Protecting your personal data
Data protection statement
1. Name and address of the responsible party:
The responsible party for the purposes of the General Data Protection Regulation, other national data protection laws and other data protection regulations is:
Stadtwerke Weiden i.d.OPf.
Anstalt des öffentlichen Rechts
92637 Weiden i.d.OPf.
Telephone: 0961 67 13 800
Fax: 0961 67 13 870
2. Data protection officer
The data protection officer for Stadtwerke Weiden i.d.OPf. is Mr. Tobias Schmauß.
3. General information on data processing
3.1. Description of data processing
We collect and use the personal data of our users only if this is necessary to provide a functioning website as well as our content and services. Personal data of our users is collected and used only if the user has given his or her consent. An exception is when such prior consent cannot be obtained for factual reasons and we are permitted by law to process the data.
In certain cases, the provision of personal data is required by law (e.g. tax regulations) or contractual regulations (e.g. details of a contractual partner). When a contract is concluded, a person involved may need to provide us with personal data, which we will then process. For example, the person concerned must provide us with personal data if our company concludes a contract with that person. Failure to provide the personal data would prevent the contract being concluded.
It is possible to use our website without having to provide personal data. However, it may be necessary to process personal data if a person concerned would like to use special services provided by our company via a website. If personal data needs to be processed and there is no legal basis for such processing, we always obtain the consent of the person concerned.
3.2. Legal basis for processing data
If we obtain consent from the person concerned to process his or her personal data, the legal basis for that is laid down by Article 6 (1) point (a) of the EU General Data Protection Regulation (GDPR).
The legal basis for processing personal data required in order to perform a contract to which the person concerned is a party is Article 6 (1) point (b) GDPR. That also applies to processing activities required to take steps prior to entering into a contract.
If processing of personal data is necessary for compliance with a legal obligation on the part of our company, the legal basis for that is Article 6 (1) point (c) GDPR.
If the processing of personal data is necessary in order to protect a legitimate company interest or the interest of a third party, and the interests, basic rights and fundamental freedoms of the person concerned do not outweigh the interest mentioned first, Article 6 (1) point (f) GDPR shall serve as the legal basis for processing.
3.3 Erasure and duration of storage
The personal data of the person concerned shall be erased or blocked as soon as the purpose for which it has been stored no longer applies. The data can also be stored if this is envisaged by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased when a period of time prescribed for its storage under the above legal provisions expires, unless it is necessary for the data to continue to be stored so that a contract can be concluded or performed.
3.4 Your data protection rights
When the legal conditions apply, you have the following rights pursuant to Articles 15 to 22 GDPR:
The right to obtain information, to be given notification, to have data erased, to restrict processing and the right to data portability. In accordance with Article 13 (2b) in conjunction with Article 21 GDPR, you have a right to object to data processing which is based on Article 6 (1f) GDPR.
In accordance with Article 77 GDPR, you have the right to complain to a supervisory authority is you believe that your personal data has not been processed in accordance with the law.
The address of the supervisory authority responsible for our company is as follows:
Der bayerische Landesbeauftragte für Datenschutz
Postfach 22 12 19, 80502 München
Wagmüllerstraße 18, 80538 München
Telephone: 089 212672-0
Fax: 089 212672-50
4. Provision of the website and creation of log files
4.1 Description of data processing
Whenever our website is called up, our system automatically collects data and information from the computer system that calls it. The following data may be collected in the process:
(1) Information on the type of browser used and its version,
(2) The user’s operating system,
(3) The user’s Internet service provider
(4) The user’s IP address
(5) The date and time the user accessed the site,
(6) Websites from which the user’s system accesses our website,
(7) Websites the user’s system calls from our website.
4.2 Legal basis for processing data
The legal basis for temporary storage of data is Article 6 (1) point (f) GDPR.
4.3 Purpose of data processing
Temporary storage of the IP address by the system is necessary so that the website can be delivered to the user’s computer system. To enable that, the user’s IP address must be stored for the duration of the session.
4.4 Duration of storage
Die Daten werden gelöscht, sobald sie für die Erreichung des Zwecks ihrer Erhebung nicht mehr erforderlich sind. Im Falle der Erfassung der Daten zur Bereitstellung der Website ist dies der Fall, wenn die jeweilige Sitzung beendet ist.
4.5 Means of objection and rectification of data
Die Erfassung der Daten zur Bereitstellung der Website und die Speicherung der Daten in Logfiles ist für den Betrieb der Internetseite zwingend erforderlich. Es besteht folglich seitens des Nutzers keine Widerspruchsmöglichkeit.
5.1 Description of data processing
5.2 Legal basis for data processing
The legal basis for processing personal data using cookies is Article 6 (1) point (f) GDPR.
5.3 Purpose of data processing
The analytics cookies are used to improve the quality and content of our website. These analytics cookies show us how the website is used so that we can keep on optimizing our offer. These purposes also constitute our legitimate interests in processing personal data in accordance with Article 6 (1) point (f) GDPR.
5.4 Duration of storage; means of objection and rectification of data
6. Contact form and e-mail contact
6.1 Description of data processing
Our website contains a form that can be used for contacting us electronically. If a user makes use of this option, the data entered in the input screen is sent to us and stored. These data are:
- Last name
- First name
- E-mail address
When a message is sent, the sender’s IP address and the message’s date and time may also be stored. Users may also contact us under the e-mail address provided. In this case, the user’s personal data sent with the e-mail are stored. The data are not passed on to third parties in this connection. The data are used solely for processing the conversation.
6.2 Legal basis for processing data
The legal basis for processing users’ data is Article 6 (1) point (f) GDPR. The legal basis for processing data sent with an e-mail is Article 6 (1) point (f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for processing data is Article 6 (1) point (b) GDPR.
6.3 Purpose of data processing
We process personal data from the input screen solely for handling contacts. If we are contacted by e-mail, that constitutes the legitimate interest required for processing the data. The other personal data that are processed when data are sent helps to prevent misuse of the contact form and ensure the security of our IT systems.
6.4 Duration of storage
The data is erased as soon as it is no longer required for achieving the purpose for which it was collected. As regards personal data from the contact form’s input screen and personal data sent by e-mail, this is the case when the particular conversation with the user is over. The conversation is over when it is clear from circumstances that the matter in question has been definitely resolved. The additional personal data collected during the sending process is not stored.
6.5 Means of objection and rectification of data
Users can withdraw their consent to their personal data being processed at any time. If users contact us by e-mail, they can object to their personal data being stored at any time. That then means the conversation cannot be continued.
7. Facebook plugin
7.1 Description of data processing
Plugins for the Facebook social network (1601 South California Avenue, Palo Alto, CA 94304, USA) are integrated into our website. You can recognize the Facebook plugins from the Facebook logo or “Like” button on our site. You will find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/.When you visit our site, a direct connection is established by the plugin between your browser and the Facebook server. Facebook is thereby informed that you have visited our site under your IP address. If you click on Facebook’s “Like” button while you are logged in to your Facebook account, you can link the content of our site on your Facebook profile. As a result, Facebook can assign your visit to our site to your user account. We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or how the data are used by Facebook. Further information is available in the Facebook data protection policy, which can be found at de-de.facebook.com/policy.php
7.2 Legal basis for processing data
The legal basis for processing users’ personal data is Article 6 (1) point (f) GDPR.
7.3 Purpose of data processing
Processing allows us to offer you a simple way of interacting with social networks.
7.4 Duration of storage
We do not store the data. For details of how long Facebook stores data and how this data can be erased, please see the Facebook data protection information at de-de.facebook.com/privacy/explanation.php.
7.5 Means of objection and rectification of data
If you do not want Facebook to be able to link your visit to our website to your user account, please log out of your user account.
8. Google maps
8.1 Description of data processing
We use the Google Maps API in order to display geographical information. When Google Maps are used, Google also collects, processes and uses data about the use of map functions by visitors to the website. Further information regarding the processing of data by Google can be found in the Google data protection policy at www.google.com/privacypolicy.html. You can also change settings, manage data and protect data in the Data Protection Center. Further instructions for managing your own data in connection with Google products can be found here: www.dataliberation.org.
8.2 Legal basis for processing data
The legal basis for processing users’ personal data is Article 6 (1) point (f) GDPR.
8.3 Purpose of data processing
Processing data allows us to provide you with information in a convenient manner.
8.4 Duration of storage
The data is erased as soon as it is no longer required for achieving the purpose for which it was collected.
8.5 Means of objection and rectification of data
For details of the means of objection and rectification of data, see the aforementioned data protection information relating to Google products.