Privacy Statement

As the protection of your personal data is of great importance to Federal Office of Civil Protection and Disaster Assistance (Bundesamt für Bevölkerungsschutz und Katastrophenhilfe – BBK), we will process personal data only to the extent required. The services used by you and the tasks for which we need the data largely determine which data will be required and processed for which purpose and on what basis they will be collected and processed.

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly – in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

More detailed information as to which data will be collected for which purpose and on what basis, how you can contact the responsible agency (controller) and the data protection officer(s) and what rights you have in relation to the processing of your personal data is given in this privacy statement.

1. Controller and data protection officer

The controller responsible for the processing of personal data is the:
Bundesamt für Bevölkerungsschutz und Katastrophenhilfe (BBK)
(Federal Office of Civil Protection and Disaster Assistance)
Provinzialstraße 93
53127 Bonn
Phone: +49-(0)22899-550-0
Fax: +49-(0)22899-550-1620
E-Mail: poststelle@bbk.bund.de

Should you have any specific questions relating to protection of your data, please contact the data protection officer of the Federal Office of Civil Protection and Disaster Assistance (BBK):

Beauftragter für den Datenschutz im BBK
Bundesamt für Bevölkerungsschutz und Katastrophenhilfe
Provinzialstraße 93
53127 Bonn
Phone: +49-(0)22899-550-0
E-Mail: datenschutz@bbk.bund.de

The following statement provides an overview of how the Federal Office of Civil Protection and Disaster Assistance (BBK) will ensure the protection of your data and which kind of data will be collected for which purpose and on what basis.

2. Processing of data – access to the website

2.1 Access to www.warnung-der-bevölkerung.de

With each visit to a website, data required for providing the services of the website www.warnung-der-bevölkerung.de will be collected and exchanged. These are:

  • IP address of the Internet Service Provider,
  • Type and version of your Internet browser,
  • Operating system used,
  • The website visited previously (Referrer URL),
  • Date and time,
  • The concrete target address,
  • Site visited/name of downloaded file,
  • Data transmission volume,
  • Information if the access/download was successful.

In addition, if you use the website www.warnung-der-bevölkerung.de, these data will be stored on a server at our service provider T-Systems beyond the day of your visit. In accordance with Article 6 (1) (e) of the EU General Data Protection Regulation (EU GDPR) in conjunction with Section 5 and Section 4 para. 2 sentence. 1 no.4 of the German Civil Defence and Disaster Relief Act (Zivilschutz- und Katastrophenhilfegesetz – ZSKG) and within the framework of the statutory task “Selbstschutz und Information der Bevölkerung“ (Self-Protection and Information of the Population), we are authorised to process these data beyond the day of your visit. These data will be analysed and used for statistical, back-up and optimisation purposes. Data recorded when a user accesses the website www.warnung-der-bevölkerung.de will only be transmitted to third parties if we are legally bound to do so. In other cases, the data will not be forwarded to third parties. The Federal Office of Civil Protection and Disaster Assistance (BBK) will not merge this data with other sources of data.

In order to ensure maximum data security, we will protect your personal data with the utmost care and by means of technological procedures like SSL encryption. SSL is the abbreviation for “Secure Sockets Layer“ and designates an encryption procedure which is successfully used in the entire World Wide Web.

2.2 Access to the website of the Federal Office of Civil Protection and Disaster Assistance (BBK) – processing of data when you visit this website.

2.2.1 Log files

Each time the website of the Federal Office of Civil Protection and Disaster Assistance (BBK) is accessed by a data subject or an automated system, it records a set of general data and information. This general data and information are stored in server log files.

The log files store the following data for 30 days:

  • Date and time of the access (time stamp)
  • Request details and target address (protocol version, HTTP method, referrer, user agent string)
  • Name of the retrieved file and data volume transmitted (requested URL including query string, size in bytes)
  • Report whether the retrieval was successful (HTTP status code).

This general data and information will not be used by the Federal Office of Civil Protection and Disaster Assistance (BBK) to draw conclusions about the data subject. The data will not be used for a person-related analysis, an analysis for marketing purposes or scoring. In this context, the IP address of the visitors of this website will not be stored.

The legal basis for the temporary storage of data is Article 6 (1) (f) of the EU GDPR. The collection of data for providing the website and the storage of data in log files are absolutely necessary for a secure operation of the website. Consequently, there is no possibility for the user to object.

2.2.2 Cookies

The websites of the Federal Office of Civil Protection and Disaster Assistance (BBK) use the so-called cookies. Cookies are small text files which are exchanged between the web browser and the hosting server. Cookies are stored on the user’s computer and transmitted from there to our website. The users can restrict or generally prevent the use of cookies by selecting the appropriate setting on the web browser used. Cookies that have already been stored can be deleted at any time. If the cookies are deactivated for our website, this may prevent the full display or use of all of our website’s functions.

The legal basis for the processing of personal data by using cookies is Article 6 (1) (f) of the EU GDPR.

On the one hand, cookies are used for collecting statistical values, e.g. the numbers of visits to websites. As the Federal Office of Civil Protection and Disaster Assistance (BBK) does not employ web analysis services or tracking tools on its websites, cookies of this type are not used.

On the other hand, cookies are necessary for technical purposes to ensure the secure and correct provisioning of websites. The websites of the Federal Office of Civil Protection and Disaster Assistance (BBK) use cookies of this type in order to increase the security and functionality of the web applications offered.

This includes cookies relating to the load distribution on the servers, like the JSESSIONID cookie, and the session management of the application server.

These cookies do not include personal data. The do not collect the IP address or any other information which allows the identification of the actual user. The validity of the cookies used expires at the end of the current session and/or when the website is closed. Within the framework of specific website functions, additional cookies are used for the technical implementation of the services. These cookies are also valid only during the visit to the website.

2.2.3 Hosting

The hosting services employed by us serve to provide the following services: Infrastructure and platform services, computing capacities, storage space and database services, security services and technical maintenance services which we use for the operation of this online service.

In this context, we and/or our data processor will process inventory data, contact data, content data, contract data, usage data, meta and communication data of the users of this online service on the basis of our legitimate interests in an efficient and secure provisioning of this online service in accordance with Article 6 (1) (f) of the EU GDPR in conjunction with Article 28 (Processor) of the EU GDPR.

2.2.4 Web analysis

On the basis of Article 6 (1) (e) of the EU GDPR in conjunction with Section 3 of the German Federal Data Protection Act (Bundesdatenschutzgesetz), the Federal Office of Civil Protection and Disaster Assistance (BBK) analyses user information for statistical purposes within the framework of public relations work and in order to provide information on the tasks to be fulfilled by the Federal Office of Civil Protection and Disaster Assistance (BBK) as required.

For this purpose, the Matomo web analytics service is used.

If you visit individual pages of our website, the following data will be stored:

  • Two bytes of the IP address of the user’s visiting system (anonymous)
  • The called-up web page
  • The website from which the user has accessed the accessed website (referrer)
  • The subpages that are accessed from the accessed website
  • The duration of stay on the website
  • The frequency of visiting the website
  • Within the framework of our web analysis, no cookies will be stored on the computer of the users. Moreover, the data will not be disclosed to third parties.

If you also disagree with this completely anonymous storage and analysis of your data, you can object to the storage and use at any time via mouse click.

Please click here to accept the marketing cookies and to activate these contents.

In this case, a so-called opt-out cookie is placed on your browser, which means that Matomo no longer collects any session information at all.

3. Collection of personal data during the establishment of contact

You can contact the staff of the Federal Office of Civil Protection and Disaster Assistance (BBK) per e-mail, contact form, letter or phone (hotline). The Federal Office of Civil Protection and Disaster Assistance (BBK) will store your data only for establishing contact and processing your request. It is necessary to process the personal data supplied by you in order to handle your request.

If you establish contact by using the contact possibilities described above, the (personal) data supplied by you and the contents (which may also include personal data supplied by you) will be processed on the basis of Article 6 (1) (e) of the EU GDPR in conjunction with Section 3 of the German Federal Data Protection Act (BDSG) in order to handle your request. The storage of this data is governed by the statutory periods for retaining records laid down in the Federal Government’s Registry Directive (Registraturrichtlinie), which supplements the Common Rules of Procedure of the Federal Ministries (Gemeinsame Geschäftsordnung der Bundesministerien – GGO).

The processing of personal data depends on the method of contact as described below.

3.1 Establishment of contact per e-mail

Contact with the Federal/State ISF project, ‘Warning of the Population’ (ISF Bund-Länder-Projekt Warnung der Bevölkerung) can be established via the following e-mail address:

isf-blp-warnung@bbk.bund.de

If you contact us per e-mail, the data supplied by you (e.g. last name, first name, address) – but at least the e-mail address and the information included in the e-mail (including any personal data supplied by you) – will be stored and processed in order to establish contact and to handle your request.

3.2 Establishment of contact per letter

You can contact the Federal Office of Civil Protection and Disaster Assistance (BBK) via the following postal address:

Bundesamt für Bevölkerungsschutz und Katastrophenhilfe
ISF Bund-Länder-Projekt
Warnung der Bevölkerung
Provinzialstraße 93
53127 Bonn

If you contact us by mail, the data supplied by you (e.g. last name, first name, address, phone, subject, e-mail address) and the information included in the letter (including any personal data supplied by you) will be stored and processed in order establish contact and to handle your request.

3.3 Establishment of contact per phone

You can contact the Federal Office of Civil Protection and Disaster Assistance (BBK) via the following hotline number:

  • 022899-550-0 (during office hours: from Monday to Thursday between 8:00 a.m. and 4:30 p.m., and on Fridays between 8:00 a.m. and 3:00 p.m.)

If you contact us via the hotline, the data supplied by you (e.g. last name, first name, address, phone, subject, e-mail address) and the information communicated to us by phone (including any personal data supplied by you) will be stored and processed in order establish contact and to handle your request.

3.4 Establishment of contact per contact form

If you communicate with us per contact form, it is necessary to indicate your last name, your first name and your e-mail address. Without these data, the request forwarded by you per contact form cannot be processed. The indication of the address is optional and enables us to handle your request by mail, if desired.

In addition, the system will collect the following data:

  • IP address of the visiting computer
  • Date and time of the registration

We would like to point out that the data and the contents which are forwarded by you per contact form and which may also include personal data supplied by you will be processed on the basis of Article 6 (1) (e) or (f) of the EU GDPR in conjunction with Section 3 of the German Federal Data Protection Act (BDSG) in order to handle your request.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The personal data on the input mask of the contact form will be deleted when the conversation with the user has been terminated. The conversation is regarded as terminated when it can be inferred from the circumstances that the matter has been clarified conclusively and it is not necessary to store the data for possible inquiries of the data subject. The storage of this data is governed by the statutory periods for retaining documents laid down in the Federal Government’s Registry Directive (Registraturrichtlinie), which supplements the Common Rules of Procedure of the Federal Ministries (GGO).

The additional personal data collected during the sending procedure will be deleted after 7 days at the latest.

4. Your rights

With regard to your personal data, you have the following rights vis-à-vis the Federal Office of Civil Protection and Disaster Assistance (BBK) and the website www.warnung-der-bevölkerung.de, which is operated by the Federal Office of Civil Protection and Disaster Assistance (BBK):

  • Right of access in accordance with Article 15 of the EU GDPR

With the right of access, the data subject has full access to the personal data concerning him or her and other important criteria, e.g. the purposes of the processing or the period for which the personal data will be stored. With regard to this right, the exceptions specified in Section 34 of the German Federal Data Protection Act (BDSG) will apply.

  • Right to rectification in accordance with Article 16 of the EU GDPR

The right to rectification entitles the data subject to obtain the rectification of inaccurate personal data concerning him or her.

  • Right to erasure in accordance with Article 17 of the EU GDPR

The right to erasure entitles the data subject to have the controller erase personal data. However, this is only possible if the personal data concerning the data subject are no longer necessary, have been unlawfully processed or the consent on which the processing is based is withdrawn. With regard to this right, the exceptions specified in Section 35 of the German Federal Data Protection Act (BDSG) will apply.

  • Right to restriction of processing in accordance with Article 18 of the EU GDPR

The right to restriction of processing entitles the data subject to provisionally prevent the further processing of the personal data concerning him or her. In most cases, a restriction will apply if the exercise of other rights by the data subject is being considered.

  • Right to object to collection, processing and/or use of personal data in accordance with Article 21 of the EU GDPR

The right to object entitles data subjects to object to the further processing of their personal data in a particular situation if justified by the exercise of public duties or public or private interests. With regard to this right, the exceptions specified in Section 36 of the German Federal Data Protection Act (BDSG) will apply.

  • Right to data portability in accordance with Article 20 of the EU GDPR

The right to data portability entitles the data subject to obtain the personal data concerning him or her from the data controller in a commonly used, machine-readable format in order to potentially transmit it to another controller. According to Article 20 (3) (2) of the EU GDPR, however, this right shall not apply to processing necessary for the performance of a task carried out in the public interest.

  • Right to withdraw consent in accordance with Article 13 and Article 14 of the EU GDPR

If the processing of personal data is subject to a consent, the data subject has the right to withdraw this consent for the relevant purpose at any time. The lawfulness of processing based on the consent provided shall remain unaffected until the consent is withdrawn.

You can exercise the aforementioned rights in writing using the contact details listed under point 1.

Pursuant to Article 77 of the EU GDPR, you are also entitled to lodge a complaint with the supervisory authority for data protection. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit).

5. Amendment of the privacy statement

In the course of the further development and implementation of new technologies, amendments of this privacy statement may become necessary. Therefore, we recommend you to regularly read through this privacy statement.

Last amended: 13 June 2019