transfer personal data on the basis of a balancing of interests.
4. Is data transferred to a third country or to an international organization?
A data transfer to places in countries outside the European Union (so-called third countries) takes place, if so
- it is required by law (e.g. tax reporting requirements) or
- You have given us your consent.
5. How long is the data stored?
We process and store your personal data as long as this is necessary for the fulfillment of our legal and contractual obligations. It should be noted that in some cases our business relationship is a long-term debt relationship that is set up for years (e.g. rental, lease and loan agreements, employment contracts or service and maintenance contracts).
If the data is no longer required for the fulfillment of contractual or legal obligations, it will be deleted.
6. What data protection rights do I have?
Every data subject has the right to information under Article 15 GDPR, the right to rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to Article 18 GDPR, the right to object from Article 21 GDPR as well as the right to data portability from Article 20 GDPR. In addition, there is a right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 8 of the Thuringia Act). The responsible data protection supervisory authority is the Thuringian State Commissioner for Data Protection and Freedom of Information.
7. Is there an obligation for me to provide data?
You only have to provide personal data if you are obliged to do so due to a legal provision (e.g. a law, a legal ordinance or a municipal statute).
As part of the conclusion of contracts that you conclude with the city of Bad Langensalza, you must provide the personal data that is necessary for the establishment, implementation and termination of a business relationship and for the fulfillment of the associated contractual obligations or to which we are legally obliged to collect are. Without this data, we will not be able to conclude, execute and terminate a contract with you.
8. To what extent is there automated decision making?
The municipality of Bad Langensalza currently does not use fully automated decision-making in accordance with Article 22 GDPR.
9. Does profiling take place?
We do not process any of your data automatically with the aim of evaluating certain personal aspects (profiling). Profiling does not take place with us.
10.Duty to provide information within the framework of the GDPR
Questions about data protection
If you still have questions about data protection, please contact our data protection officer directly:
Frau Ines Metzger
Tel.: 03603/859310
Mail: datenschutz(at)bad-langensalza.de