Privacy

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation, other national data protection laws of the Member States and other data protection regulations is:

Name and address of the Data Protection Officer

General information on data processing

Purposes and legal basis for the processing of personal data

The purpose of processing is to fulfill the public tasks assigned to us by law. Unless otherwise specified, the legal basis for the processing of your data is Art. 4 (1) of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 (1) (e) of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data necessary to fulfill a task incumbent upon us. If you have consented to processing, data processing is based on Article 6(1)(a) GDPR.

Recipients of personal data

If necessary, your data will be transmitted to the competent supervisory and auditing authorities for the purpose of exercising their respective control rights. In order to avert threats to information technology security, log data may be forwarded to the State Office for Information Technology Security on the basis of Art. 44 BayDiG (for more details, see "Logging").

Duration of storage of personal data

Your data will only be stored for as long as is necessary to fulfill the task, in compliance with statutory retention periods.

Your rights

Insofar as we process personal data about you, you as the data subject have the following rights:

• You can request information about whether we process your personal data. If this is the case, you have the right to obtain information about this data and other information related to the processing (Art. 15 GDPR). Please note that this right to information may be restricted or excluded in certain cases (see in particular Art. 10 of the Bavarian Data Protection Act - BayDSG).
• If incorrect personal data is processed, you have the right to have it corrected (Art. 16 GDPR).
• If the legal requirements are met, you may request the erasure or restriction of processing (Articles 17 and 18 GDPR). However, the right to erasure under Art. 17 (1) and (2) GDPR does not apply if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 17 (3) (b) GDPR).
• If you have consented to the processing and the processing is based on this consent, you can revoke your consent at any time for the future. The lawfulness of the data processing carried out on the basis of the consent until revocation is not affected by this.
• You have the right to object to the processing of your data at any time for reasons arising from your particular situation (Art. 21 GDPR). If the legal requirements are met, we will no longer process your personal data.

Further restrictions, modifications, and, where applicable, exclusions of the aforementioned rights may arise from the General Data Protection Regulation or national legislation. You can also obtain more detailed information on these rights from our data protection officer.

Right to Lodge a Complaint with the Supervisory Authority

You also have the right to lodge a complaint with the Bavarian Data Protection Commissioner. You can contact them using the following contact details:

Technical implementation

Log files

Each time our website is accessed, our system automatically collects data and information from the user's computer system.
In this context, the following data are collected:

• Anonymised IP address of the requesting computer
• Date and time of the request
• Name of the retrieved file
• Address (URL) of the website from which the file was requested
• Data volume transmitted
• Access status (file transferred, file not found, etc.)
• Description of the type of web browser and/or operating system used

The data stored are required exclusively for technical or statistical purposes; no comparison with other data or disclosure to third parties occurs, not even in part. The data are stored in our system's log files. This is not the case for the user's IP addresses or other data that make it possible to assign the data to a specific user: before data are stored, each dataset is anonymised by changing the IP address. These data are not stored together with other personal data .

To avert threats to information technology security, the State Office for Information Security may collect this data and analyze it automatically pursuant to Section 44 of the BayDiG.

SSL Encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator. You can recognize an encrypted connection by the browser address line changing from http:// to https:// and by the lock symbol in your browser bar.

When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Technical and Organizational Measures

The controller has taken technical and organizational measures to protect your data against loss, destruction, or unauthorized access. In addition, both the controller's employees and any service providers are obliged to maintain confidentiality and comply with data protection regulations.

Cookies

OWe use cookies to ensure the correct technical and functional provision of this information service. Cookies are small text files that are stored on the device you are using.

The legal basis for the storage of information and the processing of personal data using technically necessary cookies is § 25 (2) TDDDG and Art. 6 (1) lit. e GDPR in conjunction with Art. 4 BayDSG.

Technically necessary cookies are only valid for the current session and are automatically deleted as soon as you close your browser.

The use of functional cookies is voluntary. If these cookies are blocked, certain functions may not be available in full.

The legal basis for the use of cookies that are not technically necessary is the consent of the user in accordance with Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.

All cookies used on the website can be viewed individually, and their permission settings can be modified:

Cookie Preferences

JavaScript

JavaScript is used in our information services. JavaScript is generally optional for assistant-supported forms. However, if JavaScript is disabled, functionality and convenience may be limited.

Electronic mail (email)

Information that you send to us unencrypted by electronic mail (email) may be read by third parties during transmission. As a rule, we cannot verify your identity and do not know who is behind an email address. Legally secure communication by simple email is therefore not guaranteed. Like many email providers, we use filters against unwanted advertising ("spam filters"), which in rare cases may also automatically classify normal emails as unwanted advertising and delete them. Emails containing harmful programs ("viruses") are automatically deleted by us in any case.

If you have concerns about transmitting personal data or other sensitive data, please agree on a suitable encryption method with the recipient (our employees) before transmission, or use postal mail.

Services

Contact forms

Description and scope of data processing

Our website contains contact forms that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

The specific data records are listed and explained in the respective contact forms. If there are any deviations or additions to the principles, purpose, and duration of storage listed here, these will be indicated in the respective contact forms.

Alternatively, you can contact us via the email address provided. In this case, your personal data transmitted with the email will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

Legal basis for data processing

The legal basis for the processing of your personal data is Art. 6 (1) lit. a GDPR if the user has given their consent.

The legal basis for the processing of your personal data transmitted in the course of sending an email is Art. 6 (1) lit. e GDPR in conjunction with Art. 4, 5 BayDSG. If contacts you by email with the aim of concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

Purpose of data processing

The processing of your personal data from the input mask serves us solely for the purpose of processing the contact request.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Right to object and right to erasure

You have the option to object to the processing of your personal data at any time in the future when contacting us via the contact form or by email. In such a case, the conversation between you and us cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Used external services and tools

ARD Mediathek

This website may embed content from ARD Mediathek. If such content is activated, a connection to the provider's servers may be established. Personal data such as IP address, browser information and information about the page accessed may be processed.

The use is based on your consent pursuant to Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time.

Cookie information

Provider	Bayerischer Rundfunk, Rundfunkplatz 1, 80335 Munich, Germany
Privacy policy	https://www.ardmediathek.de/datenschutz
Hosts	ard.de, ardmediathek.de, ati-host.net, xiti.com
Cookie name	atidvisitor, atuserid, atoptedout, idrxvr, atidx
Cookie expiry	Up to 12 months

Objection and removal option

You can change your consent at any time using the following option.

BR Mediathek

This website may embed content from BR Mediathek. If such content is activated, a connection to servers of Bayerischer Rundfunk may be established. Personal data such as IP address, browser information and information about the page accessed may be processed.

The use is based on your consent pursuant to Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time.

Cookie information

Provider	Bayerischer Rundfunk, Rundfunkplatz 1, 80335 Munich, Germany
Privacy policy	https://www.br.de/unternehmen/service/impressum/impressum-datenschutzerklaerung-unternehmen-v2-100.html
Hosts	br.de, ardmediathek.de, ati-host.net, xiti.com
Cookie name	atid, atidvisitor, atuserid, atoptedout, idrxvr, atidx
Cookie expiry	Up to 180 days

Objection and removal option

You can change your consent at any time using the following option.

Slideshare

This website may embed presentations via the Slideshare online portal. The provider is Scribd, Inc. If a page with embedded Slideshare content is accessed and the content is activated, a direct connection to the provider's servers may be established.

Usage data, device information, IP addresses and cookie information may be processed. The purpose and scope of data processing as well as your rights and settings options are described in the provider's privacy policy.

The use is based on your consent pursuant to Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time.

Cookie information

Provider	Scribd, Inc., 460 Bryant St, 100, San Francisco, CA 94107-2594 USA
Privacy policy	https://support.scribd.com/hc/en-us/articles/210129366-Global-Privacy-Policy
Hosts	slideshare.net, scribd.com, slidesharecdn.com
Cookie name	__utma, _ga, OptanonConsent
Cookie expiry	Up to 2 years

Objection and removal option

You can change your consent at any time using the following option.

X (formerly Twitter)

This website may include content from X (formerly Twitter). If such content is activated, a connection to X servers may be established. Personal data such as IP address, browser information and information about the page accessed may be transmitted to X.

If you are logged in to X, X may associate the visit with your user account. Further information can be found in the provider's privacy policy.

Cookie information

Provider	X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy policy	https://x.com/en/privacy
Hosts	x.com, twimg.com, twitter.com, t.co, platform.twitter.com, syndication.twitter.com
Cookie name	guest_id, personalization_id, app_shell_referrer, _sl, __utma, _ga_
Cookie expiry	Up to 13 months

Objection and removal option

You can change your consent at any time using the following option.

Vimeo

This website uses plugins from the Vimeo video portal. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA.

If you visit one of our pages that contains a Vimeo plugin and activate the content, a connection to Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo may also process your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo may be transmitted to Vimeo servers in the USA.

If you are logged in to your Vimeo account, Vimeo may associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.

The use of Vimeo is based on your consent pursuant to Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time.

Cookie information

Provider	Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA
Privacy policy	https://vimeo.com/privacy
Hosts	player.vimeo.com, vimeo.com, i.vimeocdn.com
Cookie name	vuid, player, flags, player_clearance, _cf_bm, _cfuvid, cf_clearance
Cookie expiry	Up to 2 years

Objection and removal option

You can change your consent at any time using the following option.

YouTube

This website embeds videos from the YouTube video portal. The provider is Google Ireland Limited. When you visit a page on which YouTube is embedded, a connection to YouTube servers may be established. YouTube may receive information about which page you have visited.

YouTube videos may be embedded using a plugin that only starts data transmission after the video is played, via the youtube-nocookie.com service, or using YouTube's original embed code. When the video is accessed, YouTube may store cookies on your device.

If you are logged in to your YouTube account, YouTube may associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

The use is based on your consent pursuant to Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time.

Cookie information

Provider	Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy	https://policies.google.com/privacy?hl=en&gl=en
Hosts	google.com, googlevideo.com, gstatic.com, youtube.com, youtube-nocookie.com, youtu.be, ytimg.com
Cookie name	NID, __Secure-ENID, __Secure-YNID, __Secure-YENID, PREF, pm_sess, SOCS
Cookie expiry	Up to 13 months

Objection and removal option

You can change your consent at any time using the following option.

Note on the Privacy Policy

Unless otherwise specified, the use of all information we have about you is subject to this Privacy Policy. The controller reserves the right to amend this privacy policy from time to time to ensure it always complies with current legal requirements.