Please note: The English version is published here for information purposes only. Only the German text is legally binding.
Data Protection Information
Jump to content
Introduction
These pages provide information about the nature and extent to which the Federal Archives collects and processes personal data within the scope of its website and subpages in order to fulfil its tasks.
We only process personal data to the extent necessary. Which data is required and processed for what purpose and on what basis depends largely on the type of service you use and the purpose for which it is necessary.
We have taken technical and organisational measures to ensure that the data protection regulations are observed by us as well as by our external service providers.
Personal data is processed in accordance with the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG). The Federal Archives' privacy policy uses the terms of the GDPR.
1. Responsible Person and Data Protection Officer
Responsible person for the processing of personal data:
President of the Federal Archives
56064 Koblenz
Tel. +49 (0)261/505-0
E-Mail: koblenz@bundesarchiv.de
Contact
Data Protection Officer:
Bundesarchiv
56064 Koblenz
Tel. +49 (0)261/505-0
E-Mail: dsb@Bundesarchiv.de.
Postal Address
Bundesarchiv
Potsdamer Straße 1
56075 Koblenz
2. Basic Principles
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.
Personal data (such as name, address, e-mail address, etc.) and the IP address are collected from the contact forms, newsletter subscription, applications with personal registration (such as the digital reading room, invenio, image database, library catalogues, compulsory registration for films) and other research applications and requests.
Insofar as it is possible to enter personal or business data (such as an e-mail address, name, address, etc.), the entry of this data by the user is expressly voluntary. This does not apply to the collection of data in individual applications to fulfil legal or contractual obligations.
We attach great importance to the protection of minors. Children and persons under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request or collect personal data from children, nor do we pass this data on to third parties.
Your data is stored on specially protected servers in Germany. Very few individuals are authorised to provide technical and administrative support for the servers.
Each time the servers are accessed, data is also stored to secure the website. The IP address, the date and time of access and the specific destination address are recorded for a limited time only. This data is used exclusively for security purposes.
3. Legal Basis for Processing Personal Data
Insofar as the Federal Archives obtains the consent of the data subject to process personal data, the data processing is based on Art. 6(1)(a) of the GDPR; in the case of special categories of personal data within the meaning of Art. 9 of the GDPR, it is based on Art. 9(2)(a) of the GDPR.
When processing personal data required for the fulfilment of a contract to which the data subject is a party, Art. 6(1)(b) of the GDPR also serves in individual cases as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the Federal Archives processes personal data to fulfil its tasks in the public interest or in the exercise of official authority, the processing of this data is based on Art. 6(1)(e) of the GDPR in conjunction with the corresponding legal norm. The processing of your personal data is also based on Section 3 of the Act on the Promotion of Electronic Administration (eGovG) (Information on Public Authorities and Their Procedures in Publicly Accessible Networks), Art. 25(2)(2) of the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG).
4. Use of Cookies
Technical Cookies are required to use the web content of the Federal Archives.
Cookies are small text files assigned to the browser you use and stored on your hard drive by means of a characteristic string of characters through which certain information flows to the organisation that set the Cookie.
The legal basis for Cookies that are absolutely necessary to provide the service expressly requested by you is Section 25(2)(2) of the TDDDG. Any use of Cookies that is not technically absolutely necessary for this purpose constitutes data processing that is only permitted with your express and active consent in accordance with Section 25(1) of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR.
These serve the following purposes:
- To recognise your browser while you navigate through different pages of the Federal Archives’ web content via a so-called session ID (setting of Session Cookies).
The user’s consent is not required for technical Cookies, cf. Section 25(2)(2) of the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG). The Federal Archives is unable to provide these services without the use of these technically necessary Cookies. In addition, following your consent, a web analysis is carried out to create anonymous user statistics using Matomo. The Cookies used in this context lose their validity after one day (visitor Cookie for recognising your browser) or after 5 days (Cookie indicating your consent or rejection of the web analysis of your browser).
The following table lists all Cookies that we set as well as their purpose:
Cookie Name | Purpose | Technically necessary or optional |
JSESSIONID |
| Technically necessary |
FE_TYPO_USER |
| Technically necessary |
Cookie Banner |
| Technically necessary |
Matomo-Tracking |
| Optional |
Youtube-Cookie |
| Optional |
Google maps-Cookie |
| Optional |
It is possible to deactivate the website analysis (4.b) at Matomo and to object to the optional Cookies listed here. It is subsequently shown whether you have consented to website analyses via Matomo in the past. By clicking on the corresponding option, you can revoke your consent at any time or give your consent.
If you do not agree to the completely anonymous storage and analysis of this data from your visit, you can object to its storage and use at any time per mouse click below.
5. Data Processing in Connection with Visits to this Website
Every time a user accesses our website and every time a file is retrieved, data about this process is temporarily processed in a log file.
a) General information on data collection
The following data is stored for each access or retrieval:
- Date and time of access (time stamp), as well as the IP address of the accessing device or server
- Request details and destination address (protocol version, HTTP method, referrer, user agent string)
- Name of the retrieved file and amount of data transferred (requested URL incl. query string, size in bytes)
- Message on whether the request was successful (HTTP status code)
b) Cookies when accessing search applications
Each time a user accesses a research application that is accessible without registration as part of the Federal Archives’ website, session data is collected using Cookies and, together with a Session ID, temporarily processed and stored on the user’s browser.
Purpose of processing: The last status of the respective session with the form content,
the entries in the notepad and the search results are recorded for the user. The Session ID and duration are also used for statistical purposes. With the exception of the anonymous Session ID and access duration, this data is deleted at the end of the user-specific session.
c) Session Cookies for publications and in the shopping cart
Brochures and books are available for order on our publication pages. Cookies are used here which remain valid for the duration of your visit to the website. This is necessary for technical reasons to support the functioning of the shopping cart. This is done on the basis of Art. 6(1)(b) of the GDPR for the needs-based provision of information on the tasks assigned to the Federal Archives.
Session Cookies are small units of information that a provider stores in the working memory of the visitor’s computer. A randomly generated unique identification number, called a Session ID, is stored in a Session Cookie. A Cookie also contains information about its origin and the storage period. These Cookies cannot store any other data. The Session ID is used to compile your orders in your shopping cart.
These Session Cookies are deleted at the completion of your session. When you close the browser, your shopping cart is reset. The contents of the shopping cart collected up to that point must be recompiled if you end the session before completing the order process.
You can use any internet browser to see whether Cookies are set and what they contain.
Permanent Cookies that are stored as text files on the hard drive of the visitor’s computer and which allow the visitor to be recognised at a later time are not used on our website.
Most browsers are set to accept Cookies automatically. However, it is possible to deactivate the storage of Cookies or set the browser so that Cookies are only stored for the duration of the individual internet connection.
If you reject all Cookies, the shopping cart cannot be used to collect different publications and you can only order one brochure at a time.
d) Ordering printed items (publications)
If you order publications via this website, it is necessary to process your personal data in order to carry out pre-contractual measures and to fulfil the contract (to provide the items) in accordance with Art. 6(1)(b) of the GDPR.
The following personal data must be provided so that the order can to be processed:
- Name
- Street, house number
- Postal code, city and country
- E-mail address
This data is processed as part of the order. If the aforementioned data is not available, the order cannot be processed. The additional information, such as first name, institution and telephone number, is not required for processing, but serves to improve the processing of the order.
Written documents that are generated during the processing of the order are stored for five years. The period is determined by the administrative regulation for payments, bookkeeping and accounting (Sections 70 to 72 and 74 to 80 BHO (VV-BBR BHO, no. 4.7)).
We delete any further data once storage is no longer required or restrict processing if there are statutory retention obligations.
6. Applications with User Login (Registration)
In the case of applications with user login (registration), the user-specific information is stored on the server of the Federal Archives.
a) For registration with invenio-online and the online catalogue OPAC, personal data is collected as it was entered into the form, and which in accordance with the Federal Archives Use Regulations must also be provided when submitting a user request.
Purpose of processing: To avoid repeated user authentication.
This identity data is required to enable research and ordering of rights-related data as well as statistical analyses using extended functions beyond indexing information
Legal basis: The processing of user data is based on Art. 6(1)(1)(c) of the GDPR in conjunction with Section 3 of the Federal Archives Use Regulations.
b) Image database of the Federal Archives and the Press and Information Office of the Federal Government:
aa) The use of the images in the image database requires registration and thus active acceptance of the application for use by the Federal Archives. For this reason, the following personal data, which is also requested in the user application, is collected during registration:
- Salutation
- First name
- Surname
- Your address
- E-mail address
- Optional: Telephone number/mobile number
When registering with the “credit card” payment method, the credit card number is collected to validate your identity.
If you also use the shopping cart function and the payment function, the Federal Archives will process your data according to the credit card input mask. Purpose of processing: The registration data is required for the submission of a user application in order to enable research and ordering of data subject to rights and the use of the service with the help of extended functions beyond indexing information. Legal basis: The processing of user data is based on Art. 6 para. 1 lit. c GDPR in conjunction with § section 3 of the Federal Archives‘ User Ordinance.
The legal basis for payment transaction data is Article 6 (1) (b) GDPR. The payment data (first name, surname, booking data) are transmitted directly to the electronic payment platform of the federal and state governments (ePayBL) at the ITZBund for the purpose of payment processing.
bb) If you use the services of the Federal Image Archive in the same image database, the Federal Archives will record your identity data for the Press and Information of the Federal Government. The same applies to the data on payment transactions.
If you switch between the image services of the Press and Information Office of the Federal Government and the Federal Archives, there is no change of purpose in the use of the data.
Legal basis: The use of images from the Press and Information Office of the Federal Government is regularly used on a contractual basis (Art. 6( 1) (b) of the GDPR). The same applies to payment transaction data.
c) Compulsory registration for films
In addition to your identity data, as part of the obligatory registration, the Federal Archives collects the legally required filmographic data of film producers.
Purpose of processing: To register films produced in Germany.
Legal basis: The obligation to register films is based on Section 17 of the Federal Archives Act; the obligation to submit data is based on Art. 6(1)(1)(c) of the GDPR.
7. Use of ‘Matomo’ for Website Analysis
If you wish to reject the use of Matomo, please use the following checkbox.
If you do not agree to the storage and analysis of this data from your visit, you can object to its storage and use at any time per mouse click below.
If you have consented to the recording of your browser session by means of JavaScript tracking of the ‘Matomo’ software, the following data will be collected:
- IP address (shortened and pseudonymised, example: ‘77.87.229.100’ becomes ‘77.87.0.0’)
- Date and timestamp of the request
- Title of the website visited
- URL of the website visited
- URL of the previously visited page (referrer URL)
- Screen resolution used
- Time zone used
- Clicked or downloaded files
- Clicked outgoing links to other websites
- Bounce page
- Duration of page generation
- Browser language used
- Plugins used
- Browser used
- Operating system used
Employees of the Federal Archives who are specially authorised for this task can access the data stored by Matomo for this portal via the Matomo analysis interface. The analysis of the data enables the Federal Archives to analyse the surfing behaviour of our visitors as a whole. By analysing the data obtained, the Federal Archives is able to compile information about the use of the individual components on our website. This helps to continuously improve the website and its user-friendliness.
The visitor logs are only analysed in the restricted area of bundesarchiv.de (no determination of the provider or use of geo-IP, no multi-domain tracking) and deleted after 30 days.
Consent to data processing is based on Art. 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.
Further information can be found in the privacy policy.
8. Processing of Personal Data in the Context of Making Contact
The processing of personal data depends on the method of contact. There are differences between contact made by e-mail, through the contact form, by letter or telephone.
a) Contact by e-mail
In addition to using the employees’ personalised work email addresses and various functional mailboxes, it is also possible to contact us by email via this central email address: poststelle@bundesarchiv.de.
The organisational units will store the data you send (e.g.: surname, first name, address), but at least the e-mail address, as well as the information contained in the e-mail (including any personal data you may have sent) will be stored for the purpose of contacting you and processing your request, in accordance with the deadlines for the storage of documents set out in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).
Please note that the data is processed on the basis of Art. 6(1)(e) of the GDPR. Processing of personal data transmitted by you is necessary for the purpose of processing your request.
b) E-mail addresses without reference to the Federal Archives
E-mail addresses of third parties are also provided on the website of the Federal Archives. These addresses do not contain ‘Bundesarchiv.de’ after the @. If you use one of these addresses to contact us, the Federal Archives will not be responsible for processing your personal data. If you have any questions regarding the handling of your personal data by this third party, please contact them directly.
c) Contact via the contact form
You can contact the internet editorial team of the Federal Archives via this website using a form. The content of the contact form is transmitted via an encrypted https connection.
If you use the contact form for communication, you must enter your surname and first name as well as your e-mail address. Without this data, your request sent via the contact form cannot be processed. Providing your telephone number is optional and enables us – if you wish – to contact you with any queries. In addition, the date and time of your enquiry and your IP address are transmitted to us.
If we receive a message from you via the contact form or an e-mail, we will assume that we are authorised to reply by e-mail. Otherwise, you must expressly inform us of another form of communication.
Please note that the processing of the data transmitted via the contact form and the content it contains (including personal data transmitted by you) is carried out on the basis of Art. 6(1)(a) of the GDPR for the purpose of processing your request.
The storage of communications between you and the Federal Archives is governed by the time limits for the storage of documents set out in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).
d) Contact form for the permanent exhibition at the Rastatt branch office
On the subpage for the Rastatt branch office, the Federal Archives record personal data related to visitor groups as it appears in contact form.
Purpose of processing: To organise the scheduling of exhibition visits.
Legal basis: The processing is carried out to perform contractual measures for exhibition visits (Art. 6(1)(b) of the GDPR).
e) Contact by telephone
If you contact an employee by telephone, your personal data will be processed to the extent necessary to process your request.
f) Contact by letter
If you write a letter to the Federal Archives, the data you provide (e.g. surname, first name, address) and the information contained in the letter (any personal data you provide) will be stored for the purpose of contacting you and processing your request in accordance with the time limits for storing documents set out in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).
Please note that the data is processed on the basis of Art. 6(1)(e) of the GDPR. Processing of the personal data transmitted by you is necessary for the purpose of processing your request.
9. Processing of Personal Data in the Context of Applications for Stasi Documents
In order to access the Stasi files, an application must be submitted and thus personal data is collected. Only personal data is collected that is necessary for processing the application in accordance with the Stasi Records Act (Stasi-Unterlagen-Gesetz - StUG) or other legal provisions. Without this data, the application cannot be processed. This would mean that no decision can be made on your application or that it may not be possible to conduct a full search of documents.
Only the data you provide will be used to process your application. In individual cases, a residents' registration office enquiry may be made if correspondence cannot be delivered.
Once your application has been received, it will be registered and assigned a file number or log number which is linked to the personal data in the application.
Request to inspect a personal file
In the case of an application in accordance with Art. 12 ff. StUG (personal access to files), the following data will be collected and processed both in the case of a paper application and in the case of an online application:
a) Personal application
- Surname
- All first names
- Previous names, if applicable
- Date and place of birth
- Current address / correspondence address
- E-mail address and / or telephone number (information is voluntary)
- Previous residential addresses
- If applicable, details of other persons in the context of applications as a third party
b) Application as a close relative
- Surname
- All first names
- Previous names, if applicable
- Date and place of birth
- Current address / correspondence address
- E-mail address and / or telephone number (information is voluntary)
- Details of the missing or deceased person
- Details of the family relationship
- Information on the purpose of the application
c) Application for research and media
In the case of an application pursuant to Art. 32 ff. of the StUG (Research and Media), the following data is collected and processed:
- Name of the applicant and, if applicable, the institution
- Address
- E-mail address and/or telephone number (information is voluntary)
- Details of the application project including any persons named
We will only pass on the data we receive from you to third parties if you have expressly consented to this or if we are obliged to do so by law or on the basis of a court decision. The data collected and processed will be stored for at least 10 years in accordance with the legal requirements of Art. 40 (2)(3) of the StUG.
10. Processing of personal data in the context of applications for the use of archive records or personal and family research
For access to archive records or for personal research on documents of the Federal Archives regarding military personnel as well as for research on civilians from the former German eastern territories and settlement areas, an application must be submitted and thus personal data collected. In each case, only the personal data required to process the application is collected. Without this data, the application cannot be processed. This would mean that no decision can be made on your application or that it may not be possible to conduct a full search in the archive.
Only the data you provide will be used to process your application. In individual cases, a residents' registration office enquiry may be made if correspondence cannot be delivered.
Once your application has been received, it will be registered and a file or reference number or a user number will be assigned, which will be linked to the personal data of the application.
The following data is collected and processed for both paper and e-mail requests:
a) Request to use archive records
- Surname
- First name
- Name of the research service, if applicable
- Current address
- Occupation
- Nationality
- E-mail address
- Subject of use
- Purpose of use
- Client (name and address)
- Name of lecturer supervising the work (for examination papers)
- Name and address of assistants
b) Request for a person-related search for files of the Federal Archives on military personnel
Basic information on the person being searched
- Surname, maiden name too if applicable
- First name
- Date of birth
- Place of birth
- Date of death
- Branch of service or unit for the period 1849 to 1918
- Branch of service or unit for the period 1919 to 1945
- Unit and period after 1945 (for Federal Border Police until 1955/Federal Armed Forces or Garrisoned People's Police/National People's Army)
- Personal family relationship to the person being searched
c) Request for a person-related search in archive records of the Equalisation of Burdens Archive (Bayreuth branch of the Federal Archives)
Basic information on the person being searched for
- Surname, if applicable also maiden name
- First name
- Date of birth
- Date of death
- Place of residence and district (1939 - 1945)
- Personal relationship to the wanted person
Further information
- Information on the research interest
- Information on the objective of the information search
This data remains stored for as long as it is necessary to fulfil the legal tasks or until the legal or official retention obligations and periods have expired. The personal details in the application for the use of archive records as well as the information on use and the documents ordered by enquirers are stored permanently in the database of the Federal Archives.
11. Processing of Personal Data in the Context of Using Social Networks
Integration of Social Media
The Federal Archives has integrated social media components into the website www.bundesarchiv.de and is also active in some of these online services.
Operation and Use of Social Networks
The Federal Archives operates various social media sites, described in more detail below, to provide you with information on various key topics. These sites also offer an additional way to contact us. Operating social media channels is necessary for targeted and balanced public relations work, recruitment and the transmission of information by the Federal Archives. When you visit the site, the associated processing of your data is carried out for this purpose. In 1977, the Federal Constitutional Court ruled that the Federal Government’s public relations work is not only constitutionally permissible, but also necessary, as democratic decisions require informed citizens. A further ruling in 1983 confirmed this decision, as long as the government communicates its policies in a factual, correct, reasonable and restrained manner. Further judgements came to the same conclusion.
Statistical studies show that the use of media and the information behaviour of citizens is changing. More and more sections of the population are learning less about everyday events through “traditional” information channels, such as daily newspapers or television channels. Instead, media that operate exclusively or at least partially on the internet, above all social media platforms, are being used to obtain information. One of the aims of the Federal Archives’ public relations work is to reach as many sections of the population as possible and to provide information in line with its constitutional mandate. The Federal Archives uses social media channels alongside other essential media channels. This gives citizens the opportunity to learn about its work and make contact via different channels, without any change in quality level.
12.a Instagram and Facebook
12.a.i Information about the Instagram and Facebook pages
Instagram and Facebook are online services for sharing messages, photos and videos that belong to the Meta Group, formerly Facebook. The Federal Archives uses the technical platform and services of Meta Platforms Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information services it offers there. The Federal Archives would like to remind you that it assumes no liability when you use the Instagram or Facebook pages and its functions. This applies in particular to the use of the interactive functions (e.g. commenting, rating). The Federal Archives has no influence on data collection and its further use by Instagram or Facebook. For example, no information is provided about the extent to which, where and for how long the data is stored, to what extent Meta fulfils its existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. For this reason, we recommend that you read Meta’s data usage guidelines carefully at https://privacycenter.instagram.com/policy/ and make the appropriate privacy settings in your account.
12.a.ii Processing of private data by Meta
When you visit the Instagram or Facebook pages, Meta collects, among other things, your IP address and other information that is stored on your PC through Cookies. This information is used to provide the operator of the Instagram or Facebook pages with anonymised statistical information about the use of the Instagram or Facebook pages. The data collected about you in this context is processed by Meta Platforms Facebook Ireland Ltd. and may be transferred to countries outside the European Union. Meta describes what information it receives and how it is used in its data usage guidelines. It also provides information there on how to contact Meta and how to adjust the settings options for ads. The data usage guidelines are available at the following link: privacycenter.instagram.com/policy/.
The complete data policy of the Meta service can be found here: privacycenter.instagram.com/policy/.
Meta provides information on the use of Cookies as part of the Cookie policy for the Instagram and Facebook services: privacycenter.instagram.com/policies/cookies/.
Please note that Meta Platforms Facebook Ireland Ltd. is able to track your usage behaviour (across devices for registered users) beyond the Instagram and Facebook services on other websites by means of the Cookies it employs. This applies both to data subjects registered with the Instagram or Facebook services and those that are not registered there.
According to its own information, Meta stores data until it is no longer needed to provide its services and products or until the user’s account is deleted, whichever happens first. This depends on the circumstances of the individual case, in particular the type of data, why it is collected and processed and the relevant legal or operational storage requirements. You can find more information on the storage of data at de-de.facebook.com/privacy/policy.
12 a iii Instagram’s and Facebook‘s Page Insights
Instagram and Facebook process for their own purposes a range of personal data from visitors to their sites in their so-called Page Insights. The processing takes place regardless of whether visitors to their sites are registered with Facebook or Instagram or not and regardless of whether they are members of the Facebook or Instagram network. Users who access the Instagram or Facebook pages without being registered or logged in to Instagram also have the option of influencing the scope of data processing by means of a Cookie banner set by Meta. You can find more information about Instagram or Facebook Cookies at: www.facebook.com/privacy/policies/cookies/.
Page Insights are summarised, anonymised statistics. Site operators do not have access to the personal data processed in this context, only to the summarised, anonymised Page Insights. You can find more information for Instagram at: https://www.facebook.com/help/instagram/788388387972460/?locale=de_DE and for Facebook at: www.facebook.com/help/268680253165747/.
12.a.iv Rights of data subjects
The Instagram and Facebook pages offer you the opportunity to react to the Federal Archives’ posts, comment on them and send us private messages. Please consider carefully what personal data you share with the Federal Archives via the Instagram or Facebook pages. If you wish to prevent Meta from processing personal data that you have transmitted to the Federal Archives, please contact the Federal Archives by other means, e.g. via its homepage: www.bundesarchiv.de.
If users’ personal data is processed, they have the right to information, correction, objection, transferability and deletion of the data in accordance with the EU General Data Protection Regulation. Meta Platforms Facebook Ireland Ltd. is obliged to respond to enquiries from data subjects. Facebook provides further information on the rights of data subjects here: https://www.facebook.com/help/2069235856423257, for Instagram here: https://www.facebook.com/help/instagram/2060335334241802/?locale=de_DE.
Enquiries from users about the data processing that occurs when a user visits an Instagram or Facebook page, which are the sole responsibility of Meta Platforms Facebook Ireland Ltd., are forwarded to Meta by the Federal Archives. Users can contact Facebook’s data protection officer directly at the following link: www.facebook.com/help/contact/540977946302970.
Instagram and Facebook also provide information about privacy-friendly profile settings for Instagram profiles at: https://help.instagram.com/196883487377501?ref=dp or Facebook at: www.facebook.com/help.
12.b YouTube
12.b.i Information on the YouTube profile
The Federal Archives uses the video portal “YouTube” of Google Ireland Limited, Gordon Hou, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) for its video content. The Federal Archives would like to remind you that it assumes no liability when you use the YouTube service and its functions offered here. This applies in particular to the use of the interactive functions (e.g. commenting, rating, subscribing). The Federal Archives has no influence on the collection of data and its further use by YouTube. For example, no information is provided about the extent to which, where and for how long the data is stored, to what extent YouTube fulfils its existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on.
12.b.ii Processing of personal data by Google
Google processes your personal data. You can find more information about this here: policies.google.com/privacy. In some cases, information is transferred to the parent company Google Inc. based in the USA, to other Google companies and to external partners of Google, some of which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission and the adequacy decisions issued by the European Commission with regard to certain countries. You can find more information on data transfer here: policies.google.com/privacy
12.b.iii Data protection settings
YouTube uses the “enhanced privacy mode” option provided by Google. When you access a page that has an embedded video, a connection to the Google servers is established and the content is displayed on the website by notifying your browser. According to Google, in “extended data protection mode” your data – specifically which of our websites you have visited and device-specific information including the IP address – is only transmitted to the YouTube server in the USA when you watch the video. If you are logged in to Google or YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting the website of the Federal Office of Administration. You can find more information about the data protection settings on YouTube here: https://policies.google.com/privacy?hl=en#infochoices
You can adjust the cookie settings for YouTube on this website using the following button.
12.c X (formerly Twitter)
12.c.i Information on the X-Profile
The Federal Archives uses the technical platform and services of Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland for the short message service offered there. X is a short message service provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND, is generally solely responsible for the processing of personal data from persons living outside the United States.
The Federal Archives would like to remind you that it assumes no liability when you use the X (Twitter) short message service and its functions. This applies in particular to the use of the interactive functions (e.g. retweeting, liking).
12.c.ii Processing of personal data by X (Twitter)
The data collected about you when you use this service is processed by Twitter Inc. and may be transferred to countries outside the European Union. This includes your IP address, the application used, information about the device you are using (including device ID and application ID), information about websites accessed, your location and your mobile phone provider. This data is assigned to the data of your Twitter account or your Twitter profile.
We have no influence on the type and scope of the data processed by X (Twitter), the type of processing and use or the transfer of this data to third parties. You can find information about which data is processed by Twitter and for what purposes it is used in Twitter’s privacy policy: https://twitter.com/de/privacy; and about the option of viewing your own data on Twitter: https://help.twitter.com/de/managing-your-account/accessing-your-twitter-data.
You also have the option of requesting information via the X (Twitter) data protection form or the archive request: https://support.twitter.com/forms/privacy;
https://help.twitter.com/de/managing-your-account/how-to-download-your-twitter-archive.
12.c.iii Data protection settings on X (Twitter)
The X (Twitter) profiles of the Federal Archives offer you the opportunity to react to our posts, comment on them, etc. Please check carefully what personal data you share with us via our X (Twitter) profiles. If you wish to prevent X (Twitter) from processing personal data that you have transmitted to us, please contact us by other means.
You have the option of restricting the processing of your data in the general settings of your X (Twitter) account and under “Privacy and Security”. On mobile devices (smartphones, tablets), you can also restrict Twitter’s access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used. Further information on these points is available on the following X (Twitter) support page: https://support.twitter.com/articles/105576#
Twitter buttons or widgets integrated into websites and the use of Cookies enable Twitter to record your visits to these websites and assign them to your Twitter profile. This data can be used to offer you customised content or advertising. You can find information on this and the available settings options on the following Twitter support pages:
https://help.twitter.com/de/using-twitter/tailored-suggestions;
https://help.twitter.com/de/rules-and-policies/twitter-Cookies
12.d Alternative unconditional access to information
Alternatively, you can also access the information provided by the Federal Archives via the social media channels on its website https://www.bundesarchiv.de, which is also described in this data protection statement.
12.e Further data protection information and how to contact us
If you have any questions about the information provided by the Federal Archives, you can contact the Federal Archives using the contact form or the contact details under 2.
Further information on social networks and how you can protect your data can be found on the website of the Federal Office for Information Security (BSI) at https://bsi.bund.de/dok/sicherheitsoptionen.
13. Use of Map Material from Other Providers
We integrate the map service “Google Maps” from the provider “Google” on our website. When you use this service, Google processes personal data, in particular IP addresses and user location data, which are not collected without your consent.
Use the following button to activate or deactivate Google Maps via the cookie settings.
Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ire
- https://maps.google.de
- Privacy Policy: https://policies.google.com/privacy
- Opt-out option at Google (Opt-Out-Plugin): https://tools.google.com/dlpage/gaoptout?hl=en
14. Data for Sending the Newsletter
If you register for the e-mail newsletter, we require your e-mail address. This will be used exclusively to repeatedly dispatch of the archive newsletter. You consent to this when you provide us with your e-mail address. For this purpose, your e-mail address is transmitted via the software to Sendinblue GmbH (Brevo), the provider we use. The data is processed on the basis of your consent in accordance with Art. 6(1)(a) of the GDPR. We use this data exclusively to send the newsletter and for statistical evaluations to analyse system performance. We do not pass on your data to third parties and do not use it for any other purposes of our own. You can find more information about this company here:
You can unsubscribe from the newsletter at any time and thus automatically revoke your consent to the use of your data. A corresponding link is found at the end of each newsletter.
The registration system with an additional confirmation message containing a link for final registration (double opt-in) ensures that you explicitly wish to receive the newsletter.
When you register, your data is stored on our server and a confirmation message with a link to the final registration is generated and sent to the e-mail address you have provided. If you do not confirm the registration by clicking on the link in this e-mail, the data will be deleted after 48 hours.
Only when you confirm the link in the e-mail will your data for sending the newsletter be stored for the duration of your use of our newsletter service.
If you no longer agree to the storage of your data for this purpose and therefore no longer wish to use our service, you can unsubscribe from our newsletter at any time. The data you have provided will be deleted.
14.a Agency Advisory Newsletter
The newsletter is intended for employees of the federal administrations, in particular educators, supervisors, e-file teams and training centres.
Your e-mail address will be stored solely for the purpose of sending you the Agency Advisory Newsletter. We use your e-mail address for internal purposes only and will not pass it on to third parties. You can unsubscribe from the Agency Advisory Newsletter at any time by sending an e-mail to: behoerdenberatung-neuigkeiten@bundesarchiv.de.
15. Cooperation with Processors and Third Parties
If, in the course of our processing, we have to disclose data to other persons and companies (processors or third parties), transmit or otherwise grant them access to the data, this only takes place:
- on the basis of a legal authorisation (e.g. if a transfer of the data to third parties, such as payment service providers, in accordance with Art. 6(1)(1(b) of the GDPR is required to fulfil the contract).
- if you have given your consent (Art. 6(1)(1)(a) of the GDPR)
- if a legal obligation provides for this or
- on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 of the GDPR.
16. Your Rights
With regard to your personal data, you have the following rights vis-à-vis the Federal Archives
a) Right of access, Art. 15 of the GDPR
The right of access provides the data subject with the right to comprehensive information regarding data that concerns him/her and other important criteria, such as the purposes of processing or the duration of storage. The exceptions to this right set out in Section 34 of the BDSG apply.
b) Right to rectification, Art. 16 of the GDPR
The right to rectification allows for the data subject to have inaccurate personal data concerning them corrected.
c) Right to erasure, Art. 17 of the GDPR
The right to erasure allows for the data subject to have data erased. However, this is only possible if the personal data in question is no longer necessary, is being processed unlawfully or consent has been withdrawn. The exceptions to this right set out in Section 35 of the BDSG apply.
d) Right to restriction of processing, Art. 18 of the GDPR
The right to restriction of processing includes the possibility for the data subject to prevent further processing of the personal data concerning him/her for the time being. A restriction occurs above all in the examination phase of other rights exercised by the data subject.
e) Right to object to the collection, processing and/or use, Art. 21 of the GDPR
The right to object includes the possibility for data subjects to object to the further processing of their personal data in a particular situation, insofar as this is justified by the fulfilment of public tasks or public and private interests. The exceptions to this right set out in Section 36 of the BDSG apply.
f) Right to data portability, Art. 20 of the GDPR
The right to data portability allows the data subject to receive the personal data concerning him/her from the controller in a commonly used, machine-readable format in order to have it forwarded to another controller if necessary. According to Art. 20(3)(2) of the GDPR, however, this right is not available if the data processing serves the fulfilment of public tasks.
g) Right to withdraw consent, Art. 13 and 14 of the GDPR
If personal data is processed on the basis of consent, the data subject may withdraw this consent for the relevant purpose at any time. The lawfulness of the processing based on the consent given remains unaffected until the revocation is received.
You can assert the aforementioned rights in writing using the contact details provided.
h) Right to lodge a complaint with a supervisory authority Art. 77 of the GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you violates the GDPR.
The supervisory authority responsible for the Federal Archive is the Federal Commissioner for Data Protection and Freedom of Information. You can contact her as follows:
The Federal Commissioner for Data Protection and Information Freedom
Graurheindorfer Straße 153
53117 Bonn
Tel: 0228 997799 0
Fax: 0228 997799 5550
E-Mail: poststelle@bfdi.bund.de
This does not preclude recourse to another data protection supervisory authority. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.