Privacy policy

Privacy policy and information on the GDPR

Data protection is an important concern for the Bad Tölz-Wolfratshausen District Office. We therefore also attach great importance to data-saving and citizen-friendly data processing when processing personal data in connection with the fulfillment of our tasks.

This data protection declaration also relates to the processing of personal data and information within the meaning of Section 25 TDDDG within the scope of this website, including the services offered there (online services within the scope of OZG implementation).

Name and contact details of the controller

Bad Tölz-Wolfratshausen District Office
Prof.-Max-Lange Platz 1
83646 Bad Tölz
Phone: 08041/505-0
E-mail: info@lra-toelz.de 

Contact details of the data protection officer

You can reach our data protection officer at:

Thomas Schallhammer

Bad Tölz-Wolfratshausen District Office
Prof.-Max-Lange-Platz 1
83646 Bad Tölz
E-mail: datenschutzbeauftragter@lra-toelz.de
Phone +49 8041 505-263

Purposes and legal bases for the processing of personal data

The purpose of the processing is to fulfill the public tasks assigned to us by law.

Unless otherwise stated, the legal basis for the processing of your data results from Art. 4 para. 1 of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 para. 1 subpara. 1 letter e of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data required to fulfill a task incumbent upon us.

If you have consented to processing, the data processing is based on Art. 6 para. 1 subpara. 1 letter a GDPR.

Recipients of personal data

Insofar as your data is processed electronically, the technical operation of our data processing systems is carried out by the

Bad Tölz-Wolfratshausen District Office
Prof.-Max-Lange Platz 1
83646 Bad Tölz

Phone: 08041/505-0
E-mail: info@lra-toelz.de

There are contracts for commissioned data processing with third-party providers for specialist applications and online services. Details can be found in the information notes on the corresponding process.

If necessary, your data will be transmitted to the responsible supervisory and auditing authorities to exercise the respective control rights.

Log data may be forwarded to the State Office for Information Security on the basis of Art. 44 BayDiG in order to prevent threats to information security (for more details, see "Logging").

Duration of storage of personal data

We store your data as long as this is necessary for the fulfillment of the task, for documentation obligations or due to legal retention periods.

Rights of the data subject

If we process your personal data, you have the following rights as a data subject:

• You can request information as to whether we process your personal data. If this is the case, you have a right to information about this data and to further information related to the processing (Art. 15 General Data Protection Regulation - GDPR). Please note that this right to information may be restricted or excluded in certain cases (see in particular Art. 10 of the Bavarian Data Protection Act - BayDSG). In the event that personal data about you is not (or no longer) accurate or incomplete, you can request that this data be corrected and, if necessary, completed (Art. 16 GDPR).
• If the legal requirements are met, you can request the erasure of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR). However, the right to erasure pursuant to Art. 17 (1) and (2) GDPR does not apply if, among other things, the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 17 (3) (b) GDPR).
• If you have consented to the processing and the processing is based on this consent, you can revoke your consent at any time for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this.
• For reasons arising from your particular situation, you can also object to the processing of your personal data by us at any time (Art. 21 GDPR). If the legal requirements are met, we will then no longer process your personal data.

Further restrictions, modifications and, where applicable, exclusions of the aforementioned rights may result from the General Data Protection Regulation or national legislation.

More detailed information on these rights can also be obtained from our official
data protection officer.

Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection
. You can reach him under the following contact details:

Postal address: P.O. Box 22 12 19, 80502 Munich
Address: Wagmüllerstraße 18, 80538 Munich
Phone: 089 212672-0
Fax: 089 212672-50

Online message https://www.datenschutz-bayern.de/service/complaint.html 

Technical implementation

Our web server is operated by Chamaeleon Aktiengesellschaft. Personal data is processed by Chamaeleon exclusively in the context of editorial work by employees of the District Office.

Name and contact details of the position:

Chamaeleon Aktiengesellschaft
for innovative network solutions
Robert-Bosch-Straße 12/IV
D - 56410 Montabaur
Phone +49 (2602) 10169-0
Fax +49 (2602) 10169-101

Email: info@chamaeleon.de
Internet: www.chamaeleon.de

Logging

When you access this or other Internet pages, you transmit data to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status (e.g. file transferred, file not found)
• Web browser and operating system used
• Complete IP address of the requesting computer
• Amount of data transferred

We store this data for reasons of technical security, in particular to defend against attempted attacks on our web server. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to individual users.

This data is forwarded to the State Office for Information Security on the basis of 44 BayDiG in order to prevent threats to information security.

Secure data transmission

When you access this website, we offer a connection encrypted with HTTPS and Perfect Forward Secrecy using the TLS 1.3 encryption protocol, so that your data is protected from third parties during data transmission. We recommend that you keep your Internet browser up to date in order to use this option.

Cookies

We use cookies to ensure the correct technical and functional provision of this information service. Cookies are small text files that are stored on the device you are using.

The legal basis for the storage of information and the processing of personal data using cookies is § 25 TDDDG.

The use of functional cookies is voluntary. If these cookies are blocked, the provision of certain functions may not be fully possible.

Technically necessary cookies are only valid for the current session and are automatically deleted as soon as you close your browser.

The following data is stored and processed in the cookies:

• Language settings
• Log-in information
• Consent to the display of map services
• Consent to YouTube videos
• Consent to the display of integrated data from a third-party provider

You can adjust your cookie settings on this page. Consent to the display of hidden content on the respective page itself. Alternatively, you can use the functions of your Internet browser.

Active components

Active components such as Javascript, Java applets or Active-X controls are used in the information provided. You can disable this function by changing the settings in your Internet browser.

Integration of YouTube videos

Videos from the external video platform YouTube are embedded on our website. By default, these are provided with a security notice so that they do not establish an automated connection with YouTube's servers. This means that the operator does not receive any data from the user when the web pages are accessed.

You can decide for yourself whether the YouTube videos should be activated. Only when you allow the videos to be played by clicking on "One-time activation" or "Permanent activation" do you give your consent for the necessary data (including the Internet address of the current page and your IP address) to be transmitted to the operator.

In order to save your desired setting, we set a cookie that saves the parameters. When these cookies are set, however, we do not store any personal data; they only contain anonymized data for browser customization. The videos are then active and can be played by the user. If you would like to deactivate the automatic loading of YouTube videos again, you can uncheck the consent box under the data protection symbol. This will also update the cookie settings.

YouTube is a service provided by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Further information on the purpose and scope of data processing (including outside the European Union and outside the USA) and information on setting options to protect your privacy can be found in the privacy policy: https://policies.google.com/privacy?hl=de&gl=de. Google processes your personal data in the USA, among other places.

Integration of an iFrame for tenders

An iFrame from the service provider Aumass is integrated on our website. This is hidden by default. You can decide on the page whether you want to display this content once or permanently.

Integration of further active components for online services

The online services for the residence permit are technically integrated into the website as external content.

Collection of further data

If you enter personal or business data (e-mail addresses, names, addresses, etc.) on our website, these will be used exclusively for sending the requested information or for the purposes stated in the form. Your data is encrypted in transit using software (SSL) and is protected against access by third parties. The data will not be passed on to third parties. The use of the services offered there is on a voluntary basis.

When ordering publications, your contact details will only be processed for the purpose of sending you the ordered publications. Your data will be deleted at the latest one year after the order.

Electronic mail (e-mail)

Information that you send to us unencrypted by electronic mail (e-mail) may be read by third parties during transmission. As a rule, we are also unable to verify your identity and do not know who is behind an e-mail address. Legally secure communication by simple e-mail is therefore not guaranteed. Like many e-mail providers, we use filters against unwanted advertising ("SPAM filters"), which in rare cases automatically classify normal e-mails as unwanted advertising and delete them. E-mails containing harmful programs ("viruses") are automatically deleted by us in all cases.

If you wish to send us messages that require protection, we recommend using our secure contact form. Further options can be found in the information on electronic communication.

Applications

The personal data sent by applicants is processed for the purpose of handling the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents electronically, for example via a secure contact form. If an employment relationship is established with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. In addition, data may be transmitted to other authorities(e.g. the government of Upper Bavaria) or to authorities responsible for handling the employment relationship(e.g. the government of Upper Bavaria) during the application and recruitment process. If no employment relationship is established, the application documents will be deleted after notification of the rejection decision in accordance with the relevant regulations, provided that no other legitimate interests prevent deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

events

The Bad Tölz-Wolfratshausen District Office is the organizer or co-organizer of events. For this purpose, we process personal data (name, contact details, etc.) of the participants on the basis of Art. 4 para. 1 BayDSG in conjunction with Art. 6 para. 1 subpara. 1 letter e GDPR.

Where does this data come from?

We collect the data from generally accessible sources (e.g. newspapers or publications on the Internet), directly from the participants of the events (e.g. by providing a form, by e-mail or by telephone) or receive it from other public or non-public sources.

What happens to the data?

The data is processed for the preparation and implementation of the respective events (e.g. creation of guest lists and enabling access controls).

Depending on the type of event, the Bad Tölz-Wolfratshausen District Office may act as co-organizer alongside another cooperation partner. In these cases, the data collected will be transmitted to this cooperation partner or, if applicable, to an external service provider, who may also only use the data for the proper execution of the event.

The data is deleted when it is no longer required to fulfill the tasks of the LRA TÖL, but at the latest after 30 years.

Photo and video recordings, participation of media representatives

Photos and possibly videos are taken at our events, which are used for public relations work by the press and public relations department. Media representatives are also present at some events.

Your rights

You are entitled to the rights described above (see "Rights of the data subject").

However, if you object to the processing of your data, you may not be able to participate in the event.

Irrespective of this, you have the right to object to the publication of photos or videos in which you are recognizable. To object, please contact the inviting body.

Preparation and implementation of awards and honors

The Bad Tölz-Wolfratshausen District Office is the organizer or co-organizer of events at which people are awarded or presented with awards or honors for special services. We are also involved in reviewing proposals for awards and honors from other government agencies.

For this purpose, we process personal data of the persons to be honored (name, contact details, reason for the award, etc.) on the basis of Art. 27 BayDSG.

Where does the data come from?

We receive the data from other public or non-public bodies or persons or collect it from publicly accessible sources (e.g. from newspapers or publications on the Internet). We also collect some data directly from the persons to be honored (e.g. by providing a form, by e-mail or by telephone).

What happens to the data?

The data is processed for the purpose of reviewing award proposals and for the preparation and implementation of the respective events.

Depending on the award or honor, the data may also be transmitted to members of the state government, members of parliament, local elected officials, cooperation partners and external service providers.

As part of the public relations work, data of the honored persons and the respective award or honor may be published on the website of the Bad Tölz-Wolfratshausen District Office and transmitted to the media for publication.

The data will be deleted when it is no longer required to fulfill the tasks of the Bad Tölz-Wolfratshausen District Office.

Photo and video recordings, participation of media representatives

Photos and possibly videos are taken at our events, which are used for public relations work and possibly by co-organizers. Media representatives are usually also present at the events.

Your rights

If you do not wish your personal data to be processed, please let us know. In this case, however, participation in the event may not be possible.

Regardless of this, you have the right,

• the publication of your award or honor as part of the public relations work of the LRA TÖL and, if applicable, of co-organizers,
• the publication of photos or videos in which you are recognizable, and
• if applicable, notification of your award or honor to members of the state government, members of parliament and local elected officials for congratulatory purposes

to object. To object, please contact the inviting body.

Further information on the privacy policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements.

Information on the GDPR

You will be informed of the following by the various information notices of the respective IT procedures used by us:

• Contact details of the controller and the data protection officer,
• Purpose and legal basis of data processing,
• Recipient of the personal data,
• Information on whether personal data is transferred to a third country,
• deadlines for the deletion of the data categories,
• what rights you have under the GDPR,
• Right to withdraw consent to the collection of data,
• whether you are legally obliged to provide your data, or if you are not legally obliged, what the consequences are if you do not provide the required data.