The protection of your personal data is of particular concern to the Federal Office of Civil Protection and Disaster Assistance (BBK), which is why we only process personal data to the extent necessary. Which data is required and processed for which purpose and on which basis depends to a large extent on the type of service you are using or on the task for which we require it.
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly, in particular by means of an association with an identifier such as a name, an identification number, location data or an online identifier.
For more information on which data is collected, for what purpose and on what basis, how you can contact the data controller and the data protection officer and what rights you have with regard to the processing of personal data, please refer to this privacy statement.
1. Data controller and data protection officer
The data controller for the processing of personal data is the
Federal Office of Civil Protection and Disaster Assistance
If you have specific questions about the protection of your data, please contact the BBK’s data protection officer
Data Protection Officer at the BBK
Federal Office of Civil Protection and Disaster Assistance
The following statement provides an overview of how the Federal Office of Civil Protection and Disaster Assistance (BBK) ensures the protection of your data and what kind of data is collected on what basis for what purpose.
2. Data processing by visiting this website
2.1 Access to www.mit-dir-fuer-uns-alle.de
Every time you visit a website, data is collected and exchanged that is required to provide the services of the website www.bbk.bund.de. These are:
– IP address of the internet service provider
– type and version of your Internet browser
– the operating system used,
– the previously visited page (referrer URL),
– date and time,
– the specific destination address,
– the page called up/name of the file called up,
– amount of data transferred,
– message as to whether the access/retrieval was successful.
When using the website www.bbk.bund.de, this data is also stored in log files on a server at our web provider T-Systems beyond the time of the visit. We are authorised to process this data beyond the time of your visit on the basis of Article 6(1)(e) of the EU General Data Protection Regulation (DSGVO) in conjunction with Section 5 and Section 4(2)(1)(4) of the Civil Protection and Disaster Assistance Act (ZSKG) in the context of the statutory task of “self-protection and information of the population”. This data is analysed and used for statistical and security purposes, as well as for optimisation. Data logged when accessing the website www.bbk.bund.de are only transmitted to third parties if we are legally obliged to do so. Data will not be passed on in other cases. The BBK does not combine this data with other data sources.
To ensure the highest possible level of data security, your personal data is protected by us with the greatest care and with technological procedures such as SSL encryption. SSL stands for “Secure Sockets Layer” and is an encryption method that is successfully used throughout the World Wide Web.
2.2 Access to the BBK website – data processing by visiting this website
2.2.1 Log files
Each time a data subject or an automated system accesses the website of the Federal Office of Civil Protection and Disaster Assistance, a series of general data and information is collected by the system. This general data and information is stored in the server’s log files.
The following data is stored in the log files for 30 days:
– Date and time of the retrieval (time stamp).
– Request details and destination address (protocol version, HTTP method, referrer, UserAgenString)
– Name of the retrieved file and amount of data transferred (requested URL including query string, size in bytes)
– Message as to whether the retrieval was successful (HTTP Status Code)
When using these general data and information, the BBK does not draw any conclusions about the data subject. There is no personal analysis or evaluation of the data for marketing purposes or profiling. The IP address of visitors to the website is not stored in this context.
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the secure operation of the website. Consequently, the user has no right to object.
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.
Cookies are used on the one hand for the collection of statistical values, such as access figures to websites. Since the BBK does not use any web analysis services or tracking tools on its websites, these types of cookies are not used.
On the other hand, cookies are necessary to technically ensure the secure and correct provision of websites. On the websites, these types of cookies are used to increase the security and functionality of the web applications offered.
The cookies do not contain any personal data. No IP address or other information is recorded that allows the actual user to be traced. The validity of all cookies used ends with the expiry of the current session or the closing of the respective website. Within the scope of certain functions on the websites, further cookies are used in order to be able to technically implement the offers. This is necessary, among other things, for the ordering service for brochures via the shopping basket function. The cookies are also only valid for the duration of your visit to the website.
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offer.
In doing so, we or our order processor process inventory data, contact data, content data, contract data, usage data, meta data and communication data of users of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO (conclusion of a contract for order processing).
2.2.4 Web analysis
On the basis of Art. 6 para. 1 lit. e DSGVO in conjunction with § 3 Bundesdatenschutzgesetz (Federal Data Protection Act), the BBK evaluates usage information for statistical purposes as part of its public relations work and for the demand-oriented provision of information on the tasks to be performed by the BBK.
This is done using the web analysis service Matomo.
If individual pages of our website are called up, the following data is stored:
– two bytes of the IP address of the user’s calling system (anonymous)
– the website called up
– the website from which the user accessed the website (referrer)
– the sub-pages accessed from the accessed website
– the time spent on the website
– the frequency with which the website is accessed
– Within the scope of our web analysis, no cookies are set on the user’s computer. The data is also not passed on to third parties.
If you do not agree with the completely anonymous storage and analysis of this data from your visit, you can object to its storage and use at any time by clicking on the following link.
In this case, an opt-out cookie will be placed in your browser, which means that Matomo will no longer collect any session data.
3 Collection of personal data when contacting us
You can contact the staff of the Federal Office of Civil Protection and Disaster Assistance by e-mail, contact form, letter or telephone (hotline). The BBK stores your data only for the purpose of contacting you and processing your request. The processing of your personal data is necessary for the purpose of dealing with your request.
If you contact us via the contact options described above, the (personal) data transmitted and the content (which may also contain personal data transmitted by you) will be processed on the basis of Article 6 (1) e DSGVO in conjunction with Section 3 BDSG for the purpose of processing your request. Retention takes place in accordance with the applicable time limits of the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).
Personal data is processed as described below depending on the contact method.
3.1 Contacting by e-mail
It is possible to contact the Federal Office of Civil Protection and Disaster Assistance (BBK) via the following e-mail box:
If you contact us by e-mail, the data you provide (e.g. surname, first name, address), or at least the e-mail address and the information contained in the e-mail (any personal data you may have provided), will be stored and processed for the purpose of contacting you and processing your request.
3.2 Contact by letter
You can contact the Federal Office of Civil Protection and Disaster Assistance (BBK) at the following postal address:
Federal Office of Civil Protection and Disaster Assistance
If you contact us by post, the data you provide (e.g. surname, first name, address, telephone number, subject, e-mail address) and the information contained in the letter (any personal data you may have provided) will be stored and processed for the purpose of contacting you and dealing with your request.
3.3 Contacting by telephone (hotline)
The Federal Office of Civil Protection and Disaster Assistance (BBK) can be contacted via the following hotline number:
If you use the hotline, the data you provide (e.g. surname, first name, address, telephone number, subject, e-mail address) as well as the information provided in the telephone call (if applicable, personal data provided by you) will be stored and processed for the purpose of contacting you and processing your request.
3.4 Contact via contact form
If you use the contact form for communication, it is necessary to provide your name and first name as well as your e-mail address. Without this data, your request transmitted via the contact form cannot be processed. Providing your address is optional and enables us to process your request by post, if you wish.
The following data is also collected by the system:
– IP address of the calling computer
– Date and time of registration
We would like to point out that the processing of the data transmitted with the contact form and the content, which may also contain personal data transmitted by you, is carried out on the basis of Article 6 paragraph 1 lit. e or f DSGVO in conjunction with § 3 BDSG for the purpose of processing your request.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified and storage is no longer necessary for any follow-up questions from the person concerned. The storage of the data is governed by the time limits applicable to the storage of written material in the Registrar’s Guideline, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).
Any additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
4. Online presence in social media
The BBK maintains online presences within social networks in order to inform users active there about the services and information offered by the BBK and to communicate directly via the platforms in case of interest. The BBK’s social media channels thus complement the BBK’s own web presences (www.bbk.bund.de, www.kritis.bund.de, www.max-und-flocke-helferland.de) and offer citizens who prefer this type of information an alternative means of communication. The BBK is currently represented in the following networks with its own online profiles:
All social media channels of the BBK can only be accessed by visitors to the website via an external link. The BBK does not use any plugins or other interfaces on this website that the respective networks offer for embedding the offers on websites.
An overview of the BBK’s social media presences can be found on the homepage of www.bbk.bund.de n the top header. There you will see that all offers on the website can be reached via an external link. Further information on this can be found under the point “Linking” of this data protection declaration.
As soon as visitors access the respective social media profiles in the respective network, the terms and conditions and data processing policies of the respective operators apply there.
The BBK has no influence on the collection of data and its further use by the social networks. Thus, there is no knowledge of the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on.
The BBK therefore expressly draws attention to the fact that the users’ data (e.g. personal information, IP address) is stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.
The BBK processes the data of users in the social media presences insofar as they contact and communicate with the BBK via comments or direct messages, for example.
The legal basis for the processing of data following the user’s consent is Art. 6 para. 1 lit. a DSGVO.
Within the online offer of BBK, no functions and contents of the service Twitter, offered by Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107 or 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, are integrated. The Twitter channels can only be accessed via an external link.
If visitors to the website are members of the Twitter platform, Twitter can assign the call to the social media channel to the user’s profile if the user visits the BBK Twitter profile while logged in. Twitter is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law.
We would like to point out that we have no influence on the content or scope of use of the data collected by Twitter Inc. For further information in this regard, please refer to the pages of Twitter Inc. at: http://twitter.com/privacy. Furthermore, we would like to point out that you can make appropriate changes to your Twitter account to protect your privacy.
You can access the data protection declaration by linking to the “YouTube” platform of the provider Google LLC, 1600 Amphi-theatre Parkway, Mountain View, CA 94043, USA: https://www.google.com/policies/privacy/.
All functions in the social media network are offered by YouTube. If you are logged in to YouTube with your own profile and access the BBK social media channel, YouTube can associate your visit with your logged-in profile.
We would like to point out that we have no influence on the content or scope of use of the data collected by YouTube.
4.3 Facebook and Instagram
All functions in the social media network Facebook and Instagram are offered by Facebook, 1601 South California Avenue, Palo Alto,CA 94304, USA. If you are logged into Facebook or Instagram with your own profile and access the AKNZ social media channel on Facebook or the BBK social media channel on Instagram, Facebook can assign your visit to your logged-in profile.
The BBK would like to point out that it has no influence on the content, scope of use or the data collected by Facebook. For further information in this regard, the BBK refers to the data protection declaration of
Facebook: https://facebook.com/privacy/explanation or
The BBK uses the technical platform and offers of LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (https://www.linkedin.com) for information and advice. The BBK has no influence on the content and scope of the use of the data collected by LinkedIn. For further information in this regard, the BBK refers to the data protection declaration of LinkedIn:
6. Your rights
You have the following rights vis-à-vis the BBK and the website www.bbk.bund.de operated by the BBK with regard to personal data concerning you:
– Right of access, Art. 15 DSGVO.
The right of access provides the data subject with a comprehensive insight into the data concerning him or her and some other important criteria such as the purposes of processing or the duration of storage. The exceptions to this right regulated in Section 34 BDSG apply.
– Right of rectification, Art. 16 DSGVO
The right to rectification includes the possibility for the data subject to have inaccurate personal data concerning him or her corrected.
– Right to erasure, Art. 17 GDPR
The right to erasure includes the possibility for the data subject to have data deleted by the controller. However, this is only possible if the personal data concerned are no longer necessary, are being processed unlawfully or if the relevant consent has been revoked. The exceptions to this right regulated in § 35 BDSG apply.
– Right to restriction of processing, Art. 18 DSGVO
The right to restriction of processing includes the possibility for the data subject to prevent further processing of personal data concerning him or her for the time being. A restriction occurs primarily during the examination phase of other rights exercised by the data subject.
– Right to object to the collection, processing and/or use, Art. 21 GDPR
The right to object includes the possibility for data subjects to object to the further processing of their personal data in a specific situation, insofar as this is justified by the performance of public tasks or public and private interests. The exceptions to this right regulated in Section 36 BDSG apply.
– Right to data portability, Art. 20 DSGVO
The right to data portability includes the possibility for the data subject to receive personal data concerning him or her in a common, machine-readable format from the controller in order to have it forwarded to another controller, if necessary. However, according to Art. 20 (3) sentence 2 DSGVO, this right is not available if the data processing serves the performance of public tasks.
– Right to withdraw consent, Art. 13 and 14 DSGVO
Insofar as the processing of personal data is based on consent, the data subject may revoke such consent for the relevant purpose at any time. The lawfulness of the processing based on the consent given remains unaffected until receipt of the revocation.
You can assert the aforementioned rights in writing at the contact details listed under point 1.
In accordance with Art. 77 DSGVO, you also have the right to lodge a complaint with the data protection supervisory authority, the Federal Commissioner for Data Protection and Freedom of Information.
7 Amendment of the data protection declaration
In the course of further development and the implementation of new technologies, changes to this data protection declaration may become necessary. We therefore recommend that you read this data protection declaration regularly.