Legal notice

The person responsible within the meaning of the Datenschutz-Grundverordnung (DS-GVO) and other national data protection law as well as other data protection regulations is:

Abwasserverband Braunschweig
Celler Strasse 22
38176 Wendeburg OT Ersehof
Telephone: +49  53 03 – 5 09 – 0
Fax: +49  53 03 – 5 09 – 50
Email: info@abwasserverband-bs.de

The data protection officer of the Abwasserverband Braunschweig is:

untill 31.12.2020
tacticx GmbH
Ingo Wolff
Walbecker Str. 53
D – 47608 Geldern
Email: datenschutz@abwasserverband-bs.de

from 01.01.2020
Kämmer Consulting GmbH
Nordstr. 11
38106 Braunschweig
Email: info@kaemmer-consulting.de

The distinction between female and male personal names was deliberately omitted for reasons of better legibility.

1. General information on data processing

1.1. Processing of personal data and their purpose
The Abwasserverband Braunschweig (hereinafter „Abwasserverband Braunschweig“ or „we“) only processes personal data of the users insofar as this is necessary for the provision of a functional website and our content and services.

When you visit our website, the following data is processed:
– IP address of the user
– browser used (type, version, language)
– operating system
– used Internet service provider of the user
– Date and time of access to our website
– files accessed on our website
– Website from which the user accessed our website
– Website that the user accesses via our website.

The processing and temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session. The log files contain IP addresses or other data that enable the user to be assigned. The storage in log files takes place to ensure the functionality of the website. In addition, the data is used to optimize our website and to ensure the security of our information technology systems. Any processing of personal data takes place exclusively for the stated purposes and to the extent necessary to achieve these purposes. This data is not used for advertising, customer advice or market research purposes.

1.2. Legal basis for the processing of personal data
The processing of personal data of our users takes place regularly with the consent of the user. An exception applies in those cases in which prior consent cannot be obtained for factual reasons and legal regulations permit us to process the data. The data and log files are stored on the basis of Art. 6 Para. 1 lit. f DS-GVO.

1.3. Data deletion and storage duration
The personal data of the data subjects will be deleted or blocked by us as soon as the purpose of storage no longer applies. In the case of data processing for the provision of the website, the deletion takes place when the respective session has ended. Any further storage is possible if the IP addresses of the users are deleted or alienated beforehand, so that it is no longer possible to assign the accessing client.

2. Cookies
We use cookies in several places on our website. If a user calls up one of our websites, a cookie can be stored on the user’s operating system. A cookie contains a characteristic string that enables the browser to be clearly identified when you visit our website again. The following data is stored and transmitted in the cookies:
– language settings
– Log-in information.
The purpose of using cookies is to make our website user-friendly. The processing of personal data using cookies is based on Art. 6 Para. 1 lit. f DS-GVO. Cookies are stored on the user’s computer and transmitted from there to our website. Users can deactivate or restrict the transmission of cookies by changing their Internet browser settings. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our website, it is possible that not all functions of our website can be used in full.

3. Matomo
Our websites use Matomo (formerly Piwik), software for the statistical analysis of user access from the provider InnoCraft ltd., 150 Willis St, 6011 Wellington, New Zealand. No personal user profiles are created, only anonymous measured values ​​are collected. With the web analysis we aim to improve the quality of our websites and their content. Cookies are used here (see above), which enable an analysis of the use of our website. The web analysis can be technically prevented by the user of the website by deactivating JavaScript and cookies in his web browser. Details on the settings required for this can be found in the product descriptions or instructions from the various browser providers. In this context, data processing takes place on the basis of Art. 6 Para. 1 lit. a DS-GVO. Further information on Matomo’s terms of use and data protection can be found at https://matomo.org/privacy-policy/ .

4. Google Maps
Our websites use Google Maps API from the provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, to visually display geographic information. When using Google Maps, Google also processes data on the use of the maps functions by users of the websites. The legal basis for processing the data is Art. 6 Para. 1 lit. f DS-GVO. We have a legitimate interest in an appealing presentation of our website and in an easy findability of the places we have indicated on the websites. More information about data processing by Google can be found in Google’s data protection information at https://policies.google.com/privacy?hl=en.

5. Contact form and email contact
A contact form is available on our website that can be used to contact us electronically.

If an user makes use of this option, the data entered by him in the input mask will be transmitted to us and stored:
– Surname
– e-mail
– Subject
– Address (street, house number, zip code, city) (optional)
– Free field for individual text (optional)
– IP address of the user
– Date and time of sending.

Alternatively, you can contact us using the email addresses provided. In this case, the personal data of the user transmitted with the email will be saved by us. The legal basis for processing the data is Article 6 Paragraph 1 lit. f DS-GVO. The data will only be used to process the establishment of contact and the subsequent communication. In this context, the data will not be passed on to third parties. If we use the data for other purposes, we will obtain the user’s consent in advance. The personal data from the input mask of the contact form and those that were sent by email are deleted when the respective communication with the user has ended, i.e. as soon as it can be inferred from the circumstances that the matter in question has been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

6. Our social media presence
You can find us with a presence on social networks and platforms so that we can communicate with you there and inform you about our services. We would like to point out that your data can be processed outside the European Union and that the data is usually processed there for market research and advertising purposes. Usage profiles can be created from the usage behavior and the resulting interests of the users. These usage profiles can in turn be used to e.g. To place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, Cookies are saved on the users‘ computers, in which the usage behavior and the interests of the users are saved. Other data can also be stored in these usage profiles, especially if the users are members of the respective platforms and are logged in to them.

The processing of the users‘ personal data takes place on the basis of our legitimate interests in the broadest possible communication with our users in accordance with Art. 6 Para. 1 lit. f DS-GVO. If the respective social networks obtain consent for the data processing, the legal basis for the processing is Art. 6 Paragraph 1 lit. a DS-GVO. For information about the respective processing and the respective possibilities of objection, we refer to the following linked data protection information of the providers:

7. Security
The Abwasserverband Braunschweig uses technical and organizational security measures to protect users‘ personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

8. Rights of the data subject
If the Abwasserverband Braunschweig processes your personal data, you are the data subject in accordance with Art. 4 No. 1 DS-GVO with the following rights vis-à-vis the Abwasserverband Braunschweig:

8.1. Right of providing information
In accordance with Art. 15 DS-GVO, you can request confirmation from us as to whether personal data concerning you will be processed by us.

If we process your personal data, you can request the following information from us:
– the purposes of the processing;
– the categories of your personal data that we process;
– the recipients or the categories of recipients to whom we have disclosed or will disclose your personal data;
– (if possible) the planned duration for which we will store your personal data or, if this is not possible, the criteria for determining the storage duration;
– the existence of a right to correction or deletion of your personal data,
– a right to restrict processing by us or a right to object to this processing;
– the existence of a right of appeal to a supervisory authority;
– all available information about the origin of the data, unless the personal data was collected from you;
– the existence of automated decision-making including profiling (Art. 22 Para. 1 and 4 DS-GVO) and
– at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you.

You have the right to request information about this whether the personal data concerning you will be transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with. Art. 46 DS-GVO to be informed in connection with the transfer.

8.2. Right to rectification
According to Art. 16 DS-GVO, you have the right to request us to correct and / or complete incorrect personal data relating to you.

8.3. Right to cancellation
In accordance with Art. 17 DS-GVO, you can request that your personal data be deleted immediately.

We are obliged to delete your data immediately if one of the following reasons applies:
– Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
– You revoke your consent on which we base the processing in accordance with Art. 6 Para. 1 lit. a DS-GVO or Art. 9 Para. 2 lit. a DS-GVO and there is no other legal basis for the processing.
– You object to the processing in accordance with Art. 21 Paragraph 1 DS-GVO and there are no overriding legitimate reasons for the processing, or
– you object to the processing in accordance with Art. 21 Paragraph 2 DS-GVO.
– Your personal data was processed unlawfully.
– The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject.
– Your personal data was collected in relation to the information society services offered in accordance with Art. 8 Para. 1 DS-GVO.

If we have made your personal data public and we are obliged to delete it in accordance with Art. 17 Paragraph 1 DS-GVO, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to who process the personal data, that you, as the data subject, have requested them to delete all links to your personal data or copies or replications of your personal data.

The right to deletion does not exist if processing is necessary
– to exercise the right to freedom of expression and information;
– to fulfill a legal obligation to which we are subject or to perform a task that is in the public interest or in the exercise of official authority that has been assigned to us;
– for reasons of public interest in the area of ​​public health (Art. 9 Paragraph 2 lit. h and i and Art. 9 Paragraph 3 DS-GVO);
– for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 para. 1 DS-GVO, insofar as the aforementioned right is likely to make the realization of the objectives of this processing impossible or seriously impair it,
– or for the establishment, exercise or defense of legal claims.

8.4. Right to restriction of processing
Under the following conditions, you can request the restriction of the processing of your personal data in accordance with Art. 18 DS-GVO:
– if you dispute the accuracy of your personal data for a period of time that enables us to verify the accuracy of the personal data;
– if the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
– if we no longer need your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims,
– or if you have lodged an objection to the processing in accordance with Art. 21 Paragraph 1 DS-GVO and it has not yet been determined whether our legitimate reasons outweigh your reasons.

If the processing of your personal data has been restricted, this data – apart from its storage – may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. Has the processing been restricted according to the o.g. Restricted requirements, you will be informed by us before the restriction is lifted.

8.5. Right to be informed
If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged in accordance with Art. 19 DS-GVO to inform all recipients to whom we have disclosed your personal data of this fact, unless this proves themselves impossible or involves a disproportionate effort. You have the right towards us to be informed about these recipients.

8.6. Right to data portability
According to Art. 20 DS-GVO, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from us, provided that the processing is based on consent (Art. 6 Para. 1 lit. a DS-GVO or Art. 9 Para. 2 lit. a DS-GVO) or on a contract in accordance with Art. 6 para. 1 lit. b DS-GVO is based and the processing is carried out using automated procedures. In exercising this right, you also have the right to have your personal data transmitted directly from us to another person responsible, insofar as this is technically feasible. This must not impair the freedoms and rights of other people. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been assigned to us.

8.7. Right to object
According to Art. 21DS-GVO, you have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Paragraph 1 lit. e or f DS-GVO takes place to object; this also applies to profiling based on these provisions. We will not subsequently process your personal data unless we can demonstrate compelling legitimate reasons for our processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

8.8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time, for example by sending an email to datenschutz@abwasserverband-bs.de . Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal.

8.9. Automated decision in individual cases including profiling
According to Art. 22 DS-GVO, you have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effects on you or which significantly affects you in a similar manner. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and us, is permissible on the basis of Union or Member State legislation to which we are subject and this legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or takes place with your express consent.

8.10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that we are processing your personal data violates the DS-GVO.

9. Responsibility for content and information
Our websites contain links to Internet offers from external providers. The content of the internet offers of external providers was checked by us when the link was set to determine whether it violated applicable laws under civil or criminal law. However, it cannot be ruled out that this content may be changed afterwards by the respective providers. If you are of the opinion that linked external sites violate applicable law or have other inappropriate content, please let us know. We will check your information and remove the external link if necessary. The Abwasserverband Braunschweig is not responsible for the content and availability of the linked external websites.

10. Inclusion and validity of the data protection declaration
By using our website, you consent to the data processing described above. This data protection declaration only applies to the content of our website. Other data protection and data security provisions apply to the linked external content. You can find out who is responsible for these offers in the respective imprint. The further development of our website or the implementation of new technologies may make it necessary to change this data protection declaration. We keep us therefore propose to change the data protection declaration at any time with effect for the future. The version available at the time of your website visit always applies.

Status: December 2020