data protection

We appreciate your interest in our company and our products and services and would like you to feel safe with Stadtwerke Landshut regarding the protection of your personal data. Because we take the protection of your personal data very seriously. The observance of the privacy policy is a matter of course for us. We want you to know when we collect what information and how we use it. Below you will receive the according to the Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR) provided information.

Privacy policy for this website

In the following, we inform you about the processing of personal data when using our website in accordance with Articles 13 and 14 GDPR.

1. Definitions

The privacy statement of Stadtwerke Landshut is based on the terminology used by the European directive and regulatory authority when adopting the GDPR. Our privacy policy should be easy to read and understand, both for the public and for our customers and business partners. To ensure this, we would like to explain in advance the terminology used. Among other things, we use the following terms in this privacy policy:

a) personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter the "data subject"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

b) the person concerned
Affected person is any identified or identifiable natural person whose personal data is processed by the controller.

c) processing
Processing means any process or series of operations related to personal data, such as collecting, capturing, organizing, organizing, storing, adapting or modifying, reading out, querying, using, with or without the aid of automated procedures; disclosure through submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction.

2. Name and address of the person responsible for the data processing on this website

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions with a data protection character is:

Stadtwerke Landshut
Christoph-Dorner-Str. 9
84028 Landshut
Telephone: 0800 0871 871 (free from the German landline)
Fax: 0871 1436 2003
E-mail: info@stadtwerke-landshut.de

3. Contact details of the company data protection officer

You can contact our company data protection officer at:

Stadtwerke Landshut
Data Protection Officer
Christoph-Dorner-Str. 9
84028 Landshut
Phone: 0871 1436 2099
Fax: 0871 1436 2003
E-mail: datenschutz@stadtwerke-landshut.de

4. Rights of the persons concerned

Insofar as the following rights are not restricted by the Federal Data Protection Act (BDSG), the Bavarian Data Protection Act (BayDSG) or other effective legal provisions in a permissible manner, you have the right to

  • information desk (Art. 15 GDPR)
  • correction (Art. 16 GDPR)
  • deletion (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR).

Furthermore, any interested party has the right at any time, for reasons arising out of his particular situation, to prevent the processing of personal data relating to him under Article 6 (1) (e) or (f) of the GDPR, opposition insert; this also applies to profiling based on these provisions and to cases of direct mail (Art. 21 GDPR).

You also have the right, without prejudice to any other administrative or judicial remedy Complaint (Art. 77 GDPR) with the supervisory authority, if you believe that the processing of your personal data violates the Data Protection Regulation (GDPR). The responsible supervisory authority is:

Bavarian State Commissioner for Data Protection
Wagmüllerstr. 18
80538 Munich
www.datenschutz-bayern.de
Telephone: 089 2126 720
Fax: 089 2126 7250
E-mail: poststelle@datenschutz-bayern.de.

5. Data processing on the website "www.stadtwerke-landshut.de" in detail

In the following you will be informed in detail about the collection, storage and use of your personal data in the context of the use of our website.

5.1 server log files

When you visit our website, the browser used on your device automatically sends information to the server of our website / application and temporarily stores it in a so-called log file. We have no influence on this. The following information will also be collected without your intervention and stored until automated deletion:

  • the IP address of the requesting Internet-enabled device,
  • the date and time of access,
  • the name and URL of the retrieved file,
  • the website from which the access was made (referrer URL),
  • the browser you use and, if necessary, the operating system and the user interface of your Internet-capable computer as well as the name of your access provider.
  • an individual process ID, status code (information about the expiration of the data retrieval, eg whether it was successful), the response time of the server (Response Time) and the amount of transmitted data in bytes.

The legal basis for the processing of the IP address is Article 6 (1) lit. f DSGVO. Our legitimate interest follows from the purposes of data collection listed below. From the data collected, we can not directly infer your identity.

The IP address of your device and the other data listed above are used by us for the following purposes:

  • Ensuring a smooth connection setup,
  • Ensuring comfortable use of our website,
  • Evaluation of system security and stability.

The anonymous data of the server log files are stored separately from all personal data provided by an affected person. The server logfiles can also be checked retrospectively, if concrete evidence points to an illegal use of our website. The data is stored for a period of 6 months and then automatically deleted.

5.2 Cookies

Cookies are small text files that are stored locally on your device when you visit a website. With the help of cookies, user settings and other information can be saved via the Internet browser. When you visit a website again, the website may retrieve this information and send it to the server. On the one hand, cookies can facilitate the navigation between pages and improve the user experience, but on the other hand they can help to tailor information offers and advertising to the interests of the users.

a) There are several types of cookies:

  • Transient cookies are required for the basic functions of a website. Without them, the services of a website would be of limited use. As a rule, these are session cookies that store a session or cookie ID. This will recognize the device when you return to the website. Transient cookies are only temporarily in use and are automatically deleted when you log out or close the browser.
  • Persistent cookies (also known as tracking cookies) will be stored on end devices for a longer period of time (typically up to two years). These include, for example, time-limited cookies for user analysis and for advertising purposes, which store a cookie ID for this purpose. These allow optimal control of content on websites and information campaigns based on the surfing behavior.
  • Third-party cookies are persistent cookies that are not used and managed by the internet site operator itself but by a partner company.
  • Flash cookies are not detected by the browser, but by the Flash plug-in. A Flash cookie stores data regardless of the browser model used and usually does not have an automatic expiration date.

b) Which cookies do Stadtwerke Landshut use?

The Stadtwerke Landshut use on their websites Session cookies and temporally limited Persistent cookies (also by third-party providers) in order to optimally adjust the website to the interests of the users.

c) What information is stored in the cookies?

Stadtwerke Landshut use cookies that are assigned an identification number (cookie ID). This cookie ID will not be associated with the name, IP address or similar data associated with the user. Stadtwerke Landshut and, if applicable, its service providers receive only pseudonymised information, for example which websites of Stadtwerke Landshut were visited or which services were used.

d) legal basis

Insofar as we use so-called session cookies, the comments on para. 5.1. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. In addition, we only use cookies if you have given us your consent to do so (Article 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation (see Article 7 GDPR).

You can find many online advertising cookies from companies through the US side http://www.aboutads.info/choices/ or the EU side http://www.youronlinechoices.com/uk/your-ad-choices/ manage.

Of course, you can also view our websites without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by selecting "Do not accept cookies" in your browser settings. How this works in detail, please refer to the instructions of your browser manufacturer. If you do not accept cookies, this may lead to functional restrictions of our offers.

5.3 Google Analytics

Insofar as you have given your consent, this website uses "Google Analytics", a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google). The use includes the operating mode "Universal Analytics". This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.

Google Analytics uses so-called "cookies", ie text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. We point out that on this website Google Analytics has been extended by an IP anonymization to ensure an anonymous collection of IP addresses (so-called IP masking). The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. For more information about Terms of Use and Privacy, please see https://www.google.com/analytics/terms/de.html or under https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.

The recipient of the data collected is Google. The personal data will be transmitted under the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission to the United States. You can see the certificate under https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI recall.

The data sent by us and linked to cookies, user IDs (eg user IDs) or advertising IDs will be automatically deleted after 14 months. The deletion of data whose retention period has been reached is done automatically once a month.

Our website uses the demographics feature of Google Analytics. It can be used to generate reports that contain statements on the age, gender and interests of the site visitors. These data are from interest-based advertising from Google and from third-party visitor data. An assignment of the data to a specific person is not possible. You can disable this feature at any time. This is possible through the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection".

For more details on how to handle user data on Google Analytics, please see the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

You may revoke your consent at any time with future effect by preventing the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all the functions of this website in full. Likewise, you can prevent the collection of data regarding your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plug-in that can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

In addition, Google Analytics can prevent the collection of your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to our website:

5.4 Social Plugins and Sharing Features

5.4.1 Facebook

Our website uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). The plugins are recognizable by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and the look of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user calls a web page of this offer that contains such a plugin, its browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated by this in the website. The provider therefore has no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to their level of knowledge:

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting the privacy of users, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him via this offer and associate it with his member data stored on Facebook, he must log out of Facebook before visiting the website.

Legal basis is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in using social plugins to promote the recommendation of posts on our websites.

5.4.2 Twitter buttons

Our website uses the buttons of the service Twitter. These buttons are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They are recognizable by terms such as "Twitter" or "episode", associated with a stopped blue bird. With the help of the buttons it is possible to share a post or page of this offer on Twitter or to follow the provider on Twitter.

When a user calls up a web page of this web site containing such a button, its browser establishes a direct connection with the servers of Twitter. The content of the Twitter buttons is transmitted by Twitter directly to the user's browser. The provider therefore has no influence on the amount of data that Twitter collects with the help of this plugin and informs users according to their level of knowledge. After this, only the IP address of the user, the URL of the respective website with the purchase of the button is transmitted, but not used for purposes other than the presentation of the button. Further information can be found in the privacy policy of Twitter at http://twitter.com/privacy.

The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in using social plugins to promote the recommendation of posts on our websites.

5.4.3 XING Sharebutton

On our website, the "XING Share Button" is used. When accessing this website, your browser will quickly establish a connection to XING AG servers ("XING") with which the "XING Share Button" functions (in particular the calculation / display of the counter value) will be provided. XING does not store personal data about you by calling this website. In particular, XING does not store any IP addresses. There is also no evaluation of your usage behavior via the use of cookies in connection with the "XING Share Button". The current data protection information on the "XING Share Button" and additional information can be found on this website: https://www.xing.com/app/share?op=data_protection.

The legal basis for data collection is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in using social plugins to promote the recommendation of posts on our websites.

5.5 Other Plugins and Tools

5.5.1 YouTube and Double-Click

To view the videos on our website, we use an offer from YouTube, LLC 901 Cherry Ave, San Bruno, CA 94066, USA, represented by: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Therefore, when opening a video sequence, the website of Youtube is called. The use of Youtube takes place in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

The videos are all embedded in the "advanced privacy mode", which means that if you do not play the videos, you will not transfer any data about you as a user to YouTube. Only when you play the videos, the following data will be transmitted. We have no influence on this data transfer.

By opening the video sequence YouTube receives the information that you have accessed the corresponding sub-page of our website. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not want to associate with your profile on YouTube, you must log out before opening the video sequence. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or customization of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website.

When you play the YouTube videos included on our site, Google also uses its DoubleClick service to show you ads that are relevant to you. We have no control over the collected data and data processing operations, nor are we aware of the full extent of the data collection, the purpose of the processing or the retention periods. Below, we'll let you know how DoubleClick's data processing works to our current knowledge.

A Google DoubleClick cookie (see also the Google Analytics section above) will associate your browser with a pseudonymous identification number (ID) to check which ads have appeared in your browser and which ads have been viewed. When calling up a YouTube video, so-called Google Dynamic Remarketing can also be used. It's designed to serve ads promoting the products and services you've viewed on other websites. By incorporating such features (eg AdWords), Google receives the information that you have accessed the relevant part of our website. If you're registered with a service provided by Google, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a chance that the provider will find and store your IP address.

For more information about how to handle user data, please refer to the YouTube Privacy Policy at: https://www.google.de/intl/de/policies/privacy.

5.5.2 Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer. For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

5.5.3 Google Maps

This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600
Amphitheater Parkway, Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this page has no influence on this data transfer. The use of Google Maps is for the sake of an appealing presentation of our online offers and an easy findability of the places we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. More information on how to deal with user data can be found in the Google Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

5.6. Use and use of PayPal

Stadtwerke Landshut have integrated components from PayPal on this website. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

When using Paypal, data of the user are automatically transmitted to PayPal. This is usually a first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing.

The transmission of data is done for the purpose of contract and payment processing. The legal basis for this is Art. 6 para. 1 lit. b DSGVO. Incidentally, we use Paypal to provide you with an effective and online means of payment. This corresponds to our legitimate interests i. P. D. Art. 6 para. 1 lit. f DSGVO.

The entered data will be processed and stored by Paypal only. This means that Stadtwerke Landshut will not receive any account or credit card-related information, but only information with confirmation or negative disclosure of the payment. The data may be transmitted by the payment service providers to credit reporting agencies. This transmission aims at the identity and credit check.

The applicable terms and conditions of Paypal can under https://www.paypal.com/de/webapps/mpp/ua/legalhub-full be retrieved.

The applicable data protection regulations of Paypal can be found under https://www.paypal.com/de/webapps/mpp/ua/privacy-full be retrieved.

5.7. Registration or data entry on our website

You have the opportunity to register on the website of Stadtwerke Landshut for the following applications, including personal data:

  • customer portal
  • rate calculator
  • Registration for swimming lessons
  • Registration and deregistration for energy supply contracts

Which personal data are transmitted to Stadtwerke Landshut will be determined from the respective input mask used for the registration. By registering on the website of Stadtwerke Landshut, the IP address assigned by the Internet service provider (ISP) of the person concerned, the date and time of registration are also stored. The storage of this data takes place against the background that only so the misuse of our services can be prevented, and this data if necessary to clarify committed offenses. In this respect, the storage of this data to secure the Stadtwerke Landshut is required.
The registration of the data subject serves Stadtwerke Landshut to offer content or services to the data subject. Registered persons are free to modify the personal data given at registration at any time or to delete it completely from the database of the data controller.

For important changes, such as the scope of the offer or for technical changes, we use the e-mail address specified during registration to inform you in this way.
The submission of the above information is voluntary, but without this information, a registration or processing of your request is usually not possible.

On the one hand, data processing serves the fulfillment of the contract with the data subject and, on the other hand, is required to safeguard the legitimate interests of Stadtwerke Landshut. A preponderance of conflicting interests of the parties is not apparent. Data processing is therefore permissible in accordance with Art. 6 para. 1 lit. b and f DSGVO.

As a responsible company, we refrain from automatic decision-making or profiling using the aforementioned data.

Within Stadtwerke Landshut, those who have access to your personal data will need access to fulfill our contractual or legal obligations. Our service providers and vicarious agents may also receive data for this purpose if they observe the confidentiality and our data protection directives (eg printing service providers, data carrier destruction service providers, EDP support and maintenance service providers, payment service providers, legal assistants and accounting firms). Any further transmission of your data to third parties in Germany or abroad is not intended and will only take place with your consent or in the case of a legal obligation. Our employees and the service companies commissioned by us are obliged to maintain secrecy and to comply with data protection regulations.

The stored data will be deleted as soon as the customer objects to a registration or removes it. All you need to do is send a simple e-mail info@stadtwerke-landshut.de.

5.8. Contact options on our website

Due to legal regulations, the website of Stadtwerke Landshut contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If an affected person contacts Stadtwerke Landshut by e-mail or via a contact form, the personal data transmitted by the person concerned will be automatically saved. Such personal data transmitted by a data subject to Stadtwerke Landshut on a voluntary basis will be stored for the purposes of processing or contacting the data subject.

The submission of the above-mentioned information is voluntary, but without this information processing of your inquiries is usually not possible.

The data processing is necessary to safeguard the legitimate interests of Stadtwerke Landshut. A preponderance of conflicting interests of the parties is not apparent. Data processing is therefore permissible in accordance with Art. 6 para. 1 lit. f DSGVO.

As a responsible company, we refrain from automatic decision-making or profiling using the aforementioned data.

Within Stadtwerke Landshut, those who have access to your personal data will need access to fulfill our contractual or legal obligations. Our service providers and vicarious agents may also receive data for this purpose if they observe the confidentiality and our data protection directives (eg printing service providers, data carrier destruction service providers, EDP support and maintenance service providers, payment service providers, legal assistants and accounting firms). Any further transmission of your data to third parties in Germany or abroad is not intended and will only take place with your consent or in the case of a legal obligation. Our employees and the service companies commissioned by us are obliged to maintain secrecy and to comply with data protection regulations.

The stored data will be deleted if follow-up questions are no longer to be expected, unless there is a legal obligation or a legitimate interest of Stadtwerke Landshut to continue to store the data.

5.9. Data processing in the context of an online application

If you are interested in employment at Stadtwerke Landshut, you have the opportunity to apply online. If you would like to apply for a specifically advertised position, we need the following information to initiate the application process and to contact you first:

  • salutation
  • First and last name
  • postal address
  • Your e-mail address
  • phone number
  • Cover letters
  • vitae

These details are mandatory and marked accordingly. In addition, you can additionally and optionally specify a possible title and other documents, eg. For example, you can upload special qualification or activity certificates and make them available to us in this way. Alternatively, you can tell us as an optional indication how you have become aware of us. Before you save this data or send it to us, you are informed about this privacy policy and informed about the handling of your application data.

The submission of mandatory information is voluntary, but without this information the use of our online application process is not possible.

The data processing described above for the purpose of online application is carried out in accordance with Art. 6 para. 1 lit. a DSGVO on the basis of your voluntary consent. We will collect, process and use the personal data provided by you online only for the purposes communicated to you. For other purposes, we will collect and process your personal data only with your consent (see Article 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation (see Article 7 GDPR).

As a responsible company, we refrain from automatic decision-making or profiling using the aforementioned data.

Within Stadtwerke Landshut, those who have access to your personal data will need access to fulfill our contractual or legal obligations. Our service providers and vicarious agents may also receive data for this purpose if they observe the confidentiality and our data protection directives (eg printing service providers, data carrier destruction service providers, EDP support and maintenance service providers, payment service providers, legal assistants and accounting firms). Any further transmission of your data to third parties in Germany or abroad is not intended and will only take place with your consent or in the case of a legal obligation. Our employees and the service companies commissioned by us are obliged to maintain secrecy and to comply with data protection regulations.

If Stadtwerke Landshut concludes a contract of employment with an applicant, the transmitted data will be stored for the purpose of executing the employment relationship in compliance with the statutory provisions.

If Stadtwerke Landshut does not conclude a contract of employment with the applicant, the application documents will be deleted upon completion of the application process, unless you have agreed that we will retain your application data for future application procedures. Further storage may be made on a case-by-case basis if there is a legitimate interest of Stadtwerke Landshut. A legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

Stadtwerke Landshut
As of September 2019

Privacy policy for video surveillance of Stadtwerke Landshut

In the following we inform about the processing of personal data in the context of video surveillance measures of Stadtwerke Landshut.

1. Definitions

The privacy statement of Stadtwerke Landshut is based on the terminology used by the European directive and regulatory authority when adopting the GDPR. Our privacy policy should be easy to read and understand, both for the public and for our customers and business partners. To ensure this, we would like to explain in advance the terminology used. Among other things, we use the following terms in this privacy policy:

a) personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter the "data subject"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

b) the person concerned
Affected person is any identified or identifiable natural person whose personal data is processed by the controller.

c) processing
Processing means any process or series of operations related to personal data, such as collecting, capturing, organizing, organizing, storing, adapting or modifying, reading out, querying, using, with or without the aid of automated procedures; disclosure through submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction.

2. Name and address of the person responsible for the data processing on this website

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions with a data protection character is:

Stadtwerke Landshut
Christoph-Dorner-Str. 9
84028 Landshut
Telephone: 0800 0871 871 (free from the German landline)
Fax: 0871 1436 2003
E-mail: info@stadtwerke-landshut.de

3. Contact details of the company data protection officer

You can contact our company data protection officer at:

Stadtwerke Landshut
Data Protection Officer
Christoph-Dorner-Str. 9
84028 Landshut
Phone: 0871 1436 2099
Fax: 0871 1436 2003
E-mail: datenschutz@stadtwerke-landshut.de

4. Video surveillance measures of Stadtwerke Landshut

Stadtwerke Landshut is currently using the following video surveillance measures, which are also mentioned on site:

  • Public transport (in the public transport buses of the Stadtwerke there is a video surveillance of the entire interior);
  • Parking garage "An der Freyung" (4 cameras in the entrance area);
  • Parking garage "Zentrum" (a total of 28 cameras on all parking decks);
  • Stadtbad Landshut, Dammstr. 28, 84034 Landshut (swimming pool and indoor pool);
  • Customer Center, Altstadt 74, 84028 Landshut (entire interior);
  • Customer Center, Christoph-Dorner-Str. 9, 84028 Landshut (entrance area and cash machine);
  • Public transport, Schulstr. 1, 84036 Landshut (factory premises and workshop area);
  • Klärwerk, Dirnau 2, 84036 Landshut (exterior and interior);
  • Biomass cogeneration plant (BMHKW), Am Lurzenhof, 84036 Landshut (crane runway / filling floor /
    Fuel charging point / entrance to the scale).

The video monitoring and recording takes place within the scope of the fulfillment of public duties as well as the exercise of our house right, in order to protect the facilities of the Stadtwerke Landshut as well as persons who are in or in the immediate vicinity, and their property. Video surveillance is permitted in accordance with Art. 24 BayDSG and § 4 BDSG i. V. m. Art. 6 para. 1 lit. f DSGVO.

5. Assigned use

We will only use the personal data collected by you for the purposes specified under no. Collect, process and use 4 described purposes.

For other purposes, we will collect and process your personal data only with your consent (see Article 6 (1) (a) GDPR). In this case, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing effected on the basis of the consent until the revocation has been made (see Article 7 GDPR

6. Forwarding or transmission of the data

Within Stadtwerke Landshut, those who have access to your personal data will need access to fulfill our contractual or legal obligations. Our service providers and vicarious agents may also receive data for this purpose if they observe the confidentiality and our data protection directives (eg printing service providers, data carrier destruction service providers, EDP support and maintenance service providers, payment service providers, legal assistants and accounting firms). Any further transmission of your data to third parties in Germany or abroad is not intended and will only take place with your consent or in the case of a legal obligation. Our employees and the service companies commissioned by us are obliged to maintain secrecy and to comply with data protection regulations.

7. Deletion or blocking of personal data

Stadtwerke Landshut does not store the personal data and documents created therefrom for a maximum of two months after collection of the data, insofar as these are not intended to ward off threats to public safety and order, prosecution of serious offenses or criminal offenses or to assert claims of legal claims (see Article 24 (4) BayDSG).

8. Automatic decision-making / profiling

As a responsible company, we refrain from automatic decision-making or profiling using the aforementioned data.

9. Rights of the persons concerned

Insofar as the following rights are not restricted by the Federal Data Protection Act (BDSG), the Bavarian Data Protection Act (BayDSG) or other effective legal provisions in a permissible manner, you have the right to

  • Information (Art. 15 GDPR)
  • Correction (Art. 16 GDPR)
  • Deletion (Article 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Article 20 GDPR).

Each interested party also has the right, at any time, to object to personal data relating to the processing of personal data resulting from its particular situation on the basis of Article 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions and to cases of direct mail (Article 21 GDPR).

Furthermore, without prejudice to any other administrative or judicial remedy, you have the right of appeal to the Supervisory Authority (Art. 77 GDPR) if you believe that the processing of your personal data violates the Data Protection Regulation (GDPR). The responsible supervisory authority is:

Bavarian State Commissioner for Data Protection
Wagmüllerstr. 18
80538 Munich
www.datenschutz-bayern.de
Telephone: 089 2126 720
Fax: 089 2126 7250
E-mail: poststelle@datenschutz-bayern.de.

Stadtwerke Landshut
As of September 2019

Data protection information according to Art. 13 and Art. 14 DSGVO for customers, suppliers and other transaction partners of Stadtwerke Landshut

Below we inform about the processing of personal data by Stadtwerke Landshut.

1. Definitions

The privacy statement of Stadtwerke Landshut is based on the terminology used by the European directive and regulatory authority when adopting the GDPR. Our privacy policy should be easy to read and understand, both for the public and for our customers and business partners. To ensure this, we would like to explain in advance the terminology used. Among other things, we use the following terms in this privacy policy:

a) personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter the "data subject"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

b) the person concerned
Affected person is any identified or identifiable natural person whose personal data is processed by the controller.

c) processing
Processing means any process or series of operations related to personal data, such as collecting, capturing, organizing, organizing, storing, adapting or modifying, reading out, querying, using, with or without the aid of automated procedures; disclosure through submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction.

Name and address of the data controller

Person responsible within the meaning of the GDPR, other data protection laws in the member states of the European Union and other regulations with data protection character are:

Stadtwerke Landshut
Christoph-Dorner-Str. 9
84028 Landshut
Telephone: 0800 0871 871 (free from the German landline)
Fax: 0871 1436 2052
E-mail: info@stadtwerke-landshut.de

3. Contact details of the company data protection officer

You can contact our company data protection officer at:

Stadtwerke Landshut
Data Protection Officer
Christoph-Dorner-Str. 9
84028 Landshut
Phone: 0871 1436 2099
Fax: 0871 1436 2003
E-mail: datenschutz@stadtwerke-landshut.de

4. Which data are processed by us and where did they come from?

We process personal data that we receive from our customers, suppliers and other business partners as part of our contractual or legal obligations. In addition, we process personal data that we have received from third parties in a permissible manner (eg City of Landshut, courts and other public authorities), if necessary for the performance of our duties. In addition, we process personal data that we have gained from publicly available sources (eg commercial register, press, media, Internet) in a permissible manner and may process.

Relevant personal data may be in particular:

  • Master data (name, address and date of birth, if applicable)
  • Performance data (data required for the fulfillment and settlement of our contractual or legal obligations, eg usage and consumption data, place of performance and service time)
  • Contact details (transmission channel, such as telephone, fax, e-mail, as well as date, cause and result of contact and copies of correspondence)
5. For what purpose is your data processed and on what legal basis is this based?

Your personal data will be collected and processed, if and to the extent necessary

  • to fulfill the contract with you or to carry out pre-contractual measures (eg offer) that are based on your request (see Article 6 (1) (b) GDPR);
  • to fulfill a public task (eg waste water disposal) (see Article 6 (1) (e) GDPR);
  • to fulfill another legal obligation of Stadtwerke Landshut (see Article 6 (1) (c) GDPR) or
  • legitimate interests (see Article 6 (1) (d) and (f) DSGVO).

We will collect, process and use the personal data collected by you only for the purposes notified to you. For other purposes and as long as and to the extent that one of the aforementioned legal bases is not met, we will collect and process your personal data only with your consent (see Article 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation (see Article 7 GDPR).

6. Are you obliged to provide us with your data?

You only have to provide those personal data that are necessary for the achievement of 5 mentioned purposes are required. Without this information, we will generally be unable to meet our contractual or legal obligations.

7. Will my data be shared with third parties?

Within Stadtwerke Landshut, those who have access to your personal data will need access to fulfill our contractual or legal obligations. Our service providers and vicarious agents may also receive data for this purpose if they observe the confidentiality and our data protection directives (eg printing service providers, data carrier destruction service providers, EDP support and maintenance service providers, payment service providers, legal assistants and accounting firms). Any further transmission of your data to third parties in Germany or abroad is not intended and will only take place with your consent or in the case of a legal obligation. Our employees and the service companies commissioned by us are obliged to maintain secrecy and to comply with data protection regulations.

8. How long will your data be stored?

In principle, your data will be deleted as soon as they are no longer needed for our task (see Art. 17 (1) GDPR). Your personal data will not be deleted, if and as long as this

  • to fulfill a legal obligation (eg retention obligations pursuant to § 257 HGB / § 147 AO) or to perform a public task of Stadtwerke Landshut (see Art. 17 (3) (b) GDPR);
  • to assert, exercise or defend legal claims of Stadtwerke Landshut or authorized third parties (see Article 17 (3) (e) GDPR).
9. To what extent is there an automated decision-making or profiling based on your personal data?

A fully automated decision-making process for the establishment and implementation of the contractual or legal services of Stadtwerke Landshut is not planned. If we use these procedures in individual cases, we will inform you about this separately, as far as required by law. We process your personal data in part and on an ad hoc basis with the aim of evaluating certain personal circumstances (profiling). For example, we use profiling to provide you with more targeted information and advice on products. The restrictions of Art. 22 GDPR are observed.

10. What rights do you have as a victim?

Insofar as the following rights are not restricted by the Federal Data Protection Act (BDSG), the Bavarian Data Protection Act (BayDSG) or other effective legal provisions in a permissible manner, you have the right to

  • Information (Art. 15 GDPR)
  • Correction (Art. 16 GDPR)
  • Deletion (Article 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Article 20 GDPR).

Each interested party also has the right, at any time, to object to personal data relating to the processing of personal data resulting from its particular situation on the basis of Article 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions and to cases of direct mail (Article 21 GDPR).

Furthermore, without prejudice to any other administrative or judicial remedy, you have the right of appeal to the Supervisory Authority (Art. 77 GDPR) if you believe that the processing of your personal data violates the Data Protection Regulation (GDPR). The responsible supervisory authority is:

Bavarian State Commissioner for Data Protection
Wagmüllerstr. 18
80538 Munich
www.datenschutz-bayern.de
Telephone: 089/21 26 72 0
Fax: 089/21 26 72 50
E-mail: poststelle@datenschutz-bayern.de.

Stadtwerke Landshut
As of September 2019