Data protection notice

The responsible party (controller) in the sense of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Representative/company Stadt Forst (Lausitz)
Die Bürgermeisterin
Lindenstr. 10–12 03149 Forst (Lausitz)
Tel.: +49 3562 989-0
Email: info@forst-lausitz.de

Data protection officer of the controller:

Our data protection officer can be contacted via email (datenschutz@forst-lausitz.de) or the postal address indicated above (with the addition of “Datenschutzbeauftragte” / “Data Protection Officer”).

Pursuant to Art. 13 GDPR, we hereby wish to inform you of the legal basis for our data processing. If the legal basis is not specified in the data protection notice, then the following applies: The legal basis for obtaining consent is Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR. The legal basis for processing to provide our services and implement contractual measures as well as to respond to queries is Art. 6(1)(b) GDPR. The legal basis for processing data to fulfil our legal obligations is Art. 6(1)(c) GDPR. If processing of your data is necessary to safeguard a legitimate interest of our company or a third party and if your interests, basic rights and freedoms do not outweigh the former interest, Art. 6(1)(f) GDPR forms the legal basis of processing. In the event that the processing of personal data is required to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR forms the legal basis.

We adhere to the principles of data minimisation pursuant to Art. 5(1)(c) GDPR and storage limitation pursuant to Art. 5(1)(e) 2 / 3 GDPR. This means that we only store your personal data for as long as is necessary to fulfil the purposes stated here or the retention periods required by law. When the respective purpose ceases to exist or the retention periods expires, the corresponding data will be deleted as soon as possible.

The tools of services providers based in third countries (including the USA) have been integrated into our website. If these tools are activated, your personal data may be transferred to the servers of the respective service provider. The level of data protection in third countries generally does not correspond to the EU data protection legislation. The risk therefore exists that your data may have to be disclosed to the security authorities of these countries and may be processed by the authorities of these countries for control and monitoring purposes, possibly without any legal recourse on your part. We have no influence whatsoever over these processing activities.

This website may contain links to third-party websites or to other websites for which we are responsible. If you follow a link to one of the websites for which we are not responsible, please note that these websites have their own data protection notice. We assume no responsibility or liability whatsoever for these external websites and their data protection notice. Therefore, please check before using these websites whether you agree with the data protection provisions for these.

You can recognise external links by the fact that they are underlined or displayed in a different colour from the rest of the text. The mouse cursor shows where external links are when it is moved over such links. Only when you click on an external link will your personal data be transferred to the link destination. In particular, the operator of the other website will receive your IP address, the time at which you clicked on the link, the page you clicked the link on and other information that you will find listed in the data protection notice of the respective provider.

Please also note that individual links may lead to the transmission of data outside the European Economic Area (EEA). This could lead to foreign authorities gaining access to your data. You may not be entitled to any legal resource against such data access. If you do not want your personal data to be transmitted to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.

You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Moreover, you have the right to lodge a complaint with the responsible supervisory authority.

You can contact us at any time in case of further questions on data protection; our contact details are provided in the section containing the legal information.

As a data subject within the meaning of the General Data Protection Regulation (GDPR), you have the opportunity to assert various rights. The rights of data subjects arising from the GDPR are the right of access (Art. 15), the right to rectification (Art. 16), the right to erasure (Art. 17), the right to restriction of processing (Art. 18), the right to object (Art. 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Art. 20).

Right to revoke consent:

Some data processing can only take place with your explicit consent. You are able to revoke your consent at any time. However, this does not affect the lawfulness of the data processing up until the time that you revoke your consent.

Right to object:

As the data subject, you can object to the processing of your personal data at any time for reasons arising from your particular situation if the processing is based on Art. 6(1)(e) or (f) GDPR. You also have this right in the case of profiling based on these provisions. Unless we can demonstrate compelling legitimate grounds for the processing of your data, which override your interests, rights and freedoms or serve to establish, exercise or defend against legal claims, we will no longer process the corresponding data after you object to this processing.

You also have the right to object to the processing of personal data at any time if it serves the purpose of direct marketing. The same applies to profiling relating to direct advertising. Here too, we will no longer process your personal data as soon as you object to this.

Right to lodge a complaint with a supervisory authority:

Should you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or legal recourse.

Right to data portability:

If your data is processed automatically based on your consent or fulfilment of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You also have the right to request the transmission and provision of this data to another controller, insofar as this is technically feasible.

Right of access, to rectification and to erasure:

You have the right to obtain information about the purpose of the processing of your personal data, the categories of personal data processed, the recipients of the personal data and the envisaged duration of storage. Furthermore, you have the right to know whether there is a right to rectification, erasure or restriction of your personal data. You can of course use the contact details provided in the legal information to contact us should you have any questions on this topic or any other topics relating to personal data.

Right to restrict processing: You can request the restriction of the processing of your personal data at any time. One of the following requirements must be fulfilled for this:

• You contest the accuracy of the personal data. You have the right to request the restriction of processing for the duration of the verification of the data’s accuracy.
• If the processing is unlawful, you can request the restriction of the use of the data as an alternative to erasure.
• If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise or defend against legal claims, you can request the restriction of processing as an alternative to erasure.
• If you object to the processing pursuant to Art. 21(1) GDPR, your interests and our interests will be weighed up. You have the right to request the restriction of processing until this has been verified.

The restriction of processing means that, with the exception of storage, personal data may only be processed with your consent or to establish, exercise or defend against legal claims or to protect of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

When you visit our website, we automatically collect and store information in server log files. Your browser transmits this information to our server or to the server of our hosting company automatically.

The following information is transmitted:

• IP address of the end device of the website visitor
• host name of the accessing computer
• operating system of the visitor
• browser type and version
• name of the file accessed
• time of the server request
• amount of data
• information on whether data retrieval was successful

This data is not combined with any other data sources.

The legal basis for processing of this data is Art. 6(1)(f) GDPR, whereby our legitimate interest is the technically error-free presentation and optimisation of this website.

Instead of hosting this website on our own server, we can alternatively choose to host it on the server of an external service provider (hosting company). The personal data collected on this website is then stored on the hosting company’s servers. In addition to the data mentioned above, this may for example include contact requests, contact details, names, website access data, meta data, communication data, contract data and other data generated via a website.

The legal basis for the processing of data due to using a hosting company is our interest in the secure, fast and efficient provision of our website (Art. 6(1)(f) GDPR). One further legal basis may be fulfilment of the contract with our future and existing customers (Art. 6(1)(b) GDPR). Should we commission a company to host the website on our behalf, a contract will be signed with this hosting company regarding the processing of our order.

Our website uses cookies, which are pieces of information that a web server stores on your end device in order to be able to identify the end device. Cookies are either stored temporarily for the duration of a session and deleted at the end of your visit to a website (session cookies) or stored permanently on your end device until you delete them yourself or they are automatically deleted by your web browser (permanent cookies).

Third-party companies may also store cookies on your device when you visit our website (third-party requests). This enables us as the operator and you as the website visitor to use certain third-party services that are installed on this website. Examples here include cookies for processing payment services or playing videos.

Cookies have a variety of uses. They can enhance a website’s functionality, control shopping basket functions, enhance the security and convenience of website usage and analyse visitor flows and behaviour. Depending on their individual functions, cookies must be classified according to the data protection legislation. If they are necessary for operation of the website and are intended to provide certain functions (e.g. shopping basket) or serve to optimise the website (e.g. measure the web audience), their use is based on Art. 6(1)(f) GDPR. As the website operator, we have a legitimate interest in storing cookies for the technically error-free and optimised provision of our services. In all other cases, we ask for your consent to store cookies, which you can revoke at any time (Art. 6(1)(a) GDPR).

If cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in this data protection notice. Your consent is required and will be requested – and can be revoked – at any time.

We use external services on our website. These are services from third-party providers that are used on our website. They can be used for various reasons, for example to embed videos or ensure website security. When such services are used, personal data is also transmitted to the respective provider. If we do not have a legitimate interest in the use of these services, we will obtain your consent as a website visitor before using them, which can be revoked at any time (Art. 6(1)(a) GDPR).

We process the personal data of visitors to our website in order to analyse users’ behaviour. Analysing the data allows us to compile information about use of the individual components of our website. This in turn enables us to enhance the user-friendliness of our website. The analysis tools can for example be used to create user profiles for the display of targeted or interest-based advertising, to recognise visitors to our website next time they visit our website, to evaluate visitors’ click/scroll behaviour and their downloads, to generate heat maps, to recognise page views, to measure the duration of visits or bounce rates, and to trace the origin of website visitors (town/city, country, page the visitor comes from). The analysis tools help us to improve our market research and marketing activities.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is no other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Google Analytics service on our website, which is provided by Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland. Use of this service may lead to the transfer of data to a third country (USA). For more information, see the service provider’s data protection notice: policies.google.com/privacy.

We use the New Relic service on our website, which is provided by New Relic, 188 Spear St., Suite 1000, San Francisco, California, 94105, USA.

Use of this service may lead to the transfer of data to a third country (USA). For more information, see the service provider’s privacy policy: newrelic.com/termsandconditions/privacy

In order to comply with the data protection requirements, we use a consent management tool on our website to obtain the necessary consent for the setting of cookies or the use of external services. The consents are stored accordingly.

The processing is necessary for the fulfilment of a legal obligation to which the controller is subject. The legal basis for processing is therefore Art. 6(1)(c) GDPR.

We use the Klaro service on our website, which is provided by KIProtect GmbH, Bismarckstr. 10–12, 10625 Berlin, Germany.

As this service is hosted locally on the web server, no data is transferred to third parties.

We use a content delivery network (CDN) to optimise the performance and availability of our website. The provider of this network processes your IP address and the information about when you visited our website for this. For more information on data processing by this service provider, see the service provider’s data protection notice.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.

We use the CloudFlare service on our website, which is provided by Cloudflare Ltd, 25 Lavington Street, 2nd Floor, London, SE1 0NZ, United Kingdom. Use of this service may lead to the transfer of data to a third country (USA). For more information, see the service provider’s privacy policy: www.cloudflare.com/de-de/privacypolicy/

We use the Usercentrics service on our website, which is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

For more information, see the service provider’s privacy policy: usercentrics.com/de/datenschutzerklaerung

We use tools serving optimisation of the presentation of our website. Among others, these tools help to display the website in other languages and in a more accessible way.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a visitor to the website, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the ReadSpeaker service on our website, which is provided by ReadSpeaker, Princenhof Park 13, Driebergen-Rijsenburg, Utrecht, Netherlands. For more information, see the service provider’s privacy policy:
www.readspeaker.com/de/erklarung-zum-datenschutz

Tools are used on our website that offer services relating to campaigns, web analysis and personalisation. This enables the comprehensive central recording of all data, which is necessary to optimise and plan online campaigns. These services may be set and used by our advertising partners via our website to build a profile of your interests and show you relevant advertising on other websites.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Unbounce service on our website, which is provided by Unbounce Marketing Solutions Inc, 400–401 West Georgia St. Vancouver, BC, V6B 5A1, Canada.

For more information, see the service provider’s privacy policy:
unbounce.com/privacy

Business processes are cheaper, faster and more error-free when they are automated using interface software. This allows them to efficiently be integrated into company processes via the company’s own website or social networks. We use interface software on our website to link different applications and to transfer personal data securely from one application to another.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Google Tag Manager service on our website, which is provided by Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland. Use of this service may lead to the transfer of data to a third country (USA).

For more information, see the service provider’s privacy policy:policies.google.com/privacy.

Software frameworks facilitate the interaction with a platform by creating a standardised interface. They are used to reduce the development work during recurring software requirements

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the PHP.net service on our website, which is provided by the PHP Group, 1400 Parkmoor Av Ste 100, San Jose, California, 95126, USA. As this service is hosted locally on the web server, no data is transferred to third parties. We base this processing on a legitimate interest (Art. 6(1)(f) GDPR). This usage is required to ensure the unrestricted functionality of the website.

You are able to make appointments with us directly on our website. When you enter the requested data and your desired date in the form, our system suggests available dates. We will use the data you enter (name, email address and, optionally, your telephone number) to plan, implement and, where necessary, follow up on your appointment.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Jochen Schweizer mydays Group service on our website, which is provided by Jochen Schweizer GmbH, Mühldorfstraße 8, 81671 Munich, Germany.

For more information, see the service provider’s privacy policy:
www.jochen-schweizer.at/datenschutz/JS_DATENSCHUTZ

We use the Regiondo service on our website, which is provided by Regiondo GmbH, Mühldorfstraße 8, 81671 Munich, Germany. 

For more information, see the service provider’s privacy policy:
pro.regiondo.com/privacy-policy

In order to make our website more varied and interesting, we have incorporated in audio and video content. The audio/video content is retrieved from the server of our provider, the audio or video platform. To be able to play audio/video content, your end device establishes a connection with the audio/video platform and transmits personal data (e.g. your IP address), but possibly also location data and information on the type of end device or browser used.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). The data subject consents to processing of their personal data with their voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Vimeo service on our website, which is provided by Vimeo.com Inc, 555 West 18th Street New York, NY 10011, USA. Use of this service may lead to the transfer of data to a third country (USA).

For more information, see the service provider’s privacy policy:
vimeo.com/privacy

This site uses webfonts for the standardised display of fonts. These are provided by an external provider and are loaded by the browser when the website is accessed. When your browser establishes a direct connection to the webfont provider, the latter becomes aware that our website has been accessed from your IP address.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Google Fonts service on our website, which is provided by Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

Use of this service may lead to the transfer of data to a third country (USA). For more information, see the service provider’s privacy policy: policies.google.com/privacy.

We have integrated payment services from a company specialising in these services into our website. When you make a purchase on our website, your payment details (e.g. name, payment amount, account details, credit card number) are transmitted to our payment service provider and processed by them as part of the payment process. The contractual and data protection provisions of our selected provider apply to these transactions.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Provided there is other legal basis within the sense of Art. 6(1) GDPR on which we base the processing, we will not process your personal data in the manner described above without separate consent. We will proceed in the same way should you revoke your consent. This will not affect the lawfulness of the processing carried out before you revoked your consent.

We use the Stripe service on our website, which is provided by Stripe Inc, 510 Townsend Street, San Francisco, CA 94103, USA. Use of this service may lead to the transfer of data to a third country (USA).

For more information, see the service provider’s privacy policy: stripe.com/at/privacy.

Website visitors are able to contact us via a contact form on our website. We request certain information when this form is used. Specifically, users must describe their query and give a contact option. This information is mandatory and must be provided in order to use the contact form.

The legal basis for responding to queries is the fulfilment of a contract or the implementation of pre-contractual measures. There may also be a legitimate interest to maintain business relationships.

The legal basis for the processing of your data is therefore Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.

The data will be deleted once the query has been answered to the enquirer’s satisfaction and if no other retention periods exist (e.g. for tax reasons).

In line with the legal requirements, we provide a telephone number and an email address on our website. We automatically store the data provided by telephone or via email in order to process queries or to be able to contact the enquirer. We will not pass on any data that we obtain in this way to third parties without your consent.

Contact via email or telephone serves pre-contractual or contractual purposes, hence the personal data processed in this context is based on Art. 6(1)(b) GDPR.

It is possible to send us an application (e.g. by post, our online application form or email). We store and process the personal data obtained in this way to be able to decide whether to enter into an employment relationship.

The basis for processing is Art. 6(1)(b) GDPR and Art. 6(1)(a) GDPR if consent has been given. Insofar as German law applies, Art. 26 of the German federal data protection act (Bundesdatenschutzgesetz, BDSG) also forms the legal basis for the processing (entering into an employment relationship). You can revoke your consent at any time. This will not affect the lawfulness of the processing carried out before you revoked your consent.

If the application leads to an employment relationship, the data collected will be stored for the purpose of processing the employment relationship based on Art. 6(1)(b) GDPR. If no employment relationship is entered into, the data will be stored based on Art. 6(1)(f) GDPR for up to six (6) months after the application procedure has ended. We have a legitimate interest in storing data to be able to defend ourselves against any complaints or accusations. If consent has been given, the data will be stored for longer based on Art. 6(1)(a) GDPR. You can revoke your consent at any time. This will not affect the lawfulness of the processing carried out before you revoked your consent.

If an employment relationship is not entered into, the applicant can be added to our applicant pool. All application details are then stored so that the applicant can be contacted if and when suitable vacancies arise.

Data is only stored in the applicant pool once consent has been given based on Art. 6(1)(a) GDPR. This consent can be revoked at any time, whereupon the corresponding data will be deleted, provided no legal reasons exist for its continued storage. The data will be deleted no later than two (2) years after consent has been given. This will not affect the lawfulness of the processing carried out before you revoked your consent.