Data Protection Policy
Definitions
This data protection policy uses, inter alia, the following terminology of the Regulation of the European Parliament and of the Council from 27 April 2016 pertaining to the protection of natural persons with regard to the processing of personal data, the free movement of data traffic, and the repeal of Directive 95/46/EC (General Data Protection Regulation – Regulation (EU) 2016/679):
- Personal data
Any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (such as a cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- Processing
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
- Controller
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- Recipient
A natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not.
- Processor
A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
- Consent
Consent of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
- Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
- Profiling
Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
Controller
ALM GbR
represented by the Director of the managing State Media Authority, Dr. Eva Flecken
Friedrichstraße 60
10117 Berlin
Phone: +49 30 2064690-0
Fax: +49 30 2064690-99
Email: vorsitz@die-medienanstalten.de
Data protection officer
For any questions or suggestions regarding data protection or possible complaints, please contact our data protection officer:
Franziska Halbhübner
c/o ALM GbR
Friedrichstraße 60
10117 Berlin
Phone: +49 30 2064690-17
Fax: +49 30 2064690-99
Email: halbhuebner@die-medienanstalten.de
Processing of your data when you access our website
Our website is available to anyone without prior registration. When you access our website, your Internet browser or mobile device automatically transmits the following data, which are recorded in access log files, to our web server for technical reasons: IP, directory protection user, date, time, webpages accessed, logs, status code, quantity of data, referrer, user agent, hostname retrieved.
Storing these data together with other personal data does not take place.
The legal basis for the storage of these data is Art. 6 para. 1 (e) GDPR.
We use these data to enable the use of our website and its technical administration, to ensure the security of our information technology systems, to prevent the misuse of our website, and to optimise our website. The collection and storage of these data are required for the operation of the website, to ensure the functionality of the website, and to deliver our websites’ content correctly. This processing is necessary for the performance of a task carried out in the public interest in accordance with Art. 6 para. 1 (e) GDPR.
We will delete the data as soon as they are no longer required for the achievement of the aforementioned purposes of their collection.
IP addresses are stored anonymously. To do so, the last three digits are removed, i.e., 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 60 days. Information about the used directory protection user are anonymised after one day.
Error logs, which log erroneous page views, are deleted after seven days. In addition to the error notifications, these contain the accessing IP address and, depending on the error, the website accessed.
Cookies
When using our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive and that give us certain information. Cookies cannot run programs or transmit viruses onto your computer. They generally serve to make websites more user-friendly and effective.
The legal basis for the use of cookies is Art. 6 para. 1 (e) GDPR.
We exclusively use cookies to optimise our internet presence. This processing is necessary for the performance of a task carried out in the public interest in accordance with Art. 6 para. 1 (e) GDPR.
This website uses the following types of cookies; the scope and operation thereof are explained below:
Session cookies
Session cookies are automatically deleted when you log out or when you close the browser. These store a so-called session ID, with which various requests from your browser can be assigned to the specific session. This allows your computer to be recognised upon return to our website.
You can configure your browser’s settings according to your wishes and can thereby refuse to accept cookies. In this case, however, it may be possible that not all the functions of this website can be used.
Website analysis using Matomo
In order to continually improve our service offer, ALM GbR uses the web analytics service software Matomo from the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, to analyse the use of our website. Matomo is only used if you have given your consent.
The legal basis for the processing of your data is then Art. 6 para. 1 (a) GDPR.
Insofar as you have given your consent, a cookie is then set. The data generated by this cookie about your use of this website (including your IP address, date, time, duration of visit, browser, operating system, visited pages) are transmitted to a server in Germany and stored there. However, as IP anonymisation is activated, your IP address is shortened by Matomo beforehand. Matomo will use this information to evaluate your use of the website and to compile reports on website activity. The collected, pseudonymous usage data are used for long-term evaluation purposes and are only deleted at the end of the evaluation phase.
You can prevent said evaluation by deleting existing cookies and by preventing the storage of new cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to use this website to the full extent. Preventing the storage of cookies is possible by changing the settings in your browser. If you do not want your navigation to be evaluated anonymously by Matomo, you can disable this function.