Start

Privacy statement

Data Privacy

Privacy statement

Protecting your personal data is of great importance to the Federal Ministry of Agriculture, Food and Regional Identity (BMLEH). We are processing personal data only to the extent necessary and with due regard for the applicable data protection provisions, notably the General Data Protection Regulation (GDPR), Federal Data Protection Act, and the Telecommunications Digital Services Data Protection Act. The following content serves to explain what personal data will be processed if you access this website, what purpose data processing serves and what legal foundation each processing is based on.

1. Data controller and Data Protection Officer

Data controller

The agency responsible for the processing of personal data submitted to this website is the Federal Ministry of Agriculture, Food and Regional Identity Division 625 Global Forum for Food and Agriculture Berlin Office Visitor’s address: Wilhelmstraße 54, 10117 Berlin, Germany Postal address: 11055 Berlin E-mail: 625@bmleh.bund.de

Data Protection Officer

Should you have any questions on data protection, please contact the Data Protection Officer at the Federal Ministry of Agriculture, Food and Regional Identity: Data Protection Officer Federal Ministry of Agriculture, Food and Regional Identity P.O. Box 14 02 70 53107 Bonn E-mail: bds@bmleh.bund.de

2. General information on data protection

Personal data

Personal data comprise any information relating to an identified or identifiable natural person. This includes in particular names, contact details, IP addresses and other information that can be directly or indirectly assigned to a person.

Legal bases for data processing

If personal data is processed in connection with the performance of public tasks, the applicable legal foundation is Article 6 (1) letter e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act. If processing is necessary for compliance with a legal obligation, the applicable legal basis is Art. 6 (1) letter c) of the GDPR. Insofar as the processing requires the consent of the data subject, the applicable legal basis is Art. 6 (1) letter a) of the GDPR and, where relevant, Section 25 (1) of the Telecommunications Digital Services Data Protection Act. Given consent may be withdrawn at any time with effect for the future. If processing is necessary for the performance of a contract or for taking steps prior to entering into a contract, the applicable legal basis is Art. 6 (1) letter b) of the GDPR. To the extent that the vital interests of the data subject or of another natural person are to be protected on a case-by-case basis, the processing is carried out on the basis of Art. 6 (1) letter d) of the GDPR. Automated decision-making, including profiling, does not take place, unless explicitly declared otherwise in this privacy statement.

Storage period

Personal data will only be stored as long as necessary for fulfilling the respective purpose of processing or mandatory under legal data retention obligations. The data will be deleted afterwards, unless legal data retention obligations provide otherwise.

Recipients of personal data

Personal data will only be transmitted to third parties to the extent that this is admissible for the fulfilment of legal duties, for the performance of a contract, due to legal obligations or based on consent. If external service providers process personal data on our behalf, the processing is based on a data processing agreement in accordance with Art. 28 of the GDPR.

3. Data processing when visiting this website

Provision of the website and log data

When you access this website, the hosting provider and the IT systems used will process the technically necessary information as server log files. This includes in particular:
  • date and time of access,
  • IP address of the accessing terminal device,
  • browser and operating system used,
  • referrer URL,
  • accessed webpages and files,
  • HTTP status code and
  • any other technical information required for delivering the website.
This data is processed in order to guarantee the secure and stable operation of the website free from technical errors, as well as to ward off and analyse attacks on the IT infrastructure. The legal foundation is Art. 6 (1) letter e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act, and, where relevant, Art. 6 (1) letter c) of the GDPR.

Hosting

The website is hosted by the following provider: ALL-INKL.COM – Neue Medien Münnich Owner: René Münnich Hauptstraße 68 02742 Friedersdorf Further information on data processing by the hosting provider is available at: All-Inkl Privacy Policy. A data processing agreement has been concluded with this provider.

Content delivery network and security through Cloudflare

For protection and optimised delivery of our web services we are using Cloudflare. The service provider is: Cloudflare Inc. 101 Townsend St. San Francisco, CA 94107 USA Cloudflare provides a content delivery network (CDN) and security features. Cloudflare guides the data traffic between your browser and our website through the Cloudflare systems. The aim is in particular to avert unauthorised access attempts and improve the availability and secure provision of our internet services. The applicable legal foundation for processing is Art. 6 (1) letter e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act to the extent that data processing is necessary for the secure provision of the web services in the performance of public tasks. Insofar as legitimate technical protection interests are additionally taken into account on a case-by-case basis, the processing is carried out on the basis of Art. 6 (1) letter i) of the GDPR. The transfer of personal data to the USA cannot be ruled out. Cloudflare is certified under the EU-U.S. Data Privacy Framework. In addition, standard contractual clauses from the European Commission are used. For further information, please go to: Cloudflare Privacy Policy. A data processing agreement has been concluded with Cloudflare.

4. Cookies and consent management

Cookies

This website uses cookies and other similar technology. Cookies are small text files stored on your terminal device. They serve to provide the website in technical terms, to ensure its security and – with appropriate consent – to enable statistical evaluations. We use technically necessary cookies for the website to function properly and to ensure the security of the website. The legal foundation for this is Art. 6 (1) letter e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act, and, where necessary, Section 25 (2) of the Telecommunications Digital Services Data Protection Act. If cookies or other similar technologies are used for statistical, analytical or other not strictly necessary purposes, data will be processed exclusively on the basis of your given consent in accordance with Art. 6 (1) letter a) of the GDPR and Section 25 (1) of the Telecommunications Digital Services Data Protection Act. You may revoke the consent given at any time with effect for the future or adjust your settings via the consent management used.

Cookiebot consent management

We are using Cookiebot to obtain, manage and document consent given by users. The service provider is: Usercentrics A/S Havnegade 39 1058 Copenhagen Denmark When a user accesses the website, a connection with the Cookiebot server is established in order to record and document your cookie settings and, if relevant, the consent you may have given. This could mean that, in particular, your consent data, shortened IP address, browser information and time stamp are being processed. The data is processed to fulfil our legal obligation to provide proof of your consent in compliance with data protection requirements. The legal foundation is Art. 6 (1) letter c) of the GDPR. A data processing agreement has been concluded with Cookiebot.

5. Contact

Contact form

If you send us an inquiry through the contact form, the data you have submitted, including the contact details you have entered, will be processed exclusively to process your request and in case you make any follow-up requests. If your request is related to the performance of public tasks, the applicable legal foundation for data processing is Article 6 (1) letter e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act. If your request is related to a contract or to steps prior to entering into a contract, the applicable legal foundation for processing is Art. 6 (1) letter b) of the GDPR. If consent has been obtained, the legal basis is Art. 6 (1) letter a of the GDPR. The data will be deleted as soon as the storage purpose ceases to apply and if no legal data retention obligations provide otherwise.

Inquiries by e-mail, phone or fax

If you contact us by e-mail, phone or fax, the personal data you submit will be processed for the purpose of processing your request. Depending on the content of the request, the legal foundation for processing is Art. 6 (1) letter e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act, Art. 6 (1) letter b) of the GDPR, or, where relevant, your consent given in accordance with Art. 6 (1) letter a) of the GDPR. The data will be deleted as soon as your request has been handled and if no legal data retention obligations provide otherwise.

6. Web analysis and services used

Google Tag Manager

This website uses Google Tag Manager. The service provider is: Google Ireland Limited Gordon House Barrow Street Dublin 4 Ireland Google Tag Manager is used for the technical administration of this website and for incorporating other services into this website. While the service itself does not create any user profiles and, according to the service provider, does not save any cookies, it can process technical data, notably your IP address. This service is only being used if technologically necessary or covered by your consent. If consent is necessary for incorporating downstream services, the applicable legal basis for processing is Art. 6 (1) letter a) of the GDPR and Section 25 (1) of the Telecommunications Digital Services Data Protection Act. Google is certified under the EU-U.S. Data Privacy Framework. For further information, please go to: Data Privacy Framework – Google.

Google Analytics

If you have given consent, this website will use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the statistical evaluation of the use of this website. In this process, the data processed can, in particular, include page views, time spent in the website, technical device details, rough location data, interactions and the usage history. The data is processed exclusively on the basis of your consent in accordance with Art. 6 (1) letter a) of the GDPR and Section 25 (1) of the Telecommunications Digital Services Data Protection Act. We use Google Analytics with active IP anonymisation. Within the European Union or the European Economic Area, the IP address is shortened before being further processed. Nonetheless, a transfer to Google servers in the USA cannot be ruled out. Google is certified under the EU-U.S. Data Privacy Framework. In addition, standard contractual clauses from the European Commission are used. For further information, please go to: Google Analytics privacy notice. You may revoke the consent given at any time via the cookie settings. You may also prevent the collection of data by Google Analytics by installing the browser add-on available under the following link: Google Analytics Opt-out Browser Add-on. A data processing agreement has been concluded with Google.

7. Embedding of media and other content

YouTube in the extended data protection mode

This website contains embedded videos from YouTube. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are embedded in the extended data protection mode. A connection to YouTube servers may be established simply by clicking on a webpage with an embedded video. Actively playing a video may trigger other data processing processes by YouTube, which we have no influence on. YouTube videos are embedded and played only if you give your consent in accordance with Art. 6 (1) letter a) of the GDPR and Section 25 (1) of the Telecommunications Digital Services Data Protection Act, insofar as cookies, local storage elements or similar technologies are being used for this purpose. A transfer of personal data to the USA cannot be ruled out. Google is certified under the EU-U.S. Data Privacy Framework. For further information, please go to: Google privacy policy.

Font Awesome (local hosting)

We locally embed Font Awesome on our servers for the harmonised display of symbols and fonts. There is no connection to external Fonticons, Inc. servers in the process. Therefore, no separate transfer of personal data to third parties takes place. For further information, please go to: Font Awesome Privacy Policy.

8. Data security

For security reasons and for the secure transfer of confidential content, this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the address bar of your browser and the lock icon in the browser display.

9. Your rights

In accordance with legal provisions, you have the following rights vis-à-vis the data controller:
  • Right of access in accordance with Art. 15 of the GDPR
  • Right to rectification in accordance with Art. 16 of the GDPR
  • Right to erasure in accordance with Art. 17 of the GDPR
  • Right to restriction of processing in accordance with Art. 18 of the GDPR
  • Right to data portability in accordance with Art. 20 of the GDPR, insofar as the legal preconditions apply
  • Right to withdrawal of consent in accordance with Art. 7 (3) of the GDPR with effect for the future
  • Right to object to processing in accordance with Art. 21 of the GDPR

Right to object

If personal data is being processed based on Art. 6 (1) letters e) or f) of the GDPR, you have the right to object, on grounds relating to your particular situation, to processing at any time. Where the objection is justified, the personal data will no longer be processed, unless there are compelling legitimate grounds for the processing.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for federal authorities is the Federal Commissioner for Data Protection and Freedom of Information. Federal Commissioner for Data Protection and Freedom of Information Graurheindorfer Straße 153 53117 Bonn E-mail: poststelle@bfdi.bund.de

10. Update and changes to this privacy statement

This privacy statement will be updated as needed in order to adapt it to new factual or legal frameworks.