CONTROLLER AND DATA PROTECTION OFFICER
Controller
Saxon State Ministry for Economic Affairs, Labour and Transport (SMWA)
Visitor address:
Wilhelm-Buck-Straße 2
01097 Dresden, Germany
Postal address:
Postfach 10 03 29
01073 Dresden, Germany
Tel.:
(+49) (0351) 56 40
Fax:
(+49) (0351) 5 64 80 68
info@smwa.sachsen.de
De-Mail adress poststelle@smwa-sachsen.de-mail.de
http://www.smwa.sachsen.de/
Contact details of the data protection officer:
Data Protection Officer
Saxon State Ministry for Economic Affairs, Labour and Transport (SMWA)
Postal address:
Postfach 10 03 29
01073 Dresden, Germany
Tel.:
(+49) (0351) 56 48 5 200
Telefax:
(+49) (0351) 56 48 06 80
E-Mail: datenschutzbeauftragte@smwa.sachsen.de
TYPES OF DATA PROCESSED
- Contractual data (e.g. personal master data, names or addresses).
- Contact data (e.g. e-mail addresses, telephone numbers).
- Usage data (e.g. pages visited, interest in content, access times).
- Metadata/communication data (e.g. device information, IP addresses).
Categories of data subjects
Visitors to and users of the website/online services (hereinafter collectively referred to as “users”).
PURPOSE OF THE PROCESSING
- Providing the website/online services, their functions and content.
- Processing contact queries.
- Steps to improve the website’s technological security.
- Steps to identify and correct errors.
- Anonymised measurements of marketing reach.
RELEVANT LEGAL BASIS
Under Article 13 of the GDPR, we hereby inform you of the legal basis for the data processing via this website. Unless otherwise stated below, the following applies for users from the area in which the General Data Protection Regulation (GDPR) applies (i.e. users from the EU and the EEC):
- The legal basis for obtaining consent is Article 6 (1a) and Article 7 of the GDPR.
- The legal basis for processing carried out to perform our services, provide our information, take steps in accordance with our contract and answer queries is Article 6 (1b) of the GDPR.
- The legal basis for processing to comply with our legal obligations is Article 6 (1c) of the GDPR.
- The legal basis for the processing necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6 (1e) of the GDPR.
- The legal basis for processing for the purposes of our legitimate interests is Article 6 (1f) of the GDPR. The processing of data for purposes other than those for which they have been collected is based on Article 6 (4) of the GDPR.
- The processing of special categories of data (pursuant to Article 9 (1) of the GDPR) is based on Article 9 (2) of the GDPR.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation), or if this takes place in the context of third-party services or the disclosure or transfer of data to other persons or companies, this shall only occur if it is to meet our contractual or pre-contractual obligations, or is based on a legal obligation or our legitimate interests. Except in cases where we obtain explicit consent or data transfer is contractually necessary, we shall only process the data, or have them processed, in third countries recognised as providing an adequate level of data protection, including US processors certified under the Privacy Shield, or based on specific guarantees such as the contractual obligations of the European Commission’s standard contractual clauses, certification, or binding internal data protection regulations (Articles 44 to 49 of the GDPR, European Commission information page).
DATA PROCESSING ON VISITS TO THIS WEBSITE
Every time you visit our website, data are collected which are required to provide the online services. These consist in:
- your IP address,
- address/name of the retrieved page/file,
- date and time of retrieval, amount of data transferred,
- message as to whether the retrieval was successful.
These data are temporarily processed in a log file. Before being saved, each data set is anonymised by altering the IP address.
The anonymised data are saved after your visit to the website on a server belonging to Wirtschaftsförderung Sachsen GmbH (the hoster).
When these general data and information are used, it is not possible to connect them to individual persons. This information is only used to
- (1) correctly deliver the material on our website,
- (2) optimise the content of our website and advertising for such content,
- (3) ensure that our information technology systems and the technology of our website function in the long term and
- (4) provide the criminal prosecution authorities with the information required to prosecute criminal offences in case of a cyberattack.
These anonymously collected data and information are evaluated to raise technological data protection and technological data security, and, ultimately, to maintain an optimal level of protection for the data we process.
The anonymous data on the server log files are stored separately from all other data.
The legal basis for processing and storing the data is Article 6 (1f) of the GDPR.
They shall only be transferred to third parties (e.g. criminal prosecution authorities) if we are legally obliged to do so or if such transfer is necessary for legal or criminal prosecution in the case of attacks on the communications technology.
RIGHTS OF THE DATA SUBJECT
Right of access
You have the right to obtain confirmation as to whether data concerning you are being processed. You are entitled to access to these data and to any further information. Moreover, you are entitled to a copy of the data in accordance with legal requirements.
Right to rectification
You may request the completion or rectification of the data concerning you in accordance with legal requirements.
Right to erasure and restriction of processing
In accordance with legal requirements, you have the right to have data concerning you erased without undue delay or, alternatively, to have its processing restricted in line with legal requirements.
Right to data portability
In accordance with statutory requirements, you have the right to receive data which you have provided to us in a structured, commonly used and machine-readable format, or to have the data transmitted to another service provider.
Lodging complaints with a supervisory authority
You also have the right to lodge a complaint with the competent supervisory authority, the Saxon Data Protection Officer.
Postal address:
Der Sächsische Datenschutzbeauftragte
Kontor am Landtag
Devrientstraße 1
01067 Dresden
Right to withdraw consent
Insofar as you have given us consent to process certain data, you may withdraw that consent at any time with future effect.
Right to object
In all other cases in which data are processed when you use this site, you have the right under Article 21 of the GDPR to object at any time to the data processing on grounds relating to your particular personal situation. If the personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.
Erasure of data
The data processed via the website shall be erased or their processing restricted in accordance with legal requirements. Unless expressly stated otherwise in this privacy statement, the data shall be erased or their processing restricted as soon as they are no longer required for their purpose and their erasure does not conflict with any statutory record-keeping duties.
If data are not erased because they are required for other legal purposes, the processing of such data shall be restricted. This means that the data are made unavailable and only processed for the legally permissible purposes. One example of this is data which has to be stored for commercial reasons or under tax law.