Privacy Policy

The Kreis Paderborn (District of Paderborn), as the operator of this website, takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection legislation, in particular the EU General Data Protection Regulation (GDPR), the North Rhine-Westphalia Data Protection Act (Datenschutzgesetz NRW – DSG NRW), and this Privacy Policy.

As a rule, you can use our website without providing personal data. Where personal data (such as names, addresses or email addresses) is collected on our website, this is done, wherever possible, on a voluntary basis or on the basis of a legal ground for processing (see below).

The recipients of the collected data are generally the employees of the Kreis Paderborn responsible for the relevant processing activities and/or data processors acting on our behalf. This data will not be disclosed to third parties without your explicit consent.

Please note that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities, even where data is transmitted in encrypted form via our website. Complete protection of data against access by third parties cannot be guaranteed.

The controller within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and other applicable data protection laws is:

Kreis Paderborn | Amt für Wirtschaft & Tourismus
Tourismus Paderborner Land
Aldegreverstraße 10-14
33102 Paderborn
Tel.: +49 5251 308-8111
Fax: +49 5251 308-898199
E-Mail: info@paderborner-land.de

Pursuant to Article 4(1) of the General Data Protection Regulation (GDPR), personal data means any information relating to an identified or identifiable natural person. This includes all information relating to your identity, such as your name, email address or postal address. Information that cannot be linked to your identity (such as statistical data, for example the number of users of the online service), on the other hand, is not considered personal data.

As a general rule, you can use our online services without disclosing your identity or providing personal data. In this case, we only collect general information about your visit to our online services. However, some of the services we offer require the collection of personal data. As a rule, we process this data solely for the purposes of operating and using these online services, in particular to provide the information you have requested. When personal data is collected, only the information that is strictly necessary must be provided. You may also be able to provide additional information, in which case such information is voluntary. We will indicate whether the relevant fields are mandatory or optional. Further details are provided in the relevant section of this Privacy Policy. No automated decision-making based on your personal data takes place in connection with your use of our online services.

Your information is processed on specially protected servers located within the European Union. These servers are protected by technical and organisational measures designed to prevent the loss, destruction, unauthorised access to, alteration or disclosure of your data. Access to your data is restricted to a small number of authorised individuals who are responsible for the technical, administrative or editorial management of the servers. However, despite regular checks, complete protection against all risks cannot be guaranteed.

Your personal data is transmitted over the Internet in encrypted form. We use SSL (Secure Sockets Layer) encryption for data transmission.

As a general rule, we use your personal data solely for the purpose of providing the services you have requested. Where we engage external service providers to deliver these services, they may access your data only for the purpose of providing the relevant services. We use technical and organisational measures to ensure compliance with data protection requirements and require our external service providers to comply with these requirements as well. Where data is disclosed to service providers in the context of processing on behalf of a controller pursuant to Article 28 of the General Data Protection Regulation (GDPR), these providers are bound by the GDPR, the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), other applicable statutory provisions and, by contract, the requirements of the Kreis Paderborn | Amt für Wirtschaft & Tourismus. If the Kreis Paderborn | Amt für Wirtschaft & Tourismus is required to do so by law or by court order, your data will be disclosed to authorities or other bodies entitled to receive such information, to the extent required. For other purposes, the Kreis Paderborn | Amt für Wirtschaft & Tourismus will not disclose your data to third parties without your express consent.

Furthermore, we do not disclose your data to third parties without your express consent, in particular for advertising purposes. Your personal data will only be disclosed if you have consented to such disclosure or if we are authorised or required to do so under statutory provisions and/or official or court orders. This may include, in particular, the provision of information for the purposes of criminal prosecution, the prevention of threats to public safety or the enforcement of intellectual property rights.

Where we obtain your consent to process your personal data, the legal basis for such processing is Article 6(1)(a) of the General Data Protection Regulation (GDPR). Where we process your personal data because this is necessary for the performance of a contract or in the context of a contractual relationship with you, the legal basis for such processing is Article 6(1)(b) GDPR. Where we process your personal data to comply with a legal obligation, the legal basis for such processing is Article 6(1)(c) GDPR.

Article 6(1)(f) GDPR may also serve as a legal basis for data processing where the processing of your personal data is necessary for the purposes of the legitimate interests pursued by our organisation or a third party, provided that your interests or fundamental rights and freedoms requiring the protection of personal data do not override those interests. In this Privacy Policy, we will always indicate the legal basis on which we rely when processing your personal data.

As a general rule, we erase your personal data or restrict its processing whenever the purpose for which it was stored no longer applies. However, data may be retained for longer where this is required by the legal provisions to which we are subject, for example statutory retention and documentation obligations. In such cases, your personal data will be erased or its processing restricted once the applicable retention or documentation requirements have expired. Where applicable, this Privacy Policy provides information on specific or different retention periods in the relevant sections.

Whenever you access our online services, we collect the following information about your computer, regardless of whether you are registered: your computer’s IP address, your browser’s request and the time of that request. We also record the status and the amount of data transferred in connection with the request. In addition, we collect information about the make and version of the browser being used and the computer’s operating system. We also record the website from which you accessed our online services. Your computer’s IP address is stored only for the duration of your use of the online services and is subsequently deleted or anonymised by truncation. The remaining data is stored for a limited period. We use this data to operate our online services, in particular to identify and rectify errors, monitor the utilisation of our online services, and make adjustments or improvements. Our legitimate interest in processing this data for these purposes constitutes the legal basis for processing under Article 6(1), first subparagraph, point (f) of the General Data Protection Regulation (GDPR).

Like many websites, our online services use cookies. Cookies are small text files stored on your computer that save certain settings and data for exchange with our online services via your browser. A cookie generally contains the name of the domain from which the cookie file was sent, information about the cookie’s age and an alphanumeric identifier.

Cookies enable us to recognise your computer and make any previously selected settings available immediately. They help us improve our online services and provide you with a better service that is more tailored to your needs. This also constitutes our legitimate interest in data processing pursuant to Article 6(1), first subparagraph, point (f) of the General Data Protection Regulation (GDPR).

The cookies we use are generally known as session cookies, which are automatically deleted when you end your browser session. In some cases, cookies with a longer storage period may also be used so that your settings and preferences can be taken into account the next time you visit our online services.

Most browsers are configured to accept cookies automatically. However, you can disable the storage of cookies or configure your browser to notify you whenever cookies are sent. You can also manually delete cookies that have already been stored via your browser settings.

Please note that if you refuse the storage of cookies or delete necessary cookies, you may only be able to use our online services to a limited extent or may be unable to use them at all.

The Matomo web analytics service (formerly known as Piwik) is used on this website. Each time our website is accessed, the following data is collected and stored in anonymised form:

• Operating system
• Browser
• Browser plug-ins
• Browser language
• The first two bytes of the IP address

legal basis
The legal basis for storing this data is Article 6(1)(e) of the General Data Protection Regulation (GDPR), in conjunction with Section 3(1) of the North Rhine-Westphalia Data Protection Act (Datenschutzgesetz NRW – DSG NRW).

Purpose of processing
Processing the above-mentioned user data enables us to analyse how visitors use our website. By evaluating the data collected, we can compile information about the use of individual components of our website. This helps us to continuously improve our website and its user-friendliness.

Duration of storage
As the data is anonymised and can therefore no longer be attributed to specific individuals, it is stored indefinitely.

As a rule, our online services do not contain advertising spaces. If advertising is displayed, it is delivered via external ad servers. The data collected in connection with online advertising (ad impressions and ad clicks) is used exclusively for statistical analysis and to prepare reports for advertisers. No personal data is used for these purposes. Cookies may be used when delivering advertising. We have no control over whether or how such cookies are used.

If you wish to use the contact form provided on our online services, we collect the personal data entered into the form, in particular your name and email address. We also store your IP address and the date and time of your enquiry.

We process the data submitted via the contact form exclusively for the purpose of responding to your enquiry or request. You can decide for yourself what information you wish to provide to us via the contact form. The legal basis for processing your data is your consent pursuant to Article 6(1), first subparagraph, point (a) of the General Data Protection Regulation (GDPR).

Once we have dealt with your enquiry, we initially retain the data in case any follow-up questions arise. You may request the deletion of your data at any time. Otherwise, the data will be deleted once the matter has been fully resolved, subject to any applicable statutory retention obligations.

If you contact us by email, we process in particular your name, email address and the content of your enquiry. The date and time of your enquiry are also automatically transmitted to us.

We process the data you provide exclusively for the purpose of responding to your enquiry or request. You can decide for yourself what information you wish to provide to us by email. The legal basis for processing your data is your consent pursuant to Article 6(1), first subparagraph, point (a), and Article 7 of the General Data Protection Regulation (GDPR). If your enquiry relates to the initiation of a package travel offer, please refer to the information provided below on this subject.

Once we have dealt with your enquiry, we initially retain the data in case any follow-up questions arise. You may request the deletion of your data at any time. Otherwise, the data will be deleted once the matter has been fully resolved, subject to any applicable statutory retention obligations.

If you book package holidays with us or submit enquiries relating to such holidays, we process the personal data you provide for this purpose. This includes data entered in our online form (such as title, surname, first name, address, country, email address, telephone number, details of the offer or enquiry, and travel dates) as well as information provided to us in writing, by telephone or by email.

We process this data for the purpose of providing information, initiating the conclusion of a contract, and carrying out and administering the trip, pursuant to Article 6(1), first subparagraph, point (b) of the General Data Protection Regulation (GDPR).

Your data is received by the controller and, where a contract is concluded, by the contractual partners whose involvement is necessary to carry out and administer the trip (e.g. hotels or other travel service providers), any processors engaged by us under contract, and our tax adviser. If no contract is concluded, we will delete the data by 31 January of the following year.

If a contract is concluded, we will retain the data until the trip has been completed and administered, unless tax or commercial law requirements necessitate a longer retention period. The maximum retention period is ten years pursuant to Section 147 of the German Fiscal Code (Abgabenordnung – AO).

For statistical purposes, we otherwise remove the personal identifiers from the data at the beginning of the year following the year in which the statistics are compiled.

If you request a brochure from us or submit an enquiry regarding a brochure, we process the personal data you provide for this purpose. This includes data entered in our online form (such as title, surname, first name, address, country, email address, telephone number and the title of the brochure requested) as well as information provided to us in writing, by telephone or by email.

We process this data for the purpose of handling your brochure request on the basis of your consent, pursuant to Articles 6(1)(a) and 7 of the General Data Protection Regulation (GDPR).

As a general rule, we retain the data for as long as your consent remains in place. For statistical purposes, we otherwise remove the personal identifiers from the data at the beginning of the year following the year in which the statistics are compiled.

Our online services contain links to the social networks Facebook, Google+ and Instagram, as well as to the microblogging service Twitter. You can identify these links by the respective providers’ logos. Clicking on a link will open the corresponding social media page, to which this Privacy Policy does not apply. For details of the privacy provisions applicable to these platforms, please refer to the respective providers’ privacy policies, available at:

Facebook: http://www.facebook.com/policy.php
Google: https://policies.google.com/privacy?hl=en
Instagram: https://privacycenter.instagram.com/policy/
X (formerly Twitter): https://x.com/en/privacy 

No personal data is transmitted to the respective providers before you click on one of these links. By accessing the linked page, you initiate data processing by the respective provider. Please note that you use the social media services and their features offered here at your own risk and responsibility. This applies in particular to the use of interactive features, such as sharing and rating content.

When you visit our Facebook fan page or become a fan of the page, personal data may be processed jointly by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and us. This depends, among other things, on whether you are a Facebook member and whether you are logged in to Facebook. In this respect, Kreis Paderborn | Amt für Wirtschaft & Tourismus and Meta Platforms Ireland Limited are joint controllers.

As part of the so-called “Facebook Insights” service, we and Facebook can access statistics, for example, about visits to our page and the people who follow our Facebook page. You can find the privacy information relating to Facebook Insights on our Facebook fan page or here. This information also explains how personal data is processed, how you can exercise your rights under Articles 15 et seq. and Article 77 of the General Data Protection Regulation (GDPR) in relation to Meta Platforms Ireland, and which supervisory authority is responsible for Facebook Insights. You may also contact us, and we will forward your request accordingly.

Personal data is processed to measure the reach of our page and to further develop our online content in a way that is tailored to our target audience. This also constitutes our legitimate interest in processing the data. The legal basis for processing is Article 6(1)(f) GDPR. The joint processing arrangements between the controller and Meta Platforms Ireland are governed by an agreement pursuant to Article 26 GDPR (the “Joint Controller Agreement”).

We will delete the data we process as soon as it is no longer necessary for the purpose for which it was collected. We have no influence over the deletion of data by Meta Platforms Ireland.

Kreis Paderborn | Amt für Wirtschaft & Tourismus uses the technical platform and services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Instagram”) for the information service provided here. In this respect, Kreis Paderborn | Amt für Wirtschaft & Tourismus and Instagram are each independent controllers.

Data processed by Instagram
Information about the data processed by Instagram and the purposes for which it is used can be found in Instagram’s Privacy Policy (see above).

Kreis Paderborn | Amt für Wirtschaft & Tourismus has no influence over the nature and scope of the data processed by Instagram, how it is processed and used, or whether it is disclosed to third parties. Nor does it have any effective means of control in this regard.

When you use Instagram, your personal data is collected, transferred, stored, disclosed and used by Instagram. Regardless of your place of residence, this data may be transferred to and stored and used in the United States, Ireland and any other country in which Instagram operates.

Instagram processes, among other things, data that you voluntarily provide, such as your name, username, email address and telephone number, if you upload or synchronise this information. We do not know how or which data Instagram uses for its own purposes, to what extent it does so, how activities are associated with individual users, or whether data is disclosed to third parties. You therefore use the service at your own risk in this respect.

Instagram also analyses the content you share to determine your interests. It stores and processes private messages that you send directly to other users and may determine your location using GPS data, information about wireless networks or your IP address in order to provide you with advertising or other content.

Finally, Instagram also receives information when you view content, even if you have not created an account. These so-called “log data” and, where applicable, cookies may include your IP address, browser type, operating system, information about the website you visited previously and the pages you access, your location, your mobile network provider, the device you use (including device and application IDs), your search terms and cookie information.

As Instagram is part of Meta Platforms, a provider based outside the European Union with a European establishment in Ireland, the original policy states that it is not subject to German data protection law. This may affect, for example, your rights to access, restrict or erase data, or your ability to object to the use of usage data for advertising purposes.

Information on managing the information Instagram holds about you or deleting it can be found on the following Instagram support page:

https://www.instagram.com/accounts/privacy_and_security/

Data processed by Kreis Paderborn | Amt für Wirtschaft & Tourismus
Kreis Paderborn | Amt für Wirtschaft & Tourismus also processes your data. Although we do not collect data directly through our Instagram account, we process data that you enter on Instagram, in particular your username and the content published under your account, when we share your posts, respond to them or publish posts of our own that refer to your account. In this way, data that you have made publicly available on Instagram may be incorporated into the services provided by Kreis Paderborn | Amt für Wirtschaft & Tourismus and made accessible to our followers.

The legal basis for this processing is our legitimate interest in communicating with the public and providing information to a broad audience through social media, pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Our website contains links to YouTube, a platform operated by Google. YouTube is operated by Google Ireland Limited for users in the European Economic Area, with Google LLC based in the United States. Simply visiting our website does not result in any data being transmitted to YouTube. Data is only transmitted when you click on the relevant link.

For more information about how YouTube handles user data, please refer to its Privacy Policy: https://policies.google.com/privacy?hl=en

Kreis Paderborn | Amt für Wirtschaft & Tourismus uses the technical platform and services of X Corp., 865 FM 1209, Building 2, Bastrop, TX 78602, USA, for the microblogging service provided here. X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, is responsible for data processing relating to individuals residing outside the United States.

Data processed by X
Information about which data is processed by X and for what purposes can be found in X's privacy policy.: https://x.com/de/privacy 

X Corp. has committed to the principles of the EU–US Privacy Shield. Further information can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Kreis Paderborn | Amt für Wirtschaft & Tourismus has no influence over the nature and scope of the data processed by X, how it is processed and used, or whether it is disclosed to third parties. Nor does it have any effective means of control in this regard.

When you use X, your personal data is collected, transferred, stored, disclosed and used by X Corp. Regardless of your place of residence, this data may be transferred to, stored and used in the United States, Ireland and any other country in which X Corp. operates. X processes, among other things, data that you voluntarily provide, such as your name, username, email address, telephone number and contacts from your address book, if you upload or synchronise them.

X also analyses the content you share to determine your interests. It stores and processes private messages that you send directly to other users and may determine your location using GPS data, information about wireless networks or your IP address in order to provide you with advertising or other content.

For analytical purposes, X Corp. may use analytics tools such as X Analytics or Google Analytics. Kreis Paderborn | Amt für Wirtschaft & Tourismus has no influence over X Corp.’s use of such tools and has not been informed of any potential use of them. If X Corp. uses tools of this kind in connection with the account of Kreis Paderborn | Amt für Wirtschaft & Tourismus, we have neither commissioned nor approved their use, nor have we otherwise supported it in any way. We are also not provided with the data obtained through such analyses. We can only view certain non-personal information about tweet activity through our account, such as the number of profile or link clicks generated by a particular post. Furthermore, we have no means of preventing or disabling the use of such tools on our X account.

Finally, X also receives information when you view content, even if you have not created an account. These so-called “log data” may include your IP address, browser type, operating system, information about the website you visited previously and the pages you access, your location, your mobile network provider, the device you use (including device and application IDs), your search terms and cookie information.

Through X buttons or widgets embedded in websites and the use of cookies, X can record your visits to these websites and associate them with your X profile. This data may be used to tailor content or advertising to your interests.

As X Corp. is a provider based outside the European Union with a European establishment in Ireland, the original policy states that it is not subject to German data protection law. This may affect, for example, your rights to access, restrict or erase data, or your ability to object to the use of usage data for advertising purposes.

You can restrict the processing of your data through your general X account settings and the “Privacy and safety” section. On mobile devices such as smartphones and tablets, you can also use the device settings to restrict X’s access to contacts, calendar data, photos, location data and other information. The available options depend on the operating system you use.

Further information on these topics is available on the following X support pages:
https://help.x.com/en/safety-and-security/x-privacy-settings 
https://help.x.com/en/privacy 

You can find out more about the option to view your own data on X here: https://help.x.com/en/managing-your-account/accessing-your-x-data 

Information about the inferences X has drawn about you is available here: https://x.com/settings/your_twitter_data

Information about personalisation and privacy settings, together with further links, is available here: https://x.com/settings/account/personalization 

You can also request information through the X Privacy Request Form or by requesting an archive of your data:
https://help.x.com/en/forms/privacy 
https://help.x.com/en/managing-your-account/how-to-download-your-x-archive 

Kreis Paderborn | Amt für Wirtschaft & Tourismus also processes your data, although we do not collect data directly through your X account.

We process data that you enter on X, in particular your username and the content published under your account, when we repost your posts, reply to them or publish posts of our own that refer to your account. In this way, data that you have made publicly available on X may be incorporated into the services provided by Kreis Paderborn | Amt für Wirtschaft & Tourismus and made accessible to our followers.

The legal basis for this processing is our legitimate interest in public relations and communicating information through social media, pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Kreis Paderborn | Amt für Wirtschaft & Tourismus uses the technical platform and services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), for the information service provided here. In this respect, Kreis Paderborn | Amt für Wirtschaft & Tourismus and Google are each controllers.

Data processed by Google 
We generally have no influence over the processing of personal data by Google. The data Google collects and how it is used depend on how you use its services and manage your privacy settings. When you visit our Google page, Google processes data to provide better services to its users. This may include basic information such as your IP address, language, advertisements you may find useful, the people you interact with most frequently online, and the YouTube videos you find interesting.

If you are not signed in to a Google Account, Google stores the data it collects using unique identifiers associated with the browser, app or device you use. This enables Google, for example, to retain your language settings across browser sessions. If you are signed in to a Google Account, Google also collects data that it stores in your account.

When you create a Google Account, Google processes your personal data, in particular your name, password and other information you provide. Google may also process data, such as an email address, even if you are not signed in to a Google Account, for example, to send you notifications about its services. When you use Google services, further data relating to you or sent to you by others may be processed, such as emails, stored photos and videos, documents, spreadsheets and comments on YouTube videos.

Further information about the data Google processes and the purposes of such processing is available here: 
https://policies.google.com/privacy?hl=de&gl=de

Google’s Privacy Checkup is available here:
 https://myaccount.google.com/privacycheckup?utm_source=pp&hl=de

Through Google’s Activity Controls, you can choose which types of activity are stored in your account. For example, you can enable location history to receive traffic updates for your daily commute or save your YouTube watch history to receive better video recommendations: https://myaccount.google.com/activitycontrols?hl=en

Data processed by Kreis Paderborn | Amt für Wirtschaft & Tourismus
If you have a Google Account, are signed in and visit our page, you may be displayed to us as a follower. We may then be able to view your profile name, the profile information you share and the content you publish there. The same applies if you like, comment on or share a post, even if you do not follow our page. If you send us a message through your Google Account, you voluntarily provide us with personal data on the basis of Articles 6(1)(a) and 7 of the General Data Protection Regulation (GDPR).

We may also access anonymised usage statistics for our page, collected using cookies or tracking pixels stored on your device by Google or integrated into websites. This may enable Google to identify your browser using a unique user code, which may also be linked to your profile on the platform. In such cases, the legal basis for our processing is our legitimate interest, pursuant to Article 6(1)(f) GDPR, in evaluating and improving our public relations activities.

We do not analyse your data beyond these purposes. We retain your data for as long as you follow our page. If you stop following our page, we will no longer process your data for this purpose. We delete data contained in messages once our correspondence with you has ended. This is considered to be the case when the circumstances indicate that the matter in question has been conclusively resolved.

This site uses web fonts provided by Google to ensure consistent font display. When you visit a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support these fonts, a standard font will be used. For more information about Google Web Fonts, please visit  developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy

This site uses the jQuery library for JavaScript functions, which is retrieved from a Google server. Your IP address and the page (Internet address) you visited are transmitted to a Google server. For more information, please refer to Google's privacy policy at https://policies.google.com/privacy

This website incorporates content from the destination.one database. The database is operated by humbermedia GmbH, Gaberlplatz 5, 93462 Lam.

When you visit our pages that display content from destination.one, a connection is established to the destination.one servers. The destination.one server is informed which of our pages you have visited. Destination.one may store various cookies on your device or use similar technologies for recognition purposes. Destination.one also collects corresponding log data. This information is used, among other things, to ensure optimal data display (e.g., location-based search), to collect user statistics, and to improve user-friendliness.

In addition, these pages may also contain content from third-party providers, in particular YouTube, as well as links to social plugins for Facebook, Twitter, etc. For more information, please refer to Hubermedia's privacy policy (https://www.hubermedia.de/datenschutz/)

Personal data will be deleted as soon as it is no longer required for the purpose for which it was collected; this is particularly the case when cookies are deactivated. Users of this website who do not want their data to be collected by destination.one can refuse to give their consent to its use from the outset or revoke their consent if they have already given it.

We attach great importance to explaining the processing of your personal data as transparently as possible and also informing you about your rights. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can address your concerns.

Under Article 15 of the “DSGVO”, you have the right to obtain information about your stored personal data free of charge at any time. If personal data concerning you is processed, you have the right to the following information:

• the purposes for which the personal data is processed;
• the category of personal data that is processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed;
• the planned duration of storage of your personal data or, if specific information on this is not possible, criteria for determining the storage period;
• the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the District of Paderborn, or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;

You have the right to request information about whether personal data concerning you is being transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 “DSGVO” in connection with the transfer.

Under Article 16 of the “DSGVO”, you have the right to request the immediate correction of personal data concerning you that is processed here. You can also request that incomplete data be completed.

According to Art. 17 “DSGVO”, you have the right to request that we delete your personal data. The data will be deleted immediately if one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You revoke your consent on which the processing is based in accordance with Art. 6 (1) (a), or there is no legal basis for the processing.
• The personal data was processed unlawfully.
• The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the Kreis Paderborn is subject.
• The personal data was collected in relation to the information society services offered in accordance with Article 8(1).

If the controller has made the personal data concerning you public and is obliged to delete it in accordance with Art. 17 (1) “DSGVO”, it shall take reasonable measures, including technical measures, taking into account the available technology and implementation costs, to inform controllers who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or copies or replications of this personal data.

The right to erasure does not apply if processing is necessary

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing under Union or Member State law to which the District of Paderborn is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Kreis Paderborn;
• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) “DSGVO”;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) “DSGVO”, insofar as the aforementioned right is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
• for the establishment, exercise or defense of legal claims.

According to Art. 18 “DSGVO”, you may request the restriction of the processing of personal data concerning you under the following conditions:

• if you dispute the accuracy of the personal data concerning you for a period of time that enables us to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
• the personal data is no longer required for the purposes of processing for the district of Paderborn, but you require it for the establishment, exercise, or defense of legal claims.

If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that

• the processing is based on consent pursuant to Article 6(1)(a) “DSGVO” and
• the processing is carried out using automated means,
• this is technically feasible,
• and the freedoms and rights of other persons are not affected.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Kreis Paderborn.

Pursuant to Art. 21 “DSGVO”, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) “DSGVO”.

The controller will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

You have the option, in connection with the use of information society services, to exercise your right to object by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

Your right to object may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

Pursuant to Art. 7 (3) “DSGVO”, you have the right to revoke your declaration of consent under data protection law at any time in an informal manner (e.g., by email or post). However, revoking your consent does not affect the legality of the processing carried out on the basis of your consent prior to revocation.

If you believe that our processing of your personal data is not in accordance with this privacy policy or the applicable data protection regulations, you can lodge a complaint with us. We will then investigate the matter and inform you of the outcome of the investigation. In addition, you also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 “DSGVO”, without prejudice to any administrative or judicial remedy.

If you have any questions about data protection, you can contact the official data protection officer at any time at:

Kreis Paderborn
Datenschutzbeauftragte/r
Aldegreverstraße 10-14
33102 Paderborn
Tel.: +49 5251 3088500
Fax: +49 5251 308898500
E-Mail: datenschutz@kreis-paderborn.de

The data protection supervisory authority responsible for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 3842-0
Fax: +49 21138424-10
Internet: www.ldi.nrw.de
E-Mail: poststelle@ldi.nrw.de