This privacy statement informs you about how and why personal data (hereinafter “data”) are processed, and to what extent, via this website, its functions and its content (hereinafter collectively referred to as “online services”). For further details or the legal meaning of the terms used, such as “processing” or “controller”, please see the definitions under Article 4 of the General Data Protection Regulation (GDPR).

CONTROLLER AND DATA PROTECTION OFFICER

Controller
Saxon State Ministry for Economic Affairs, Labour and Transport (SMWA)

Visitor address:
Wilhelm-Buck-Straße 2
01097 Dresden, Germany

Postal address:
Postfach 10 03 29
01073 Dresden, Germany

Tel.:
(+49) (0351) 56 40

Fax:
(+49) (0351) 5 64 80 68

cms@smwa.sachsen.de
De-Mail Adressepoststelle@smwa-sachsen.de-mail.de
http://www.smwa.sachsen.de/

Contact details of the data protection officer:

Data Protection Officer
Saxon State Ministry for Economic Affairs, Labour and Transport (SMWA)

Postal address:
Postfach 10 03 29
01073 Dresden, Germany

Tel.:
(+49) (0351) 56 48 5 200

Telefax:
(+49) (0351) 56 48 06 80

E-Mail: datenschutzbeauftragte@smwa.sachsen.de

TYPES OF DATA PROCESSED

  • Contractual data (e.g. personal master data, names or addresses).
  • Contact data (e.g. e-mail addresses, telephone numbers).
  • Usage data (e.g. pages visited, interest in content, access times).
  • Metadata/communication data (e.g. device information, IP addresses).

Categories of data subjects

Visitors to and users of the website/online services (hereinafter collectively referred to as “users”).

PURPOSE OF THE PROCESSING

  • Providing the website/online services, their functions and content.
  • Processing contact queries.
  • Steps to improve the website’s technological security.
  • Steps to identify and correct errors.
  • Anonymised measurements of marketing reach.

RELEVANT LEGAL BASIS

Under Article 13 of the GDPR, we hereby inform you of the legal basis for the data processing via this website. Unless otherwise stated below, the following applies for users from the area in which the General Data Protection Regulation (GDPR) applies (i.e. users from the EU and the EEC):

  • The legal basis for obtaining consent is Article 6 (1a) and Article 7 of the GDPR.
  • The legal basis for processing carried out to perform our services, provide our information, take steps in accordance with our contract and answer queries is Article 6 (1b) of the GDPR.
  • The legal basis for processing to comply with our legal obligations is Article 6 (1c) of the GDPR.
  • The legal basis for the processing necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6 (1e) of the GDPR.
  • The legal basis for processing for the purposes of our legitimate interests is Article 6 (1f) of the GDPR. The processing of data for purposes other than those for which they have been collected is based on Article 6 (4) of the GDPR.
  • The processing of special categories of data (pursuant to Article 9 (1) of the GDPR) is based on Article 9 (2) of the GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation), or if this takes place in the context of third-party services or the disclosure or transfer of data to other persons or companies, this shall only occur if it is to meet our contractual or pre-contractual obligations, or is based on a legal obligation or our legitimate interests. Except in cases where we obtain explicit consent or data transfer is contractually necessary, we shall only process the data, or have them processed, in third countries recognised as providing an adequate level of data protection, including US processors certified under the Privacy Shield, or based on specific guarantees such as the contractual obligations of the European Commission’s standard contractual clauses, certification, or binding internal data protection regulations (Articles 44 to 49 of the GDPR, European Commission information page).

DATA PROCESSING ON VISITS TO THIS WEBSITE

Every time you visit our website, data are collected which are required to provide the online services. These consist in:

  • your IP address,
  • address/name of the retrieved page/file,
  • date and time of retrieval, amount of data transferred,
  • message as to whether the retrieval was successful.

These data are temporarily processed in a log file. Before being saved, each data set is anonymised by altering the IP address.

The anonymised data are saved after your visit to the website on a server belonging to Wirtschaftsförderung Sachsen GmbH (the hoster).

When these general data and information are used, it is not possible to connect them to individual persons. This information is only used to

  • (1) correctly deliver the material on our website,
  • (2) optimise the content of our website and advertising for such content,
  • (3) ensure that our information technology systems and the technology of our website function in the long term and
  • (4) provide the criminal prosecution authorities with the information required to prosecute criminal offences in case of a cyberattack.

These anonymously collected data and information are evaluated to raise technological data protection and technological data security, and, ultimately, to maintain an optimal level of protection for the data we process.

The anonymous data on the server log files are stored separately from all other data.

The legal basis for processing and storing the data is Article 6 (1f) of the GDPR.

They shall only be transferred to third parties (e.g. criminal prosecution authorities) if we are legally obliged to do so or if such transfer is necessary for legal or criminal prosecution in the case of attacks on the communications technology.

RIGHTS OF THE DATA SUBJECT

Right of access

You have the right to obtain confirmation as to whether data concerning you are being processed. You are entitled to access to these data and to any further information. Moreover, you are entitled to a copy of the data in accordance with legal requirements.

Right to rectification

You may request the completion or rectification of the data concerning you in accordance with legal requirements.

Right to erasure and restriction of processing

In accordance with legal requirements, you have the right to have data concerning you erased without undue delay or, alternatively, to have its processing restricted in line with legal requirements.

Right to data portability

In accordance with statutory requirements, you have the right to receive data which you have provided to us in a structured, commonly used and machine-readable format, or to have the data transmitted to another service provider.

Lodging complaints with a supervisory authority

You also have the right to lodge a complaint with the competent supervisory authority, the Saxon Data Protection Officer.

Postal address:
Der Sächsische Datenschutzbeauftragte
Kontor am Landtag
Devrientstraße 1
01067 Dresden

Right to withdraw consent

Insofar as you have given us consent to process certain data, you may withdraw that consent at any time with future effect.

Right to object

In all other cases in which data are processed when you use this site, you have the right under Article 21 of the GDPR to object at any time to the data processing on grounds relating to your particular personal situation. If the personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.

Erasure of data

The data processed via the website shall be erased or their processing restricted in accordance with legal requirements. Unless expressly stated otherwise in this privacy statement, the data shall be erased or their processing restricted as soon as they are no longer required for their purpose and their erasure does not conflict with any statutory record-keeping duties.

If data are not erased because they are required for other legal purposes, the processing of such data shall be restricted. This means that the data are made unavailable and only processed for the legally permissible purposes. One example of this is data which has to be stored for commercial reasons or under tax law.

Google Tag Manager

On this website, we use the Google Tag Manager, a tool provided by Google Ireland Limited that allows us to manage website tags centrally. These are used, for instance, to integrate Google Analytics into this website. The Tag Manager is only a means of implementing tags and does not itself process any of the users’ personal data. Please note the following information about Google’s services with regard to the processing of users’ personal data. Additional information provided by Google can be found at:

https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Analytics

On this website, we use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google uses various cookies for this purpose. The information generated by the cookie about your use of this website is generally transmitted to and stored by Google on servers in the USA.

Google uses this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing us with other services relating to the use of this website and the Internet. This may involve pseudonymised user profiles being created using the processed data.

We only use Google Analytics with IP anonymisation activated. This means that Google truncates your IP address while it is still within member states of the European Union or other States Parties to the Agreement on the European Economic Area before data are transmitted to the USA. In exceptional cases only, the full IP address is transmitted to a Google server in the USA and truncated there. Your IP address, as ascertained from your browser, is not brought together with other data gathered by Google.

Users can prevent the cookies from being stored by adjusting their browser software accordingly. You can also prevent Google from collecting and processing these data by downloading and installing the browser plugin available via the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

If we ask users for their consent (e.g. consent to a cookie), this processing is on the basis of Article 6 (1a) of the GDPR. In all other cases, our users’ personal data shall only be processed on the basis of our legitimate interests (i.e. our interest in analysing, optimising and economically operating our online services in line with Article 6 (1f) of the GDPR).

If data are processed in the USA, please note that Google is certified under the Privacy Shield agreement and thus guarantees that it complies with European data protection law or a level of protection which is at least equivalent thereto. For further information, please see:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information on data use by Google, possible settings and options for objecting can be found in Google’s privacy policy at:

https://policies.google.com/privacy

and in the Google ad settings at:

https://adssettings.google.com/authenticated

Users’ personal data are erased or anonymised after 14 months.

AMENDMENTS AND UPDATES TO THE PRIVACY STATEMENT

Please inform yourself regularly about the content of this privacy statement. We amend the privacy policy as and when this is required due to changes in data processing. Changes in data processing may make it necessary for you to update your consent, or give consent again after it has already been given.