Data Protection
Our Privacy Policy
We process personal data only to the extent necessary and for the purpose of providing a functional and user-friendly website.
In accordance with Article 4(1) of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), ‘processing’ means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as the collection, recording, organisation, the structuring, the storage, the adaptation or alteration, the retrieval, the consultation, the use, the disclosure by transmission, dissemination or any other form of making available, the alignment or combination, the restriction, erasure or destruction.
In the following privacy policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we, either alone or jointly with others, determine the purposes and means of the processing . In addition, we provide information below on the third-party components we use for optimisation purposes and to enhance the quality of use, insofar as this involves third parties processing data under their own responsibility.
Our Privacy Policy is structured as follows:
I. Information about us as the data controller
II. Rights of users and data subjects
III. Information on data processing
IV. Joint controllers for the Facebook profile and Instagram profile of Lutherstadt Wittenberg / Lutherstadt Wittenberg Marketing GmbH
I. Information about us as the data controller
The data controller for this website, for the purposes of data protection law, is:
Lutherstadt Wittenberg Marketing GmbH
Markt 26
06886 Lutherstadt Wittenberg
Tel: +49 3491 41 92 60
Fax: +49 3491 41 92 64
Email: marketing@wittenberg.de
Hereinafter referred to as ‘LWM’
Data Protection Officer:
Holger Flemig, EPRO Consult Dr Prössel und Partner GmbH
Email: lwm@epro-consult.de
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to receive confirmation as to whether data concerning them is being processed, to obtain information about the data being processed, to receive further information regarding data processing, and to receive copies of the data (see also Article 15 of the GDPR);
- to have inaccurate or incomplete data rectified or completed (see also Article 16 of the GDPR);
- to the immediate erasure of data relating to them (see also Article 17 of the GDPR), or, alternatively, where further processing is required under Article 17 (3) of the GDPR is required, to restriction of processing in accordance with Article 18 of the GDPR;
- to receive the data relating to them and provided by them, and to have this data transferred to other providers/data controllers (see also Article 20 of the GDPR);
- to lodge a complaint with the supervisory authority if they consider that the data relating to them is being processed by the provider in breach of data protection provisions (see also Article 77 of the GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or the restriction of processing carried out pursuant to Articles 16, 17(1) and 18 of the GDPR; however, this obligation does not apply where such notification is impossible or would involve a disproportionate effort . Notwithstanding this, the user has the right to be informed about these recipients.
Furthermore, users and data subjects have, under Article 21 of the GDPR, the right to object to the future processing of data relating to them, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purposes of direct marketing is permissible.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for which they were stored no longer applies, provided that there are no statutory retention obligations preventing the deletion of the data and no contrary information is provided below regarding individual processing procedures.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your web browser to us or to our web hosting provider and stored in log files (server log files). These so-called server log files contain, amongst other things, the type and version of your web browser, the operating system, the website from which you navigated to our website (referrer URL), the website(s) on our website(s) that you visit, the date and time of the respective access, the IP address of the internet connection from which our website is accessed, as well as the volume of data transferred and the requesting provider.
The data collected in this way is stored temporarily, but not in conjunction with any other data relating to you.
This storage is carried out on the legal basis of Article 6(1) (f) of the GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.
The data will be deleted after seven days at the latest, provided that no further retention is required for evidential purposes. Otherwise, the data is exempt from deletion, in whole or in part, until an incident has been fully resolved.
Cookies
This website uses cookies. We use so-called cookies on our website, for example, to personalise content and adverts, to offer social media functions and to analyse traffic to our website.
Cookies are small text files or other storage technologies that are placed and stored on your device by the web browser you are using. These cookies process certain information about you to a variable extent. This processing makes our website more user-friendly, effective and secure, as it enables, for example, the display of our website in different languages or the provision of a shopping basket function.
This website uses various types of cookies. Some cookies are placed by third parties that appear on our pages. Cookies may be stored on your device if they are absolutely necessary for the operation of this website. For all other types of cookies, we require your consent.
The cookies we use are categorised as follows:
- Essential (Necessary)
- Statistics
You can view details of all cookies at any time via the ‘Cookie Settings’ icon at the bottom right of our website, or change or withdraw your consent.
You can prevent or restrict the installation of cookies by adjusting the settings of your web browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required to do so depend on the specific web browser you are using. If you have any questions, please use the help function or documentation provided by your web browser, or contact its manufacturer or support team.
However, if you prevent or restrict the installation of cookies, this may mean that not all features of our website are fully accessible.
Essential cookies
The legal basis for data processing is Article 6(1)(f) of the GDPR. The legitimate interest lies in ensuring the website functions correctly and is user-friendly. The data will be deleted as soon as the purpose for which it was collected has been fulfilled.
Matomo (Statistics – Opt-in)
We use Matomo (formerly ‘PIWIK’) on our website. This is an open-source web analytics solution that enables us to analyse the use of our website. In doing so, your IP address, the page(s) on our website that you visit, the website from which you navigated to our website (referrer URL), the length of time you spend on our website, and the frequency with which you visit one of our websites are processed. To collect this data, Matomo stores cookies on your device via your web browser.
We use Matomo to analyse usage patterns on our website, provided that you have given us your consent to do so by agreeing to the use of the relevant Matomo cookies (statistics) via the ‘Cookie Settings’ in the bottom right-hand corner of our website. The legal basis for the processing of your personal data for this specific purpose is then Article 6(1)(a) of the GDPR.
You may withdraw your consent to the use of the relevant cookies at any time with future effect, in accordance with Article 7(3) of the GDPR. To do so, To do so, you simply need to notify us of your withdrawal by adjusting your consent via the ‘Cookie Settings’ in the bottom right-hand corner of our website as appropriate.
We have taken steps to ensure, as far as possible, an appropriate level of protection for your data. We use Matomo with the anonymisation feature ‘Automatically Anonymise Visitor IPs’. This anonymisation feature truncates your IP address by two bytes, making it impossible to link it to you or to the internet connection you are using .
YouTube / YouTube content (external media)
We use the YouTube.com platform to upload our own videos and make them publicly available. This is a video portal operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to simply as ‘YouTube’.
We have embedded YouTube videos into our website which are stored at http://www.youtube.com and can be played directly from our website. These are all embedded in ‘enhanced privacy mode’, which means that no data about you as a user is transmitted to YouTube unless you play the videos. The use of a two-click solution prevents a connection from being automatically established to the respective server of the third-party provider when you access our website, in order to display the external content. You therefore decide for yourself whether the provider collects information about you. Only when you play the videos will the data mentioned in the next paragraph be transmitted. We have no control over this data transmission.
When you visit the website, YouTube receives the information that you have accessed the relevant page on our website. This connection is necessary to display the relevant video on our website via your web browser. In the course of this, YouTube will collect and process at least your IP address, the date and time, and the webpage you have visited. If you are logged in to Google/YouTube at the same time, Google/YouTube will associate the connection information with your Google/YouTube account . If you wish to prevent this, you must either log out of Google/YouTube before visiting our website or adjust the relevant settings in your Google/YouTube user account . Google/YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or tailoring its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver personalised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.
In the event of the transfer of personal data to Google LLC, which is based in the USA, Google relies on EU Standard Contractual Clauses for the relevant data transfers to ensure compliance with data protection requirements when transferring personal data from the EEA to so-called third countries.
Access by US authorities to the data stored by Google cannot be ruled out. The transfer of personal data to the USA may, in terms of the adequacy of the level of protection, entail various risks to the lawfulness and security of data processing, as the USA is currently regarded as a third country from a data protection perspective. You do not have the same rights there as you do within the EU/EEA. In some cases, you may have no legal remedies available against access by public authorities.
Further information on the collection and use of data as well as your rights and safeguards in this regard is provided by Google in the privacy policy available at https://policies.google.com/privacy?hl=de .
Social media links via graphics or text links
We also promote our presence on the social networks listed below on our website. This is done via a linked image from the respective network. The use of this linked image prevents a situation where, when a website featuring a social media promotion is accessed, a connection is automatically established with the respective social network’s server in order to display an image from that network itself. It is only when the user clicks on the relevant graphic that they are redirected to the service of the respective social network.
Once the user has been redirected, the respective network collects information about the user. It cannot be ruled out that the data collected in this way may be processed in the USA.
This initially includes data such as the IP address, date, time and the page visited. If the user is logged into their account on the relevant network at the time, the network operator may, where applicable, link the information collected during the user’s specific visit to the user’s personal account. If the user interacts via a ‘Share’ button on the relevant network, this information may be stored in the user’s personal account and, where applicable, published. If the user wishes to prevent the information collected from being directly linked to their user account, they must log out before clicking on the graphic. In addition, it is possible to configure the relevant user account accordingly.
The following social networks are integrated into our site via links:
Facebook & Instagram
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
Facebook Privacy Policy: https://www.facebook.com/policy.php
Instagram Privacy Policy: https://help.instagram.com/155833707900388
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google Privacy Policy: https://policies.google.com/privacy?hl=de
Online job applications / Publication of job advertisements
We offer you the opportunity to apply for a job with us via email . In the case of these digital applications, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process.
The legal basis for this processing is Section 26(1), first sentence, of the German Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Regulation (GDPR).
If an employment contract is concluded following the application process, we will store the data you provided in your application in your personnel file for the purposes of standard organisational and administrative processes – naturally in compliance with any further legal obligations.
The legal basis for this processing is also Section 26(1), first sentence, of the Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Regulation (GDPR).
If an application is rejected, we will automatically delete the data provided to us two months after notification of the rejection. However, the data will not be deleted if statutory provisions, for example due to the duty to provide evidence under the AGG, require longer retention of up to four months or until the conclusion of legal proceedings.
The legal basis in this case is Article 6(1)(f) of the GDPR and Section 24(1)(2) of the BDSG. Our legitimate interest lies in the defence or enforcement of our legal rights.
If you expressly consent to your data being stored for a longer period — for example, for inclusion in a database of job applicants or prospective clients — the data will be further processed on the basis of your consent . The legal basis in this case is then Article 6(1)(a) of the GDPR. You may, of course, withdraw your consent at any time in accordance with Article 7 (3) of the GDPR by notifying us, with effect for the future .
IV. Joint controllers for the Facebook profile and Instagram profile of Lutherstadt Wittenberg / Lutherstadt Wittenberg Marketing GmbH (‘LWM’)
Privacy Policy for LWM’s social media pages
Data Controller
The following privacy policy provides an overview of the collection and processing of your data on our pages on the following social media platforms (hereinafter “social media profiles”):
- Instagram, hereinafter referred to as “Instagram profile”:
https://www.instagram.com/mein_wittenberg
https://www.instagram.com/kauflokalwittenberg
- Facebook: https://de-de.facebook.com/kauflokalwittenberg, hereinafter referred to as the “Facebook profile”
Please note that you use our social media pages and their features, as well as social media platforms in general, at your own risk. This applies in particular to the use of interactive features (e.g. liking, commenting, sharing, rating). You can find the relevant terms of use here:
- Facebook: https://de-de.facebook.com/legal/terms/
- Instagram: https://help.instagram.com
You can access the joint privacy policy here: https://de-de.facebook.com/about/privacy
In addition to us, the operator of the social media platform (hereinafter referred to as the ‘Provider’) is also the data controller for data processing on our social media pages (Facebook and Instagram platforms), hereinafter also referred to as ‘Meta’ or ‘Facebook’.
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour Dublin 2
Ireland
Online contact form for the Data Protection Officer of Facebook and Instagram: https://de-de.facebook.com/help/contact/540977946302970.
The operators of the social media platforms are available to you as your central point of contact. However, you may also exercise your rights in relation to processing carried out under joint responsibility directly with us . Should you contact us, we will liaise with the relevant provider to respond to your enquiry and ensure your data subject rights are upheld.
Notes
Please note that Meta stores the data of registered users and other interested visitors to the social media platforms, e.g. personal information (registration details, status updates, photos, location etc.) or IP addresses, cookies, etc., even outside the European Union (EU) or the European Economic Area (EEA), and may use this data for its own business purposes.
We have no influence over the collection and use of data by the provider. Furthermore, it is not clear to us what data Meta stores, where and for how long, nor to what extent Meta complies with existing deletion obligations, what analyses and linkages are carried out with the data, and to whom the data is disclosed. Whenever you are logged in with your respective social media account and visit our social media pages, the provider may associate this with your profile .
The transfer of data to the USA and access by US authorities to the data stored by Meta cannot be ruled out. The transfer of personal data to the USA may, in terms of the adequacy of the level of protection, entail various risks to the lawfulness and security of data processing, as the USA is currently regarded as a third country from a data protection perspective. You do not have the same rights there as you do within the EU/EEA. In some cases, you may have no legal remedies available against access by public authorities.
A joint controller agreement in accordance with Article 26 of the GDPR has been concluded, which sets out, amongst other things, how the respective roles and responsibilities in the processing of personal data are structured and who fulfils which data protection obligations .
Information on data processing
LWM operates:
- the Instagram profile of Lutherstadt Wittenberg ‘mein_wittenberg’, to publicise the services and offerings of Lutherstadt Wittenberg and to interact with visitors to social media platforms (hereinafter referred to as ‘users’).
- the Facebook profile and the Instagram profile “kauflokalwittenberg”, to highlight services and offers and to interact with visitors to social media platforms (hereinafter referred to as “users”) .
When using LWM’s social media profiles, personal data is processed. The following section provides information on the nature and scope of the data processing for which LWM is data controller under data protection law in this context.
LWM does not itself store any personal data relating to your use of the respective social media pages.
Information that you publish on LWM’s respective social media pages (e.g. comments) or send via the respective messaging service is stored by the providers on the basis of your user relationship and can be removed by you there.
Processing of usage data under joint responsibility of Meta and LWM
When you visit LWM’s social media pages, Meta uses certain usage data (e.g. whether you have or have commented on them) to provide LWM with aggregated usage statistics (known as ‘Page Insights’) . Usage statistics do not allow conclusions to be drawn about the behaviour of individual users, but merely provide LWM with an overview of the use of its social media pages (e.g. which posts were clicked on particularly frequently). LWM itself has no access to the personal data processed for the compilation of the statistics . Which user activities are logged by Meta on the social media platforms is determined solely by Meta and cannot be set up, changed or otherwise influenced by LWM.
LWM obtains usage statistics from Meta regarding its respective social media pages in order to improve the posts published there and to make them as interesting as possible for users. Processing is carried out on the basis of a balancing of interests in accordance with Article 6(1), first sentence, point (f) of the GDPR, which always takes your interests into account as well. If you yourself are registered on Instagram or Facebook, the processing is carried out in accordance with Article 6 (1), first sentence, point (b) of the GDPR and is also in accordance with the terms of use applicable between you and Instagram in each case.
For the processing of personal data for the purpose of compiling these usage statistics, Facebook and LWM are joint controllers in accordance with Article 26 of the GDPR.
The information on Instagram Page Insights (https://de-de.facebook.com/legal/terms/page_controller_addendum) describes which data is processed within the framework of joint controllership and includes the ‘Page Insights Supplement’, in which Facebook and LWM have contractually stipulated which of them fulfils which obligations under the GDPR.
Processing of your data when communicating with LWM via the Instagram page
Instagram usage
On Instagram, the ‘Instagram Direct Messaging’ feature allows you to communicate directly with us. Where you contact us via the Instagram Direct Messaging function, LWM processes your data (e.g. your name and the content of your messages) in order to deal with your enquiry.
Where necessary, LWM also processes your data for the purposes of asserting legal claims and defending itself in legal disputes, as well as for the prevention and investigation of criminal offences (e.g. in the case of hate speech or inflammatory comments).
The legal basis for processing the data transmitted when making contact is Article 6(1)(f) of the GDPR. If the purpose of making contact is to conclude a contract or if it takes place within the framework of an existing contractual relationship, then the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
Your data will be deleted once your enquiry has been fully answered and provided that no statutory retention obligations prevent its deletion, such as in the event of any subsequent contract fulfilment.
Processing of your data when communicating with LWM via Facebook pages
Use of Facebook
If you contact LWM via its Facebook pages, for example by commenting on a post or sending a message via Facebook Messenger, LWM will process your data (e.g. your name and the content of the communication) in order to deal with your enquiry .
Where necessary, LWM also processes your data for the purposes of asserting legal claims and defending itself in legal disputes, as well as for the prevention and investigation of criminal offences (e.g. in the case of hate speech or inflammatory comments).
The legal basis for processing the data transmitted when you contact us is Article 6(1)(f) of the GDPR. If the purpose of making contact is to conclude a contract or if it takes place within the framework of an existing contractual relationship, then the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
Your data will be erased once your enquiry has been fully answered and provided that there are no statutory retention obligations preventing its erasure, such as in the event of any subsequent contract fulfilment.