Data protection

Any personal data of the users of this website are exclusively collected, processed and used in compliance with the applicable law.

Hereinafter we provide you with information about the type, extent and purpose of collecting, processing and using these data within the scope of this website:

1. Information about personal data collection
2. Data protection officer’s name and address
3. General information about data collection
4. Personal data collection when accessing this website
   4.1. Data processing in general
   4.2. Website providing and logfile creation
   4.3. Use of cookies
   4.4. Contact form and e-mail address
   4.5. External links
   4.6. Social Media
   4.7. OpenStreetMap
   4.8. Use of etracker
   4.9. Newsletter
   4.10. Integration of YouTube videos
   4.11. Data transmission security
5. Your rights
6. Amendments to our privacy statement

This privacy statement applies to all online services offered by the city of Zwickau.

In case of deviations/additions for the services mentioned above we provide you with separate information, if required. With regard to further services by third parties the privacy statement of the respective party shall apply, unless otherwise stated.

Privacy statement regarding all social media services offered by the city of Zwickau

Do you have any questions regarding our handling of your personal data or do you want to exercise your rights as a data subject as stated within clause 5? In this case please do not hesitate to contact our data protection officer, see contact details below:

Scope of processing personal data

We solely process personal data of our users to the extent necessary to provide a functioning website as well as appropriate contents and services. By default we only process personal data after the user has given her/his consent; except for cases which do not allow for such a prior approval due to factual reasons provided that the data processing is permitted by law.

Legal basis for processing personal data

Art. 6 (1a) GDPR shall apply as legal basis as far as the consent of data subjects is necessary in order to process personal data.

Art. 6 (1b) GDPR shall apply as legal basis in case we need to process personal data in order to fulfill a contract to which the data subject is a contracting party. This applies to processing operations necessary for performing pre-contractual measures as well.

Art. 6 (1c) GDPR shall apply as legal basis in case the processing of personal data is necessary for compliance with a legal obligation.

Art. 6 (1d) GDPR shall apply as legal basis in case the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.

If the processing is necessary for the purposes of the legitimate interest of the city administration of Zwickau or of a third party, except where above mentioned interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1f) GDPR shall apply.

Data erasure and duration of storage

The data subject’s personal data shall be erased or disabled as soon as the purpose of storing ceases to exist. Storing these data beyond this point of time shall be considered legitimate only if authorized by European or national legislation in compliance with EU regulation, laws or other legislation the responsible person is subject to. Furthermore these data shall be erased or disabled if a storage period in compliance with the above mentioned standards expires unless it is necessary to store these data any longer in order to conclude or perform a contract.

We solely process personal data of our users to the extent necessary to provide a functioning website as well as appropriate contents and services.

By default we only process personal data after the user has given her/his consent; except for cases in which the data processing is permitted by law.

Legal basis

This website and its various online services form a part of the public relations of the city administration of Zwickau. Art. 6 (1e) GDPR in conjunction with clause 3 (1) Data Protection Act of the Free State of Saxony (SächsDSDG) shall apply as legal basis for the processing of personal data within the scope of said public relations. Art. 6 (1a) GDPR shall apply as legal basis as far as the user’s consent is necessary in order to process personal data.

Art. 6 (1b) GDPR shall apply as legal basis in case we need to process personal data in order to fulfill a contract. This applies to pre-contractual measures, too.

Disclosure of personal data to third parties and processors

As a matter of principle we do not disclose any personal data to a third party without your explicit consent. If we disclose, transfer or otherwise provide access to your personal data to a third party within the scope of our data processing, this shall be performed solely on the basis of one of the above mentioned legal frameworks. If we are obliged to do so by law or court order, we must pass your personal data to any relevant authority legally authorized to receive such information.

With respect to the processing of your personal data we partly work together with carefully selected external service providers. If we disclose data to such a service provider within the scope of a so-called order processing this shall be performed on the basis of art. 28 GDPR. We selected our processors carefully; they are bound by our instructions and are regularly inspected by us. We solely commission processors who are able to guarantee appropriate technical and organizational measures to ensure that the processing is carried out in compliance with the requirements of the GDPR and the new German Federal Data Protection Act (BDSG) and that your rights are protected.

Duration of storage

Your personal data shall be erased or disabled as soon as the purpose of storing ceases to exist.

Automated decision-making

We do not make use of an automated decision-making or profiling tools.

Description and scope of data processing

Our website uses cookies. Cookies are text files which are saved in the cache of an internet browser or rather saved by the internet browser on the user’s computer system. If a user visits a website, such a cookie can be saved on the user’s operating system. This cookie contains a characteristic string allowing the clear identification of a browser in case the user visits this website again.

We use cookies in order to make our website more user-friendly. Some components of our website make it necessary that the requesting browser can be identified even after the user leaves and returns to our website.

These cookies store and transmit the following information:

• Language preferences
• Login information

In addition we use cookies on our website enabling the analysis of our users’ surfing patterns.

 Thus, the following data can be transmitted:

• Entered search terms
• Frequency of site visits
• Use of website features

Any collected user data is pseudonymized by technical measures. It is not possible to match these data with the requesting user anymore. These data will not be stored together with any further personal user data.

When accessing our website the user is informed about the use of cookies for analysis purposes and she/he is asked whether she/he agrees with the processing of her/his personal data in this context. Apart from that the user is informed about this privacy statement.

Legal basis for data processing

For the processing of personal data by using cookies art. 6 (1e) GDPR and, if applicable, Art. 6 (1a) GDPR shall apply as legal basis.

Purpose of data processing

The purpose of using technically necessary cookies is to ease the user’s use of websites. Some of our website features cannot be offered without using cookies, i.e. the browser must be identified even after returning to this website.

User data collected by those technically necessary cookies are not used to create user profiles.

Storage duration, possibility of objection and clearance

Cookies are saved on the user’s computer and thereby transmitted to our website. Thus, the user has full control over the use of cookies. By changing the preferences of your internet browser you may disable or limit the cookie transmission. Cookies already saved on your computer can be deleted at any time. This may be performed automatically as well. Please consider that some website features may not be used to their full extent if you disable cookies for our website.

The website contains links to other websites. Such links are clearly recognizable due to certain symbols and usually its internet address being fully displayed on purpose. With clicking on an external link a new browser window will be opened.

Each link is only checked and assessed tentatively before its integration. A continuous examination of its content is not intended nor feasible. However, we do not have any control about the collection and processing of your data nor do we know the scope of data collection, purpose of processing or retention periods. Furthermore we do not have any information about a possible deletion of your collected data by the service provider.

This website integrates maps provided by OpenStreetMap (https://www.openstreetmap.org), a service based on the Open Data Commons Open Database License (ODbL) offered by the OpenStreetMap Foundation (OSMF): https://wiki.openstreetmap.org/wiki/Privacy_Policy).

To our knowledge OpenStreetMap solely uses personal data in order to display different map features and to temporarily save various user settings. These data particularly include IP addresses and location data of the user. However, it is not allowed to collect these data without the user’s consent (by default this is done via the settings of your mobile device).

Offering OpenStreetMap makes it easier to find the locations we inform about on our website.

Scope of processing personal data

This website uses technologies provided by the company etracker GmbH (http://www.etracker.com) in order to collect and store data to be used for optimization purposes. These data may be aggregated to a usage profile by means of an alias. For this purpose we may use cookies. Cookies are small text files which are saved locally in the cache of the user’s internet browser. Cookies facilitate the recognition of the internet browser. The following data is saved when a user visits single pages of our website:

• two bytes of the IP address of the user’s requesting computer system;
• the requested website;
• the website which referred the user to our website (referrer);
• any subpages the user requests starting from the requested website;
• how long the user visits the website;
• how often the user requests the website.

The software is only running on our website servers; personal user data is solely saved on these servers. The data will not be made available to third parties.

The software settings do not allow to store complete IP addresses but rather enable the masking of two bytes of it (e.g 192.168.xxx.xxx). By this means it is not possible to associate the requesting computer with the shortened IP address.

Legal basis for personal data processing

For the processing of personal data art. 6 (1e) GDPR in connection with clause 3 Data Protection Act of the Free State of Saxony (SächsDSDG) respectively art. 6 (1a) GDPR (position paper of the national data protection authorities: consent) shall apply as legal basis.

Purpose of data processing

We use eTracker in order to analyze and optimize the usage of our website. By means of the extracted statistics we are able to improve our service and make it more interesting for our users. Any collected data will be stored permanently and analyzed anonymously using an alias.

Duration of storage

Your data will be deleted as soon as it is no longer necessary for record-keeping purposes.

Possibility of objection and clearance

Cookies are saved on your computer and thereby transmitted to our website. Thus, the user has full control over the use of cookies. By changing the preferences of your internet browser you may disable or limit the cookie transmission. Cookies already saved on your computer can be deleted at any time. This may be performed automatically as well. Please consider that some website features may not be used to their full extent if you disable cookies for our website.

The user has the possibility to opt-out and not take part in our analysis. Please click on the appropriate link to do so. Click here

Thus, another cookies is saved on your system signaling our system that we shall not save your data. If you delete this cookie on your system in the meantime, you have to set this opt-out cookie once again.

Further information about the third-party provider: etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg/Germany https://www.etracker.com/de/datenschutz.html

Description and scope of data processing

Auf unserer Internetseite besteht die Möglichkeit einen kostenfreien Newsletter zu abonnieren. Dabei werden bei der Anmeldung zum Newsletter die Daten aus der Eingabemaske an uns übermittelt.

Additionally the following data are transmitted with your subscription:

• date and time of registration;
• which newsletter type and frequency is selected;
• cancellation date;
• reason for termination (optional);
• mailing date of the verification e-mail.

During the registration process you are asked to agree with the processing of your data; reference is made to this privacy statement.

Your data will not be made available to third parties in the context of the data processing for the purpose of dispatching this newsletter. Your data is solely used to send the newsletter.

Legal basis for data processing

Art. 6 (1a) GDPR shall apply as legal basis for the processing of your data after registering for our newsletter and giving your consent.

Purpose of data processing

Your e-mail address is used in order to send the newsletter. Any further personal data collected during the registration process is used to prevent the misuse of services or the used e-mail address.

Duration of storage

Your data will be erased as soon as the purpose of their collection is achieved and these data are no longer necessary. Your e-mail address is saved as long as your newsletter subscription is active. Any further personal data collected during the registration process will be deleted within 7 days by default.

Possibility of objection and clearance

You may terminate the newsletter subscription at any time. Hence, you will find an appropriate link in every newsletter; you may also write an email to newsletterzwickaude or a message via the contact details provided in our disclaimer. Hereby your consent to save your personal data collected during the registration process is revoked.

(1) We integrated YouTube Videos in our online services saved under http://www.YouTube.com and directly made available via our website. These videos are embedded in a so-called ‚advanced data protection mode‘ i.e. your user data will not be transmitted to YouTube if you do not play the videos. Only when you play a video the data referred to below in paragraph (2) will be transmitted. We do not have any influence on this data transmission.

(2) When visiting www.zwickau.de YouTube receives the information that you requested the appropriate subpage of our website. Thereby the data stated in clause 4 of this privacy statement will be transmitted. This takes place regardless of whether YouTube provides a user account with login or if there is no user account. If you are logged in with Google your data is directly matched with your account. If you do not want to match your profile with YouTube you have to log out out before pressing the button. YouTube saves your data as a usage profile and uses it for advertising purposes, market research and/or tailoring its website according to user preferences. This analysis is especially done (even for users not being logged in) in order to provide customized advertising and to inform other social network users about your activities on our website. You may exercise your right of revocation regarding this profile creation; however, you have to contact YouTube to do so.

(3) Please refer to the privacy policy of YouTube in order to get further information about purpose and scope of data collection and processing by YouTube. You will be provided with further information about your rights and optional settings in order to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google processes your personal data within the USA as well and is subject to the EU US Privacy Shield, please see https://www.privacyshield.gov/EU-US-Framework.

The data entered is encrypted using SSL (Secure Socket Layer). Depending on your browser (settings and version) this is a 256 bit or 128 bit encryption for recent browser versions; older versions offer a lower encryption level.

If you open a secure site you will receive a public key by our server. Your browser checks this key automatically and recognized the website as www.zwickau.de. Thereupon your browser transfers a random number which is coded with our public key. Thus, only our server is able to decode the transmitted data and encode this session. This way a kind of ‚tunnel‘ is created between your browser and our server i.e. the transmission is basically protected against outside intrusion.

However, please keep in mind the following:

Your message via e-mail is not automatically encrypted. As information sent to us is not encrypted, unwarranted disclosure to third parties cannot be excluded.

If you wish an answer we assume that you agree to receive an answer via an unencrypted e-mail in case our answer, according to its content, does not require an encryption either.

Processing your personal data means that you are a data subject according to the GDPR. Hence, you are entitled to exercise the following rights against the city administration of Zwickau (in the following also referred to as ‚data controller’):

Right of access

According to art. 15 GDPR you shall have the right to obtain information as to whether or not your personal data is being processed by the city administration of Zwickau.

Your right of access may be limited insofar as scientific or historical research or statistical analysis is impossible or is seriously undermined and such limitation is considered necessary for the purpose of research or statistics.

Right to rectification

In compliance with art. 16 GDPR you shall have the right to rectification and/or completion against the city administration of Zwickau provided that the processed personal data concerning you is inaccurate or incomplete. The city administration of Zwickau is obliged to apply any corrections immediately.

Your right to rectification may be limited insofar as scientific or historical research or statistical analysis is impossible or is seriously undermined and such limitation is considered necessary for the purpose of research or statistics.

Right to erasure (‚right to be forgotten‘)

In accordance with the conditions laid down in art. 17 GDPR you shall have the right to obtain the erasure of your personal data from the city administration of Zwickau.

If the city administration of Zwickau has published your personal data and is obliged to erasure according to art. 17 GDPR, the data controller shall be responsible to take any appropriate actions, including technical measures, and considering available technologies and their possible implementation costs, in order to inform other individuals being responsible for the data processing about the fact that you as a data subject seek to exercise your right to erase any links to these personal data or copies or replications thereof.

Right to restriction of processing

In accordance with the conditions laid down in art. 18 GDPR you shall have the right to obtain the restriction of the processing of your personal data.

Your right to restriction of processing may be limited insofar as scientific or historical research or statistical analysis is impossible or is seriously undermined and such limitation is considered necessary for the purpose of research or statistics.

Notification obligation

According to art. 20 GDPR you shall have the right to receive your personal data, which you have provided to the city administration of Zwickau, in a structured, commonly used and machine-readable format. Furthermore you have the right to transmit these data to another controller without hindrance from the city administration of Zwickau provided that:

the processing is based on consent pursuant to art. 6 (1a) or art. 9 (2a) GDPR or on a contract pursuant to art. 6 (1b); and the processing is carried out by automated means.

In exercising your right to data portability you shall also have the right to have your personal data transmitted directly from one controller to another, where technically feasible, and provided that rights and freedoms of other individuals are not affected.

The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the city administration of Zwickau.

Right to object

According to art. 21 GDPR you shall have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on art. 6 (1e) GDPR (data processing in public interest) and art. 6 (1f) GDPR (data processing based on weighing of interests). After objecting to the data processing the city administration of Zwickau will not process your personal data anymore, unless the data controller is able to provide compelling legitimate reasons for it prevailing your interests, rights and freedoms, or the data processing serves for the establishment, exercise or defense of legal claims.

Your right to object may be limited insofar as scientific or historical research or statistical analysis is impossible or is seriously undermined and such limitation is considered necessary for the purpose of research or statistics.

Right to withdraw data privacy declaration

You shall have the right to withdraw your data protection consent at any time. The withdrawal of consent shall not affect the lawfulness of data processing based on this consent before its withdrawal.

Automated individual decision-making including profiling

Pursuant to the conditions laid down in art. 22 GDPR you shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you as a data subject.

Right to lodge a complaint with a supervisory authority

You shall have the right to lodge a complaint with a supervisory authority, e.g. with the Data Protection Officer of Saxony being responsible for Zwickau, if you consider that our processing of your personal data infringes this Regulation.

We always keep this privacy statement up to date. Therefore we reserve the right to change it from time to time and amend modifications in terms of collecting, processing and using your personal data.
 
Privacy Statement for the social media accounts of the city administration of Zwickau

The municipality of Zwickau provides several social media accounts of different service providers. Social networks are commonly used online services you may use to find important information about Zwickau and to communicate with us. However, please consider that all social media providers collect data and may analyze them as well. That is why you also find any important information on our website zwickau.de as well.

We highly recommend not to send personal or sensitive data via social media accounts. In these cases please get in touch with us by direct means. 

• Facebook
• Twitter
• Your rights

Name and address of the controller

Do you have any questions regarding our handling of your personal data or do you want to exercise your rights as a data subject as stated within clause 5? In this case please do not hesitate to contact our data protection officer, see contact details below:

Katrin Kronmüller
Contact details
Phone number: +49 375 831826
E-mail address: datenschutzbeauftragtezwickaude
Postal address: P.O. 20 09 33, 08009 Zwickau /Germany

Facebook

For its fanpage the municipality of Zwickau uses the technical platform provided by Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).

The municipality of Zwickau expressly points out that Facebook collects data when using this social media platform. The municipality has no influence regarding the manner of collecting such data. We do not exactly know which data Facebook is actually collecting and in which way the company uses such data. You will use our Facebook account and its features on your own responsibility. This shall particularly apply to interactive features such as comments, likes and shares.

When using our account Facebook saves your IP address as well as further information stored as cookies on your device, among other data. This data is used in order to obtain statistical information about the usage of a Facebook fanpage which may be analyzed by a provider such as the City Administration of Zwickau. For further information regarding this topic see the following link provided by Facebook: http://de-de.facebook.com/help/pages/insights

Facebook processes your data collected through using our Facebook fanpage. Information about your collected data and its processing by Facebook is made available in the Facebook privacy policy: https://www.facebook.com/about/privacy

To be able to answer to a question you send us via message or comment, it may be necessary to use your personal data (name of the Facebook account). However, we shall only use these data in compliance with the purpose you asked for, e.g. in order to answer to your questions or communicate with us.

Facebook fanpages of the municipality of Zwickau

This privacy statement shall apply for the following fanpages:

• https://www.facebook.com/zwickau.de
• https://www.facebook.com/stadtfestzwickau
• https://www.facebook.com/schumannwettbewerb
• https://www.facebook.com/Kinder-und-Jugendcafé-Atlantis-422433591224991
• https://www.facebook.com/citypoint.zwickau
• https://www.facebook.com/Kinder-und-Jugendfreizeitzentrum-Marienthal-1424097201165335
• https://www.facebook.com/Jugendclub-Airport-1389411447993979

 
Twitter

The municipality of Zwickau uses the technical platform provided by Twitter (Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland).

The municipality of Zwickau expressly points out that Twitter collects data when using this social media platform. The municipality has no influence regarding the manner of collecting such data. We do not exactly know which data Twitter is actually collecting and in which way the company uses such data. You will use all Twitter services and features on your own responsibility. This shall particularly apply to interactive features such as comments, likes and shares.

Twitter processes your collected data when using our Twitter account. Information about your collected data and its processing by Twitter is made available in the Twitter privacy policy: https://twitter.com/de/privacy

To be able to answer to a question you send us via message or in a tweet, it may be necessary to use your personal data (name of the Twitter account). However, we shall only use these data in compliance with the purpose you asked for, e.g. in order to answer to your questions or communicate with us.

Twitter account of the municipality of Zwickau

This privacy statement shall apply for the following account:

• https://twitter.com/StadtZwickau

Your rights

For information about your rights in the context of using social media please contact the respective provider. You will find all relevant privacy policies via links on our website.

In case you contact us via such a provider your request will be forwarded to the responsible department of the City Administration of Zwickau. Any personal data is solely collected and saved for the relevant purpose. We shall only use your data in order to communicate with you.

In that respect, we process your personal data with your consent. Subject to art. 13 (2) GDPR you are entitled to the following rights:

• Art. 15 GDPR — Right of access by the data subject
• Art. 16 GDPR — Right to rectification of inaccurate personal data
• Art. 17 GDPR — Right to erasure (‚right to be forgotten‘)
• Art. 18 GDPR — Right to restriction of processing