Note:
This is a translation of our German privacy statement (Datenschutzerklärung).
In case of discrepancies between the English translation and the German original, the original shall prevail.

 

Privacy Statement

Information for data subjects pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR)

I.       Name and address of the data controller

Controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations:

Geschäftsstelle der RSK/ESK beim
Bundesamt für die Sicherheit der nuklearen Entsorgung

Postal address:
Postfach 12 06 29
53048 Bonn
E-mail: info-rsk@base.bund.de
Website: www.entsorgungskommission.de

The Secretariat is administratively affiliated to the Federal Office for the Safety of Nuclear Waste Management (Bundesamt für die Sicherheit der nuklearen Entsorgung – BASE).

Controller shall be the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

II.      Data Protection Officer

You can contact the Data Protection Officer at:

Bundesamt für die Sicherheit der nuklearen Entsorgung (BASE)
Behördlicher Datenschutzbeauftragter
11513 Berlin
E-mail: dsb@base.bund.de

III.    General information on data processing

1. Scope of personal data processing

As a matter of principle, we only process personal data of our users insofar as this is necessary to provide a properly functioning website as well as our contents and services. The processing of personal data of our users is generally only carried out with the consent of the user. An exception applies in those cases where prior consent cannot be obtained for practical reasons and processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Insofar as processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to take steps prior to entering into a contract.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our authority is subject, Article 6(1)(c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Article 6(1)(d) GDPR serves as the legal basis.

3. Data erasure and duration of storage

The data subject’s personal data will be erased or blocked as soon as the purpose of the storage ceases to apply. Further storage may take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period stipulated by the aforementioned standards expires, unless there is a need for continued storage of the data for the purpose of concluding or fulfilling a contractual agreement.

IV.    Provision of the website and creation of log files

1. Description and scope of data processing

Whenever a user accesses our website and whenever a file is retrieved, data evidencing these activities are temporarily stored and processed in a log file.

In detail, for each access/retrieval, data are stored relating to the following:

• browser type and version used
• operating system
• IP address
• date and time of access
• last visited site (if info available)
• websites accessed via our website

The log files are statistically evaluated hourly on the server side, the results are anonymised. The log files themselves are stored for 7 days for the purpose of error analysis and then deleted.

2. Legal basis for data processing

The legal basis for the temporary storage of the data is Article 6(1)(e) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(e) GDPR.

4. Duration of storage

The data are erased once they are no longer needed to achieve the purpose for which they were collected. Regarding the collection of data for the provision of the website, this is the case when the respective session has ended.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely essential for the operation of the website. This means that there is no possibility for the user to object.

V.      Use of cookies

Our website does not use cookies.

VI.    E-mail contact

1. Description and scope of data processing

An e-mail address is available on our website, which can be used for electronic contact. The user's personal data transmitted with the e-mail will be stored for a limited period of time.

In this context, the data will not be passed on to third parties. The data are used exclusively for the purpose of processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of data is Article 6(1)(a) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an email is Article 6(1)(e) GDPR.

3. Purpose of data processing

The sole purpose of processing personal data is to process the contact. This also constitutes the necessary legitimate interest in processing the data.

4. Duration of storage

The data are erased once they are no longer needed to achieve the purpose for which they were collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed terminated when the circumstances indicate that the matter in question has been conclusively clarified.

5. Possibility of objection and removal

The user has the option to withdraw his or her consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

The withdrawal of consent and the objection to storage can be made by e-mail.

All personal data stored in the course of contacting us will be erased in this case.

VII.   Rights of the data subject

As a user of the website provided by the Secretariat of the Nuclear Waste Management Commission (ESK), you have the rights set out in Articles 12 to 22 GDPR when personal data is processed:

• Right of access under Article 15 GDPR
  The right of access gives you full insight into the data concerning you and some other key criteria, such as the purposes of processing or the duration of storage. Exceptions to this right are governed by § 34 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
• Right to rectification under Article 16 GDPR
  The right of rectification includes the possibility for you to have inaccurate personal data concerning you corrected.
• Right to erasure under Article 17 GDPR
  The right to erasure includes the possibility for you to have data erased by the controller. However, this is only possible if the personal data concerning you are no longer needed, are processed unlawfully or if consent covering their processing has been withdrawn. Exceptions to this right are governed by § 35 BDSG.
• Right to restriction of processing under Article 18 GDPR
  The right to restriction of processing includes the possibility for you to prevent further processing of the personal data relating to you for the time being. Particularly, the right to restriction applies during the period in which other rights you have exercised are under review.
• Right to data portability under Article 20 GDPR
  The right to data portability includes the possibility for you to receive the personal data concerning you from the controller in a commonly used and machine-readable format, for example as a PDF document, in order to have them forwarded to another controller, if necessary.
• Right to object under Article 21 GDPR
  The right to object allows you to object to the further processing of your personal data in particular situations, insofar as this is justified by the exercise of public duties or public as well as private interests. According to § 36 BDSG, this right does not apply if a public body is obliged to process data by law.
• Right to withdraw consent under Article 7(3) GDPR
  You have the right to withdraw your consent at any time with effect for the future. You will find a corresponding withdrawal option on the corresponding website for which your consent was obtained.

The exercise of these rights is free of charge for you and is granted upon request within the scope of your interest in information. To do so, please contact the Data Protection Officer of the Federal Office for the Safety of Nuclear Waste Management (BASE).

VIII. Right to lodge a complaint with the supervisory authority

If personal data are processed by us, you have the right to lodge a complaint with the Federal Commissioner for Data Protection and Freedom of Information, which is the competent data protection supervisory authority.

Competent supervisory authority:
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstraße 30
53117 Bonn
Telephone: +49 (0) 228 99 7799-0
E-mail: poststelle@bfdi.bund.de
Website: www.bfdi.bund.de