Data privacy
As the body responsible for data processing on this website, we, the Heidenheim District Office, take the protection of your personal data very seriously. We strictly adhere to all applicable data protection laws and regulations, in particular the General Data Protection Regulation (GDPR), the State Data Protection Act (LDSG), and the Digital Services Act (DDG). In the following, we would like to explain what data we process from you, for what purposes, and how we secure this data.
1. Usage data
When you contact us by email or via a contact form, we store the data you provide (your email address, your name and telephone number, if applicable) in order to answer your questions.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the criteria for the storage period.
2. Personal data
1. Use of the website
When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 (1) (f) GDPR).
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.
2. Enquiries by email or telephone
If you contact us by email or telephone, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of processing your request. Your data will not be passed on without your consent.
We expressly do not request the transmission of sensitive data within the meaning of Art. 9 GDPR.
The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
3. Cookies
The website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see 1.)
- Persistent cookies (see 2.)
1. Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
2. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
3. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website. The following links provide information about this option for the most commonly used browsers: Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-deletemanage-cookies Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647 We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again each time you visit.
4. The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the necessary data independently of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install a corresponding add-on, e.g., “Better Privacy” for Mozilla Firefox (https://addons.mozilla.ord/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
4. Timetable information widget
On our website, we offer the timetable information service from bwegt.de, a service provided by MENTZ GmbH (Grillparzerstraße 18, 81675 Munich). When using the form, the following non-personal data can be entered:
- Mobility restrictions
- Start and destination
- Departure and arrival times
- Travel period
- Means of transport
- Bicycle transport
- Transfer information
In addition, your IP address will be processed when you use the form and to display the results. The local storage of the respective browser is used to utilize the full functionality of the electronic timetable information service. In particular, the following information is stored depending on the function used:
• saveSettings: signals to the SL3+ when reloading that search options have been saved and are located in local storage
• settings: search options such as desired means of transport, connection type, maximum walking time, etc.
• The last map size used in a detailed view (only in mobile view)
• The last map size used in the standard view (only in desktop view)
• favorites: the suggestions declared as favorites in the start and destination entry
• lastODVSelected: the last selected items in the start and destination entry
• Status of the “refresh every minute” checkbox (departure monitor)
We embed the iFrame on our website on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) in order to offer users the advantages of direct timetable queries. You can delete the additional data collected and stored in local storage for improved usability by deleting the stored data in your browser. Depending on your browser provider, this can be done in the settings. In addition, anonymous statistics are compiled using the information provided on the start and destination stops, desired departure or arrival times, and the time of the query. No personal reference is possible here. Further information on the processing of personal data by Mentz can be found here: https://www.mentz.net/datenschutz/
5. Use of mein.toubiz #elements
We use the plugin mein.toubiz #elements from the provider land in sicht AG on our website.
This plugin displays database content, for which cookies are technically necessary. The data collected is:
- IP address
- Referrer URL
- Device information
- Interactions with the plug-in
The data will be deleted as soon as it is no longer needed for processing purposes.
If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time. The information generated by the cookie about the use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website.
If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie will be stored in your browser, which prevents usage data from being stored. If you delete your cookies, this will also delete the opt-out cookie. The opt-out must be reactivated when you visit this website again.
6. Data protection notice for the use of the prospectus module
We use the brochure module plugin from land in sicht AG on our website.
This plugin displays database content, for which cookies are technically necessary. The data collected is:
- IP address
- Referrer URL
- Device information
- Interactions with the plug-in
The data will be deleted as soon as it is no longer needed for processing purposes.
If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time. The information generated by the cookie about the use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website.
If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie will be stored in your browser, which prevents usage data from being stored. If you delete your cookies, this will also delete the opt-out cookie. The opt-out must be reactivated when you visit this website again.
7. Additional features and offerings on our website
1. In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will usually need to provide additional personal data, which we will use to provide the respective service and to which the aforementioned principles for data processing apply.
2. If the user of our website has provided personal data, we use this data only to respond to inquiries from the user of the website and/or customers, to process contracts concluded with the user of the website and/or customers, and for technical administration. We will only pass on personal data to third parties or otherwise transfer it if this is necessary for the purpose of contract processing or billing, or if the website user and/or customer has given their prior consent. The stored personal data will be deleted if the website user and/or customer revokes their consent to storage, if knowledge of the data is no longer necessary to fulfill the purpose for which it was stored, or if storage of the data is inadmissible for other legal reasons. Data for billing and accounting purposes is not affected by a request for deletion.
3. We sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
4. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.
8. Consent-Management-Tool CCM19
Type and purpose of processing
We use the consent management tool “CCM19” on our website.
To ensure data protection compliance, we have concluded a contract with the operator for the processing of orders. The operator will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
The operator of the corresponding tool is the
Papoo Software & Media GmbH
Auguststr. 4
53229 Bonn | Deutschland
+49 228 536 637 26
info@ccm19.de
www.ccm19.de
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right of withdrawal for consents already given.
The purpose of data processing is to obtain and document the necessary consent to data processing and thus comply with legal obligations. Cookies may be used for this purpose.
Among other things, the following information is collected and transmitted to CCM19
Consent ID, time of consent opt-in or opt-out, banner language, customer settings in banner – consent data, template, HTTP agent, HTTP referrer, HTTP page, anonymized IP data, IP address in 24-hour rollover in log files. When using advanced statistics or other statistical plugins: browser data (version)
Papoo Software & Media does not process the data itself; the data is stored as a log file. Access to our customers' log files is only granted with the prior consent of the customer. This data is not passed on to other third parties. Link to CCM19's privacy policy >
Due to the aforementioned legal obligation, we are subject to statutory retention periods and delete your data after these periods have expired. Detailed information about the cookies used on our website and their storage duration can be found in the “Consent Management Tool” (cookie icon).
9. Use of the Matomo analysis tool
This website uses the open source web analytics service Matomo. Matomo uses so-called “cookies.” These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about your use of this website is stored on our server. The IP address is anonymized before storage.
Matomo cookies remain on your device until you delete them.
The storage of Matomo cookies and the use of this analysis tool are based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the anonymous analysis of user behavior in order to optimize both its website and its advertising. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; consent can be revoked at any time.
The information generated by the cookie about the use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website.
10. External links
Our website contains links to external third-party websites. Once you click on the link, we have no influence on the collection and processing of personal data by the third party. Understandably, this behavior by third parties is beyond our control. We accept no responsibility for the processing of personal data by third parties.
11. Use of social plugins from Facebook and Instagram
The Leisure and Tourism Department of the District of Heidenheim is represented on various social networks under the name Heidenheimer Brenzregion in order to communicate with customers and interested parties active there and to provide information about offers, events, and services. When using the respective networks or platforms, the terms and conditions and data protection guidelines of the respective operators apply. The Leisure and Tourism Department of the District of Heidenheim only processes user data if they actively contact our respective page, communicate with us, write us messages, or post a comment.
The protection of your personal data is very important to us. That is why we do not directly implement the various social plugins. We only place links to these social networks on our pages. The corresponding social plugins are only activated when you follow the links. Please note that data will only be transmitted once you have activated the corresponding social plugins by clicking on the corresponding link. Simply visiting our pages does not trigger any data transmission.
If you activate data transmission by clicking on the corresponding link, the following data will be transmitted:
Plugins from the social network Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are integrated into our website. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our website (overview of Facebook plugins).
The plugin establishes a direct connection between your browser and the Meta server. Meta receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our platform to your Facebook account. This allows Meta to associate your visit to our site with your account.
We would like to point out that, as the website operator, we have no knowledge of the content of the data transmitted or how it is used by Meta. For more information, please refer to Facebook's privacy policy.
If you do not want Meta to associate your visit to our site with your Facebook account, please log out of your Facebook account or do not activate the social plugins.
Please note that you use this Instagram page and its functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting or rating).
When you visit our Instagram page, Meta Platforms collects, among other things, your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page.
The data collected about you in this context is processed by Meta and may be transferred to countries outside the European Union. Meta describes in general terms what information Meta receives and how it is used in its privacy policy. There you will also find information about how to contact Meta and how to set your advertising preferences.
Meta does not conclusively and clearly state how it uses the data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Meta stores this data, and whether data from a visit to the Instagram page is passed on to third parties.
When you access an Instagram page, the IP address assigned to your device is transmitted to Meta. According to Meta, this IP address is anonymized (in the case of “German” IP addresses) and deleted after 90 days. Meta also stores information about its users' devices (for example, as part of the “login notification” feature); this may enable Meta to assign IP addresses to individual users.
If you are currently logged in to Instagram as a user, a cookie with your Instagram ID is stored on your device. This enables Meta to track that you have visited this page and how you have used it. This also applies to all other Instagram pages. Instagram buttons embedded in websites enable Meta to track your visits to these websites and assign them to your Instagram profile. This data can be used to tailor content or advertising to you.
If you want to avoid this, you should log out of Instagram or deactivate the “stay logged in” function, delete the cookies on your device, and close and restart your browser. This will delete Instagram information that can be used to identify you immediately. This allows you to use our Instagram page without revealing your Instagram ID. When you access interactive features on the page (likes, comments, messages, and more), an Instagram login screen will appear. Once you log in, Meta will once again recognize you as a specific user.
12. Verwendung der Social Plugins von YouTube
Unsere Webseite verweist durch Links zudem auf die Seite des sozialen Netzwerkes YouTube. Wir betreiben auch hier eine Social Media Seite.
Wenn Sie auf einen Link zu YouTube klicken, werden Sie auf die jeweilige externe Seite bei YouTube weitergeleitet. Sind Sie zudem als Mitglied bei YouTube eingeloggt, kann der Betreiber, die YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA Ihren Besuch auf unserer Seite Ihrem jeweiligen Nutzer-Account zuordnen. Hierbei weisen wir darauf hin, dass die YouTube LLC zum Konzernverbund der Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA gehört.
Wenn Sie nicht möchten, dass YouTube über Ihren Besuch auf unserer Internetseite Daten sammelt und speichert, müssen Sie sich vor dem Klick auf den Link aus Ihrem YouTube-Account ausloggen.
Zweck und Umfang der Datenerhebung und die weitere Verarbeitung und Nutzung Ihrer Daten durch YouTube entnehmen Sie bitte der entsprechenden Google-Datenschutzerklärung.
Wir stützen den Einsatz von YouTube auf Art. 6 Abs. 1 Buchst. a) DSGVO. Mit Betätigung des Links unter gleichzeitiger Anmeldung bei YouTube erteilen Sie uns Ihre Einwilligung zur Datenverarbeitung. Jedenfalls ist die Datenverarbeitung nach Art. 6 Abs. 1 Buchst. f) DSGVO zulässig; Mit Betätigung des Links unter gleichzeitiger Anmeldung im jeweiligen sozialen Netzwerk erfolgt die Datenverarbeitung zu Werbezwecken und liegt daher in unserem berechtigten Interesse.
13. Duration of storage
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Mandatory legal provisions, in particular statutory retention periods, remain unaffected by this.
14. Your rights
In particular, you have the following rights:
a) Right to access information about your stored personal data and its processing (Article 15 GDPR).
b) Right to rectification of your data if it is inaccurate or incomplete (Article 16 GDPR).
c) Right to erasure of your stored personal data if one of the conditions set out in Article 17 GDPR applies.
d) Right to restriction of data processing, provided that the data has been processed unlawfully, the data is required for the assertion, exercise, or defense of your legal claims, or in the event of an objection, it is not yet clear whether the interests of the district administration office outweigh those of the data subject (Article 18(1)(b), (c), and (d) GDPR). If the accuracy of the personal data is disputed, you have the right to restrict processing for the duration of the accuracy check.
e) Right to transfer the personal data concerning you that you have provided to us, i.e. the right to receive this data in a structured, commonly used, and machine-readable format and to transfer this data to another controller (Art. 20 GDPR).
f) Right to object to certain data processing, provided that there is no compelling public interest in the processing that outweighs your interests and no legal provision requires the processing (Article 21 GDPR).
g) The right to exercise your right of withdrawal at any time without giving reasons and to amend or completely revoke the declaration of consent you have given with effect for the future. The legality of the processing carried out on the basis of the consent until revocation remains unaffected by this. To do so, please contact:
Landratsamt Heidenheim
Felsenstraße 36
89518 Heidenheim an der Brenz
post@landkreis-heidenheim.de
Tel. 07321 321-0
Fax 07321 321-2410
h) Right to lodge a complaint with the supervisory authority if you believe that the processing of your data is unlawful.
Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de
poststelle@lfdi.bwl.de
Tel. 0711 615541-0
Fax 0711 615541-15
Postfach 10 29 32, 70025 Stuttgart
15. Our data protection officer
You can reach our data protection officer at the contact details provided.
Datenschutzbeauftragte des Landkreises Heidenheim
Felsenstraße 36 (Haus B)
89518 Heidenheim an der Brenz
datenschutz@landkreis-heidenheim.de
Tel. 07321 321-2254