Privacy Policy

The controller in accordance with the General Data Protection Regulation, other national data protection legislation of the member states and other data protection provisions is

Secretariat of the German Commission on Radiological Protection (SSK) at the 
Federal Office for Radiation Protection
Postal address:
Postfach 12 06 29
53048 Bonn, Germany
Email: info-ssk@bfs.de
Website: www.ssk.de

The Secretariat is administratively affiliated with the Federal Office for Radiation Protection (BfS).

Controller means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses etc.).

The data protection officer of the controller is:

Adina Inan
Willy-Brandt-Straße 5
38226 Salzgitter
Germany

Phone: +49 (0) 3018 333-1410
Fax: +49 (0) 3018 333-1415
Email: datenschutz@bfs.de

1. Scope of processing of personal data

In general, we only process our users’ personal data to the extent necessary to provide a functioning website, our content and services. The processing of our users’ personal data takes place regularly only with their consent. An exception shall apply in cases where prior consent cannot be obtained for practical reasons and where the processing of data is permitted by law.

2. Legal basis for the processing of personal data

Provided we have obtained consent from the data subject for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

With regard to the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This is also the case for processing operations necessary for the implementation of steps prior to entering into a contract.

Article 6(1)(c) of the GDPR serves as the legal basis in cases where the processing of personal data is necessary to comply with a legal obligation to which our authority is subject.

Where the vital interests of the data subject or another natural person require the processing of personal data, the legal basis is provided by Article 6(1)(d) of the GDPR.

3. Data deletion and storage period

Personal data of the data subject will be deleted or blocked once the purpose of storage no longer applies. Storage of data may also take place if provided for by the European or national legislator in regulations, laws or other provisions of the Union, to which the controller is subject. Data will also be blocked or deleted when the storage period prescribed by those standards expires, unless the continued storage of the data is necessary for the conclusion or performance of a contract.

1. Description and scope of data processing

Every time a user accesses our website and whenever a file is retrieved, data pertaining to this process is temporarily stored and processed in a log file.

The following data is stored on each access/retrieval:

• Date and time of access (time stamp)
• Request details and destination address (log version, HTTP method, web address of previous page (referrer), information about the programme retrieving the data (user agent string))
• Name of file accessed and volume of data transferred (requested URL including query string, size in bytes)
• Notification on whether retrieval was successful (HTTP status code)

The user’s IP address is not stored in this context. Log data is stored for 30 days.

2. Legal basis for the processing of data

The legal basis for the temporary storage of data is provided by Article 6(1)(e) of the GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session. For these purposes, we also have a legitimate interest in data processing under Article6(1)(e) of the GDPR.

4. Storage period

Data will be deleted as soon as no longer required for the purpose for which it was collected. In cases where data is recorded for the provision of the website, the data collected will be deleted once the respective session is terminated.

5. Possibility of objection and removal

The recording of data for the provision of the website and storage of data in log files are absolutely essential for the operation of our website. The user therefore does not have the possibility to object.

Statistical surveys

This website collects and stores data for statistical and optimisation purposes using the Matomo web tracking tool. This includes the following information: page title, search term (that led the user to the page), search engines, page URL, number of pages accessed, location of the visitor (country), provider, language settings of the browser, browser, operating system, screen resolution, browser plugins, times of visits, length of visits, entry web pages, exit web pages, downloads, referring websites. Users have the option to reject the storage of this information (tracking) by Matomo at any time. In the following section users can decide whether to allow or deactivate tracking by Matomo:

Objection to tracking by Matomo

Users have the option to reject tracking by Matomo at any time. Please specify here whether you wish to allow or deactivate tracking by Matomo:

If you have already activated the do-not-track option in your browser, Matomo will not collect any data. In this case, no further action needs to be taken.

(If you are using an older version of Internet Explorer, please make the following setting adjustments to deactivate Matomo: Tools → Internet options → Privacy → Advanced and enable the box next to “Override automatic cookie handling” and click OK to confirm. Once these settings have been activated, you can check the box to opt out.)

Please note: If you delete your cookies, the Matomo-deactivation cookie (opt-out cookie) will also be deleted and you may need to reactivate it.

1. Description and scope of data processing

On our website, users can subscribe to a free newsletter. Data entered into the input template (your email address) when registering for the newsletter will be transmitted to us.

The following data is also collected upon registration:

• Date and time of registration
• Date and time confirmation link is received

As part of the registration process, the user’s consent is requested for processing the data and reference is made to this privacy statement.
Data processed in connection with sending newsletters is not forwarded to third parties. The data is used for the sole purpose of sending newsletters.

2. Legal basis for data processing

Article 6(1)(a) of the GDPR serves as the legal basis for the processing of data following the user’s subscription to our newsletter where consent of the user has been obtained.

3. Purpose of data processing

The user’s email address is collected in order to deliver the newsletter.

4. Storage period

Data will be deleted as soon as no longer required for the purpose for which it was collected. The email address of the user will thus be stored as long as the newsletter subscription is active.

5. Possibility of objection and removal

Users may cancel their newsletter subscription at any time. A link to cancel the subscription can be found in each newsletter.

1. Description and scope of data processing

On our website there is a contact form which can be used to make contact with us electronically. When the contact form is used, the data entered into the input template is transmitted to us.

Alternatively, users may contact us using the email address given. In this case, the user’s personal data transmitted with the email is stored.

This personal data is not forwarded to third parties. The data is used for the sole purpose of processing the email conversation.

2. Legal basis for data processing

Article 6(1)(a) of the GDPR serves as the legal basis for the processing of data where consent of the user has been obtained. Article 6(1)(e) of the GDPR serves as the legal basis for the processing of data transmitted in an email.

3. Purpose of data processing

The processing of the personal data from the input template is solely for the purpose of processing the contact. In cases of contact by email, there is also a required legitimate interest in processing the data.

4. Storage period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. As regards personal data from the input template of the contact form and data transmitted via email, this is deemed to be the case once the conversation with the user has been terminated. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been definitively resolved.

Any additional personal data collected in the sending process is deleted after 7 days at the latest.

5. Possibility of objection and removal

Users have the possibility to withdraw their consent for the processing of personal data at any time with effect for the future. If users contact us by email, they can object at any time to the storage of their personal data. In such cases, the conversation cannot be continued.

It is possible for users to contact us via email to withdraw consent and object to the storage of data.

In this case, all personal data stored in connection with the contact will be deleted.

With regard to the processing of personal data, users of the website of the Secretariat of the German Commission on Radiological Protection enjoy the rights stipulated in Articles 12 to 22 of the GDPR:

• Right of access by the data subject pursuant to Article 15 GDPR
  This right grants full access to relevant personal data and other important criteria such as purposes of processing or storage period. The exemptions specified in Article 34 of the Federal Data Protection Act (BDSG) apply.
• Right to rectification pursuant to Article 16 GDPR
  This right gives users the possibility to rectify inaccurate personal data concerning them.
• Right to erasure (‘right to be forgotten’) pursuant to Article 17 GDPR
  This right gives users the possibility to have data deleted. For data to be deleted, it is necessary that the personal data is no longer required, was unlawfully processed or that the consent has been withdrawn. The exemptions specified in Article 35 BDSG apply.
• Right to restriction of processing pursuant to Article 18 GDPR
  This right gives users the possibility to provisionally prevent further processing of relevant personal data. This applies, in particular, in a review phase of the user establishing, exercising or defending other legal claims.
• Right to data portability pursuant to Article 20 GDPR 
  This provision gives users the right to obtain relevant personal data from the controller in a commonly used, machine-readable format, for example pdf, in order to pass it on to other controllers where necessary.
• Right to object pursuant to Article 21 GDPR
  This right provides users with the possibility to object, on grounds relating to their particular situation, to the processing of relevant personal data where this is justified for the purpose of public tasks or lies in the public or private interest. Pursuant to Article 36 BDSG, this provision does not apply where an official authority is legally obligated to process the data.
• Right to withdraw consent pursuant to Article 7(3) GDPR
  Users have the right to withdraw their consent for the future at any time. An option to withdraw consent is available to users on the website where the consent had been given.

Exercising these rights is free of charge and granted on request in line with your information rights. Please contact the Data Protection Officer of the Federal Office for Radiation Protection (BfS).