Data protection statement
The following Data Protection Statement applies to the use of our online content www.annaberg-buchholz.de (hereinafter referred to as "Website") including the forms provided online by the town of Annaberg-Buchholz.
We attach great importance to privacy. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data in order to offer you the above-mentioned portal. This statement describes how and for what purpose your data is collected and used and what options you have with regard to personal information.
By using this website, you consent to the collection, use and transfer of your data in accordance with this Data Protection Statement.
The controller responsible for the collection, processing and use of your personal data within the meaning of Article 4 (7) GDPR is the
Stadt Annaberg-Buchholz, Markt 1, D-09456 Annaberg-Buchholz
Tel: 03733 425-0
E-mail: buergerzentrum@annaberg-buchholz.com
If you wish to object to the collection, processing or use of your data by us in accordance with these data protection regulations as a whole or with regard to individual measures, you can address your objection to the Controller.
You can save and print out this Data Protection Statement at any time.
2 General use of the website
The hosting services we use serve the purpose of providing the following services: infrastructure and platform services, computing capacity, disk space and database services, securities and the technical maintenance services we use to operate the site.
In the process, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, the meta and communication data of customers, interested parties and visitors to this Website on the basis of our legitimate interests in the efficient and secure provision of this Website in accordance with Art. 6 (1) sentence 1 f) GDPR in conjunction with Art. 28 GDPR.
We collect data about you when you use this website. We automatically collect data about your usage and interaction with us and register data about your computer or mobile device. We collect, store and use data about every case of access to our Website (so-called server log files). Access data include:
• Name and URL of the retrieved file
• Date and time of your visit
• Amount of data transferred
• Report on successful retrieval (HTTP response code)
• Browser type and browser version
• Operating system used
• Referrer URL (i.e. the page previously visited)
• Websites that are accessed by the user's system through our website
• User's Internet service provider
• IP address and the requesting provider
We use these log data without assigning them to you or drawing up any other kind of profile for statistical evaluations regarding the purpose of the operation, the safety and the optimisation of our Website, but also for the anonymous registration of the number of visitors to our website (traffic) as well as for information regarding the extent and type of use of our website and services, and, for billing purposes, to record the number of clicks received by cooperation partners. On the basis of this information, we can provide personalised and location-based content, analyse traffic, troubleshoot and improve our services.
Our legitimate interest in accordance with Art. 6 (1) sentence 1 f) GDPR also lies in these purposes.
We also reserve the right to check the log data later if, on the basis of concrete evidence, the legitimate suspicion of unlawful use or a specific attack on the pages exists. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision of services or the billing of a service, e.g. if you make use of one of our offers. After the order process has come to an end or after payment has been received, we will delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of a crime in connection with the use of our website. Moreover, as part of your account, we save the date of your last visit (e.g. when registering, logging in, clicking links, etc.).
We use so-called session cookies to optimise our website. A session cookie is a small text file that is sent by the respective servers when visiting a website and stored on your hard disk. As such, this file contains a so-called session ID, which can be used to assign various requests from your browser to the shared session. This will allow your computer to be recognised when you return to our website. Session cookies are deleted when you close your browser.
We also use, to a small extent, persistent cookies (also small text files stored on your device) that remain on your device and allow us to recognise your browser the next time you visit our website. These cookies are stored on your hard drive and are automatically deleted after the prescribed time. Their lifespan is between 1 month and 10 years. This will enable us to present our Website in a more user-friendly, effective and secure way, and to show you, for example, information on the page that is tailored to your interests.
Our legitimate interest in the use of cookies in accordance with Article 6 (1) sentence 1 f) of the GDPR serves to make our website more user-friendly, effective and secure.
The cookies store the following data and information:
• Log-in information
• Language settings
• Search terms entered
• Information about the number of visits to our website and the use of individual functions of our website.
If the cookie is activated, it will be assigned an ID number and your personal data will not be assigned to this ID number. Your name, IP address or similar data that would allow the cookie to be associated with you will not be included in the cookie. On the basis of cookie technology, we only receive pseudonymous information about, for example, which pages of our shop were visited, which products viewed, etc.
You can set your browser so that you are informed in advance about the setting of cookies and can decide, on a case-by-case basis, whether you want to exclude the acceptance of cookies for specific cases or in general or to prevent cookies completely. Disabling cookies may limit the functionality of this website.
If you contact us (e.g. using our contact form or by e-mail), we will save your details in order to process the request as well as to handle any follow-up questions that may arise. Our legitimate interest in accordance with Art. 6 (1) sentence 1 f) GDPR also lies in these purposes. We store and use other personal data only if you consent to this or if this is permitted by law without special consent being necessary.
2.5 Automatic logging – Matomo
This website uses Matomo, open source software for the statistical analysis of visitor access. Matomo uses so-called "cookies", which are text files stored on your computer and which enable the website to analyse how users use the site. The information generated by the cookie about your use of this website is, as a rule, stored by servers of the provider in Germany. The IP address is anonymized immediately after processing and prior to being stored. You may refuse the installation of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website.
Unless specifically stated, we store personal data only as long as is necessary to fulfil the purposes pursued.
3 Processing of inventory data
Furthermore, we process the inventory data described below:
In order to be able to send you our newsletter, we use the so-called double opt-in procedure. Only if you have previously expressly confirmed to us that you wish to receive the newsletter will we send you an activation e-mail and ask you to confirm, by clicking on a link contained in this e-mail, that you would like to receive our newsletter.
You may cancel your registration at any time, without incurring any costs, other than the transmission costs in accordance with the basic rates. A message in text form addressed to the contact details referred to in point 1 (e.g. e-mail, fax, letter) is sufficient. You will, of course, also find an unsubscribe link in every newsletter.
Basically, you can use our website to provide us with information without giving us any of your personal details. Moreover, you can become active yourself and save texts on this website, e.g. by writing posts, comments or concerns. In order to do this, you must enter your e-mail address. If such data is collected, stored or used, e.g. in the context of an attachment (notification of defects), this is done on the basis of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and other statutory provisions. Any further use of the data is carried out exclusively within the scope of our authority for processing and remedying the facts provided. Since we publish texts and photos, it is not necessary to provide any personal data in these input fields. Your e-mail address will not be published.
The website of the town of Annaberg-Buchholz provides the public with the contact details of various clubs and associations. Clubs can register voluntarily by giving the club name and the following personal data of the contact persons:
name, first name, street, postcode, town, e-mail, telephone, fax.
By registering, the user agrees to the processing and publication of the data he or she has entered. We assure you that your data will be stored solely for the purpose stated above; they will not be passed on to third parties and they will be protected in accordance with the GDPR.
3.4 Dealing with the authorities online/forms
You can already handle various administrative procedures online via the town's website. The extent of the personal data requested on application may vary. These data may be required by law.
If you do not provide the data required, it may not be possible to process your request. In certain cases, this may also result in disadvantages. The purpose of processing your data can be found in the relevant application form.
3.5 Legal bases and storage duration
The legal basis of the data processing in accordance with the preceding paragraphs is Art. 6 (1) sentence 1 a) to f) GDPR, possibly in conjunction with special statutory provisions.
Unless specifically stated, we store personal data only as long as is necessary or legally required to fulfil the purposes pursued.
4 Your rights as data subject
In accordance with applicable law, you have various rights with regard to your personal data. If you would like to assert these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address specified in Section 1.
Below is an overview of your rights.
4.1 Right to confirmation and information
You have the right, at any time, to receive confirmation from us as to whether personal data relating to you are being processed (Art. 15 GDPR). If this is the case, you have the right to ask us, free of charge, for information about the personal data relating to you that are stored, along with a copy of these data. Furthermore, you have a right to the following information:
- the purposes of the processing;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular recipients in third countries or international organisations;
- if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria determining that duration;
- the existence of a right to rectification or erasure of the personal data concerning you or to a restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data are not gathered from you, all the information available about the source of the data;
- the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the implications and consequences of such processing for you.
If personal data are transmitted to a third country or to an international organisation, you have the right to be informed about the appropriate guarantees under Art. 46 GDPR in connection with the transfer.
4.2 Right to rectification
You have the right to demand immediate rectification of incorrect personal data relating to you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of the provision of a supplementary statement.
4.3 Right to erasure ("right to be forgotten")
In accordance with Art. 17 (1) GDPR, you have the right to ask us to delete your personal data without delay and we are obliged to delete your personal data at once if one of the following reasons applies:
- The personal data are no longer required for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based on Art. 6 (1) sentence 1 a) GDPR or Art. 9 (2) a) GDPR, and there is no other legal basis for the processing.
- You object to the processing in accordance with Art. 21 (1) GDPR and there are no prior overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- Your personal data have been processed unlawfully.
- The deletion of personal data is required in order to fulfil a legal obligation under Union or the national law to which we are subject.
- The personal data were collected with regard to the services offered by the information society in accordance with Art. 8 (1) GDPR.
If we have made the personal data publicly available and if we are obliged to delete it in accordance with Art. 17 (1) GDPR, then, taking into account the technology available and the implementation costs ,we shall take appropriate measures, including technical ones, in order to inform the data controllers who process the personal data that you have requested the deletion of any links to such personal data or copies or replications of such personal data.
4.4 Right to restriction of processing
You have the right to require us to restrict the processing if any of the following conditions apply:
- the accuracy of your personal data is contested by you for a period of time that enables us to verify the accuracy of your personal data.
- the processing is unlawful and you have refused to delete the personal data and have instead requested the restriction of the use of your personal data;
- we no longer need your personal data for the purposes of processing, but you require the information to assert, exercise or defend your rights, or
- you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR, as long as it is not certain whether the legitimate reasons of our company outweigh yours.
4.5 Right to data portability
You have the right to receive the personal data you have provide to us in a structured, common and machine-readable format, and you have the right to submit these data to another controller without hindrance, provided that
- the processing is based on Art. 6 (1) sentence 1 a) GDPR or Article 9 (2) a) GDPR or on a contract in accordance with Article 6 (1) sentence 1 b) GDPR and:
- the processing takes place by means of automated processes.
In exercising your right to data portability in accordance with paragraph 1, you also have the right that the personal data relating to you be transmitted by us direct to another controller, insofar as this is technically feasible.
You have the right to object, at any time, for reasons arising from your particular situation, to the processing of personal data concerning you pursuant to Article 6 (1) sentence 1 e) or f) GDPR; this also applies to any profiling based on these provisions. We will no longer process personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
You have the right, for reasons arising from your particular situation, to object to the processing of personal data relating to you for scientific or historical research purposes or for statistical purposes under Article 89 (1) of the GDPR unless the processing is required to fulfil a public interest task.
4.7 Automated decision-making including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have a legal impact on you or that will adversely affect you in a similar manner.
No automated decision-making based on the personal data collected takes place.
4.8 Right to revoke your declaration of consent relating to data protection
You have the possibility, at all times, to revoke your consent to the processing of your personal data.
4.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data violates the GDPR.
We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities. Your personal data is sent via an encrypted connection. We use the SSL (Secure Socket Layer) coding system, but we must point out that data transmission over the Internet (e.g. when communicating by e-mail) may have involve gaps in security. Complete protection of the data from third-party access is not possible. To safeguard your data, we undertake technical and organisational security measures in accordance with Art. 32 GDPR, which we always adapt to ensure that they are in line with state-of-the-art technology. We also do not guarantee that our Website will be available at specific times; disturbances, interruptions or failures cannot be excluded. The servers we use are regularly and carefully backed up.
6 Transfer of data to third parties, no data transfer to non-EU countries
Basically, we only use your personal data within the scope of our administrative authority.
In the event that we outsource certain parts of the data processing ("order processing"), we contractually obligate the processors to use personal data only in accordance with the requirements of data protection laws and to ensure the safeguarding of the data subject's rights.
Any data transmission to agencies or persons outside the EU beyond the cases mentioned in this declaration in Section 2 does not take place and is not planned.
The pages of the administration portal contain links (branches) to other websites. Such links are recognisable by certain symbols and, usually, by the explicitly displayed Internet address. When activating external links, a new browser window is opened if the user has activated JavaScript. The town of Annaberg-Buchholz assumes no responsibility for the content of other websites that are accessed via links from the administration portal. The links are only cursorily checked and evaluated when they are integrated into the Website. Continuous examination of the contents is neither intended nor possible.
7 Data Protection Officer
Should you have any questions or concerns about data protection, please contact our Data Protection Officer
Stadt Annaberg-Buchholz
Datenschutzbeauftragter
Markt 1
D-09456 Annaberg-Buchholz
Tel.: 03733-425 210
E-mail: datenschutzbeauftragter@annaberg-buchholz.de