Privacy policy

1. name and address of the controller

The controller within the meaning of the European General Data Protection Regulation (EU GDPR) is the party that alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

The controller responsible for data processing on this website is the

Verband Region Stuttgart - corporation under public law

represented by the regional director

Kronenstr. 25, 70174 Stuttgart

0711 / 22 75 9-0

info(at)region-stuttgart.org

 

2. contact details of the data protection officer

You can consult our data protection officer on all matters relating to the processing of your personal data and the exercise of your rights under the EU GDPR.

You can reach our data protection officer at the following address Komm.ONE AöR, Weissacher Straße 15, 70499 Stuttgart.

E-mail: datenschutzbeauftragte(at)komm.one.

 

3 General information on data processing

3.1 Scope of the processing of personal data

We only process your personal data to the extent necessary to provide a functional website and our content and services. Otherwise, we only process your personal data if you have given us your prior consent to do so.

Personal data is data that can be used to identify you personally.

This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

3.2 Legal basis for the processing of personal data

We use this website to carry out our public relations work. The legal basis for the collection of the personal data required for provision is Art. 6(1)(e) EU GDPR, Section 4 LDSG.

Insofar as we obtain your consent for processing operations, the legal basis is Art. 6(1)(a) EU GDPR.

3.3 Storage period

We delete your personal data as soon as the purpose for which it was processed no longer applies and there is no legal obligation to store it.

3.4 Right to object and right to erasure

You have the right to object, on grounds relating to your particular situation, at any time to processing based on Article 6(1)(e) GDPR.

You can withdraw your consent in whole or in part at any time. All you need to do is send us an informal email. The revocation is only effective for the future, the legality of the data processing carried out until the revocation remains unaffected by the revocation.

 

4 Provision of the website

4.1 Description and scope of data processing

Each time the Verband Region Stuttgart website is accessed and each time a file is retrieved, the following data is automatically stored in a log file

• IP address
• Provider name
• Origin page
• Pages visited
• Length of visit
• Browser used
• Installed plug-ins
• Date and time
• Amount of data transferred
• Operating system

We do not store any data in the log files that could be used to identify you.

The data will not be passed on to third parties or analyzed in any other way unless there is a legal obligation to do so.

4.2 Purpose and legal basis of processing

The purpose of this processing is to enable our website to be displayed correctly on the user's device. In particular, the processing of the IP address is necessary for communication between our server and the user's device. This data is stored exclusively for system-related and statistical purposes and, in exceptional cases, to report criminal offenses.

The processing of this data enables us to provide you with our online offer. The legal basis is Art. 6(1)(e) EU GDPR, Section 4 LDSG.

4.3 Storage period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If your personal data is processed to provide the website, we delete it when the session ends.

4.4 Objection and removal options

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of our website. We can therefore demonstrate compelling legitimate grounds for the processing, which is why you have no right to object.

 

5. contacting us

5.1 Description and scope of data processing

You have the option of contacting us on our website. If you make use of this option, the data entered in the input mask of the contact form will be transmitted to us and stored. Please note that only the fields marked with an * are mandatory and must be completed in order to send us your message. All other information in the contact form can be provided voluntarily, but is not required for processing your request. When you send us your message, we will also save the date and time you contacted us.

You also have the option of contacting us by telephone or e-mail. If you call us, we store caller identification information, i.e. your telephone number, your name and the time of your call, and make a note of the reason for your call. The entire telephone call is not recorded.

If you send us an e-mail, we will store your e-mail address in addition to your request (= subject matter including all personal data mentioned therein).

The data will not be passed on to third parties. If, in exceptional cases, it is necessary to pass on data to third parties in connection with your request, it will only be passed on with your express legal permission or with your consent.

5.2 Purpose and legal basis

We process your personal data in order to be able to process your request and, if necessary, to contact you in the event of follow-up questions.

We process the personal data contained in the inquiry on the basis of Article 6(1)(e) EU GDPR, Section 4 LDSG. This provision allows us to perform our tasks that are in the public interest or have been assigned to us.

All voluntarily provided personal data will be processed on the basis of your consent. The legal basis is Art. 6(1)(a) EU GDPR.

5.3 Storage period

We store your data processed for the purpose of contacting you until the purpose for data storage no longer applies (e.g. after your request has been processed) or you request us to delete it. Mandatory statutory provisions - in particular retention periods - remain unaffected.

5.4 Objection and removal options

You have the option at any time to object to the processing of your contact data or to withdraw your consent to the processing of the data you have voluntarily provided. In this case, we will delete your data immediately. We will then no longer be able to inform you about the further processing of your request.

 

6 Publications / Newsletter

6.1 Description and scope of data processing

We are happy to inform you about current developments in the region and the work of the Verband Region Stuttgart via our free publications, as well as about information on meetings of the Council and Citizen Information System. We need your name and address to send you the information by post or your e-mail address to send you the media electronically. If the order is subject to a charge, we also require your bank account details. We do not pass on your data to third parties.

6.2 Purpose and legal basis

Your data will only be processed by us for the purpose of dispatch. The legal basis for data processing is Art. 6(1)(a) or (b) GDPR.

6.3 Storage period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your email address and your name will therefore be stored for as long as your subscription to the newsletter is active.

6.4 Objection and removal option

You can of course unsubscribe from the newsletter at any time and have your data deleted or withdraw your consent.

 

7 Participation procedure

In accordance with the State Planning Act and the Spatial Planning Act, public participation is required for the preparation, extension, partial updating, amendment or partial modification of regional plans. This applies to so-called public interest bodies and legal entities, but private individuals can also express their views as part of the participation procedure.

7.1 Description and scope of data processing

Online participation in a regional plan amendment procedure requires registration on this website. To do this, you must first register. The following data is collected from natural persons:

• First name and surname of the private individual
• user name
• password
• e-mail address

These minimum data are marked separately with *.

All other data can be provided voluntarily. There is no obligation to provide this data.

After the data has been entered and sent, it is transferred via a secure connection to a database server of the Verband Region Stuttgart, where it is technically managed by a service provider. Further data processing then takes place exclusively within the Verband Region Stuttgart.

7.2 Purpose and legal basis

The storage of your name serves to identify the person who submitted the statement. An e-mail address is required in order to be able to send you an e-mail after registration asking you to confirm your registration and login on our online portal. All data will be used exclusively in the context of the participation procedure.

The legal basis is Article 6(1)(e) EU GDPR in conjunction with Section 9 ROG, Section 12 LplG, Section 4 LDSG. If you voluntarily provide further data such as your address, the processing of this data is based on your consent. The legal basis is Art. 6(1)(a) EU GDPR. You can revoke this consent at any time without giving reasons in accordance with Art. 7 (3) EU GDPR.

7.3 Storage period

We delete your personal data as soon as storage is no longer required for the stated purpose and no statutory retention periods prevent deletion. The necessity to store your personal data is given as long as the regional plan is legally effective.

7.4 Recipients

The servers of the Verband Region Stuttgart are technically managed by DVZ Datenverarbeitungs-zentrum Mecklenburg-Vorpommern GmbH, Lübecker Straße 283 in 19059 Schwerin. To ensure the security of your data and to safeguard your rights under data protection law, we have concluded an order processing agreement with the service provider within the meaning of Art. 28 (3) EU GDPR.

The highest state planning and legal supervisory authority is the Ministry of Economic Affairs, Labor and Housing in Stuttgart. As part of the procedural review, all relevant data, initially anonymized, is transmitted to the supervisory authority. As part of an audit, the highest legal supervisory authority is authorized to request access to files in justified cases. This means that personal data (e.g. in statements, emails, etc.) may also come to the attention of the legal supervisory authority. As a rule, access to files is only granted on the premises of the Verband Region Stuttgart and not digitally.

Otherwise, your comments will only be forwarded by the person responsible to the committees involved (planning committee, regional assembly) or by public announcement in anonymized form. This does not allow any conclusions to be drawn about your person.

7.5 Right of objection and removal

There is no obligation to submit a statement. You therefore have the option of canceling your registration at any time. You can have the data stored about you amended at any time.

With regard to your voluntarily provided personal data, such as your address, you can revoke your consent at any time and request the deletion of this data.

In this case, please send us an e-mail to info(at)region-stuttgart.org.

 

8 Council and citizen information system

You are welcome to visit our homepage to find out about the work of the Stuttgart Region Association's committees. You can research the committee meetings, the parliamentary groups and the laws and statutes of the Verband Region Stuttgart without registering. Personal data is therefore not collected and processed in connection with research in our council and citizen information system, with the exception of the newsletter of the council and citizen information system (only the email address on the basis of Article 6 (1) GDPR).

If you, as a regional councillor, use the council information system for your meeting work, we will inform you separately about data processing in the context of registration and use of this system.

 

9. application

9.1 Description and scope of data processing

If you send us an application by post, we will process your application data in order to assess your suitability for the position for which you are applying. We will only use your contact details to get in touch with you and to inform you about the progress of the application process.

9.2 Purpose and legal basis

The purpose of processing your personal data is to determine your suitability, qualifications and professional performance for the vacant position.

The legal basis for the establishment of the service or employment contract, including all pre-contractual measures, is Art. 6 para. 1 letter b) EU GDPR. For us as a public employer, the legal requirements for the selection procedure arise in particular from Art. 33 para. 2 GG, the AGG and budgetary law. Accordingly, the selection decision must be based on suitability, ability and professional performance. The legal basis for processing as part of the selection procedure for establishing a civil servant, employee or trainee relationship is Section 15 LDSG in conjunction with Sections 83 to 85 LBG.

If your application documents contain special categories of personal data, e.g. information on health, religious beliefs or ethnic origin, we base our processing on our legal obligations as an employer and the associated protection of your fundamental rights additionally on Art. 9 para. 2 letter b) EU GDPR. In addition, we also process your data on the basis of Art. 9 (2) (h), (3) EU GDPR in order to be able to assess the ability of potential employees to work and, if necessary, to take occupational health and health care measures.

9.3 Storage period

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event that the application procedure is followed by an employment relationship, training relationship, internship or other employment relationship, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends with the receipt of a rejection. In this case, your personal data will be deleted six months after receipt of the rejection, unless longer storage is necessary for the defense of legal claims.

9.4 Recipients

We will not share the information you provide with any third parties. The recipients of the personal data contained in the application documents are the responsible personnel managers, specialist managers and the personnel representatives of our company.

9.5 Right of objection and removal

You can object to the processing of your personal data at any time. In particular, you have the option of withdrawing your application at any time.

9.6 Applications via LinkedIn

We, Verband Region Stuttgart, Kronenstraße 25, 70174 Stuttgart, maintain an online presence at www.linkedIn.de.

For this purpose, we use the services of the technical platform of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).

The use of this service is not required to contact us or to receive our information. Information that we publish via this service can also be accessed in the same or similar form at www.region-stuttgart.org/karriere.

We would therefore like to point out that you use the service offered here and its functionalities at your own risk. This applies in particular to the use of interactive functions, such as sharing.

In principle, LinkedIn is solely responsible for the processing of personal data when you visit our LinkedIn page. Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

When you visit our LinkedIn company page, follow this page or engage with the page, LinkedIn processes personal data to provide us with statistics and insights in anonymized form. This gives us insights into the types of actions that people take on our site (so-called page insights). In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. With the Page Insights, LinkedIn does not provide us with any personal data about you. We only have access to the summarized Page Insights. It is also not possible for us to draw conclusions about individual members from the information in the Page Insights. This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. The processing serves the performance of a public task. The evaluation of the types of actions taken on our LinkedIn company page serves to improve our company page based on these findings as part of our public relations work. The legal basis for this processing is Art. 6 (1) (e) GDPR. We have entered into an agreement with LinkedIn on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum.

The following applies:

• LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn online via the following link(https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) or reach LinkedIn via the contact details in the privacy policy. You can contact the Data Protection Officer at LinkedIn Ireland via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You can also contact us using the contact details provided to exercise your rights in connection with the processing of personal data in the context of page inserts. In such a case, we will forward your request to LinkedIn.
• LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or any other supervisory authority.

Please note that according to the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the USA or other third countries. According to its own information, LinkedIn only transfers personal data to countries for which an adequacy decision has been issued by the European Commission in accordance with Art. 45 GDPR or on the basis of suitable guarantees in accordance with Art. 46 GDPR.

Further data protection information, in particular on your rights as a data subject, can be found at: https://www.region-stuttgart.org/de/datenschutz/.

Detailed privacy policy on the application process

10. cookies and technologies from third-party providers

10.1 Session cookie

10.1.1 Description and scope of data processing

We use a session cookie from TYPO3 GmbH on our website. This means that when you access our website, cookies, i.e. text files, are stored on your device that are valid for the duration of your visit to the website ("session cookies"). We only use these during your visit to our website.

10.1.2 Purpose and legal basis

The fe_typo_user cookie is required to save the shopping cart in the document store. The use of these technically necessary cookies within the meaning of Section 25 (2) No. 2 TTDSG takes place on the legal basis of Art. 6 (1) (b) EU GDPR.

10.1.3 Storage duration

At the end of your visit to our website, these cookies are automatically deleted.

10.1.4 Possibility of objection and removal

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the storage of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

10.2 Usercentrics Consent Management Platform

10.2.1 Description and scope of data processing

We use the Usercentrics Consent Management Platform of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany, to manage your consents on our website.

By using this service, technologies such as cookies and pixels are used, which are placed in the browser. The following data is collected if you have made a selection in the consent banner:

• Opt-in and opt-out data
• Referrer URL
• User agent
• User settings
• Consent ID
• Time of consent
• Type of consent
• Template version
• Language of the banner
• IP address

10.2.2 Purpose and legal basis

The purpose of the processing is consent management. We thereby fulfill our obligation to document your consent.

The legal basis for the storage of your declaration of consent is Art. 6(1)(a) EU GDPR; the legal basis for the processing of personal data using technically necessary cookies within the meaning of Section 25(2) TTDSG is Art. 6(1)(e) EU GDPR in conjunction with Section 4 LDSG.

10.2.3 Duration of storage

The consent data (consent given and revocation of consent) will be stored for one year and then deleted.

10.2.4 Possibility of objection and removal

The storage of the declaration of consent serves the purpose of documentation and provability. Consequently, there is no possibility of objection.

Further information can be found in the privacy policy of Usercentrics GmbH at

https://usercentrics.com/privacy-policy/

10.3 YouTube

10.3.1 Description and scope of data processing

We embed YouTube videos on our website. If you click on this area, we will inform you about the processing of your personal data and in particular about the transfer of your data to a third country outside the scope of the EU GDPR. The processing of your data begins from the moment you agree to this and give us your consent.

To provide the video, your IP address is transmitted and information about your usage behavior is collected (for example: which video you have opened and how long you have watched it). This transmission takes place regardless of whether you have a YouTube user account or not.

If you are also logged in to YouTube as a member at this time, the operator, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066 USA, can assign your visit to our website to your respective user account. We would like to point out that YouTube LLC is part of the Google LLC group of companies, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you do not want YouTube to collect and store data about your visit to our website, please log out of your YouTube account before clicking on the link.

10.3.2 Purpose and legal basis

We use the videos to prepare our content for you in the best possible way and to present it clearly for you. The data transmitted to YouTube is stored by YouTube in user profiles and used for advertising and market research purposes, for example.

Please inform yourself about the purposes and scope of the data processing as well as the rights to which you are entitled as a result of the processing via the corresponding privacy policy:

www.google.de/intl/de/policies/privacy/

We base the processing of your personal data on your consent. The legal basis for data processing is therefore Art. 6(1)(a) EU GDPR.

10.3.3 Storage period

For information on the storage period, please also refer to the privacy policy: www.google.de/intl/de/policies/privacy/

10.3.4 Possibility of objection and removal

You can withdraw your consent to the processing of your personal data at any time by using the data protection settings in the footer on each page.

 

11. social networks

On our homepage you will find the social media logos of Facebook, Instagram and LinkedIn. The icons contain a link to the respective social network. Clicking on the icons establishes a direct connection between you and the operator of the network. A window will then open on the social network page and you can log in to the social network and view our content. We would like to point out that when you log in, all data collected can be assigned to your user account and a profile of you can be created based on your surfing behavior. The data protection information and declarations on the linked page apply. Please read these carefully before clicking on the logos(Instagram, Facebook, LinkedIn).

However, no personal data will be collected from you and transmitted to the operator of the social network simply by clicking on the link.

 

12. your rights as a data subject

Due to the processing of personal data, you have special rights to which we would like to draw your attention at this point:

12.1 Right to information, Art. 15 EU GDPR

You can request information about your processed personal data. In your request for information, you should specify your request in order to make it easier to compile the necessary data.

12.2 Right to rectification, Art. 16 EU GDPR

If the information concerning you is not (or is no longer) correct, you can request that it be corrected immediately. If your data is incomplete, you can request that it be completed.

12.3 Right to erasure ("right to be forgotten"), Art. 17 EU GDPR

Under certain conditions, you can request the immediate erasure of your personal data. The related obligation of the data controller to erase your data without undue delay depends, among other things, on whether the data concerning you is still required by the data controller to perform its tasks.

12.4 Right to restriction of processing, Art. 18 EU GDPR

Under the conditions of Art. 18 EU GDPR , you have the right to request the restriction of processing.

12.5 Right to data portability, Art. 20 EU GDPR

Under the conditions of Art. 20 EU GDPR , you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another controller.

12.6 Right to object, Art. 21 EU GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. However,
cannot comply with this if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims.

Contact data protection officer: Komm.ONE AöR, Weissacher Straße 15, 70499 Stuttgart. E-mail: datenschutzbeauftragte(at)komm.one.

 

13. right of revocation, Art. 7 para. 3 EU-GDPR

If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You will not suffer any disadvantages as a result of withdrawing your consent.

 

14. right to lodge a complaint, Art. 77 EU GDPR

If you believe that the processing of your personal data violates the EU GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority, without prejudice to any other legal remedies.

In this case, please contact:

• State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
• House address: Lautenschlagerstraße 20, 70173 Stuttgart
• Postal address: P.O. Box 10 29 32, 70025 Stuttgart
• Telephone switchboard: +49 711/61 55 41-0
• E-mail: poststelle@lfdi.bwl.de