Data protection statement
This data protection statement is valid for all websites operated by the Federal Highway Research Institute (BASt). The BASt takes the protection of your personal data very seriously. We want you to know when we gather personal data from you, which data is being collected and how we use it.
We strictly adhere to the legal provisions of the German Federal Data Protection Act (BDSG) which regulates the processing and use of personal information.
In the course of the further development of our websites and the implementation of new legal provisions or technologies introduced to improve our services to you, it might become necessary to amend or modify this data protection statement. We therefore recommend that you reread this data protection statement from time to time.
Access to the Internet services
During every access to the BASt websites, a certain amount of data is stored in a log file for statistical and security purposes. We only log the following data for a limited period of time:
- name of the file requested
- date and time of the access
- volume of data transmitted
- information on whether the access was successful
- anonymised IP address of requesting host (last two bytes are set to 0, for example xxx.xxx.0.0)
This data is used exclusively for improving our Internet services and any way of tracing the data back to you is excluded.
Information logged during the access to BASt websites is only passed to third parties where disclosure is required by law or by court decisions or is necessary for the purposes of law enforcement or criminal prosecution in case of attacks on the infrastructure of BASt's web presence. We do not pass on any personal information – neither for commercial use nor for any other non-commercial purpose.
When you order information or subscribe online to one of the BASt newsletters or services, we will ask for your name and other personal details. This is done for the purpose of processing your enquiries and orders. You are free to decide whether you wish to provide this data or not. If you wish to receive the material ordered, though, it is imperative that you provide the information requested.
You may, at any time, object to the storage of your personal details. If you do so, any stored personal details of yours will be deleted completely. Please note that in such case we will not be able to proceed with your order.
If you contact us via contact form, your provided data will be stored for the purpose of processing your request and further questions. We do not pass your data to third parties without your permission.
Protection of minors
Persons under the age of 18 should not submit any personal information to us without the consent of their parents or legal guardian. We do not ask children or youngsters for personal information. We do not gather such data knowingly and do not pass it on the third parties.
Links to third-party websites
Our online offer contains links to third-party websites. We have no influence on whether these providers comply with data protection rules and regulations.
Social media functions
BASt has no influence on data collection and the further use of the data (for example place and duration of storage or linking of the data) by the social networks.
Data protection declaration Google +: http://www.google.de/intl/de/policies/privacy
Data protection declaration Facebook: https://de-de.facebook.com/about/privacy
Data protection declaration Twitter: https://twitter.com/privacy
Information on data protection at BASt
Data protection is personal protection. The aim of data protection is to safeguard the basic right to the self-determination of data. In order to achieve this objective, any processing of personal data of natural persons must comply with the EU General Data Protection Regulation, the area-specific data protection regulations and the Federal Data Protection Act.
This means that personal data may only be processed for specific, clear and legitimate purposes. Only those data may be processed which are absolutely necessary for the respective purpose. Furthermore, the data are always to be kept correctly and up to date. It may only be possible to identify the data subject for as long as this is necessary to achieve the respective purpose. In organisational and technical respect, the data must be suitably protected from unauthorised persons and against loss, destruction and damage.
These requirements also naturally apply to the data processing at BASt. BASt takes data protection seriously. It is committed to satisfying the requirements as best possible at all times. The broad spectrum of tasks at BASt, the volume and sensitivity of the processed data and advancing digitalisation with its ever new processing possibilities mean that data protection is to be afforded an increasingly higher importance.
The duties of BASt under data protection law are one side of the coin. The other side is the rights of the individuals affected by data processing which correspond to these duties. This is because consideration is only really given to the basic right to self-determination of information if the data subjects can find out at any time who knows what about them. In order to fill this principle of transparency with life, we are at your disposal for any questions you may have on data processing of relevance to you, particularly with respect to the following:
- Office responsible for processing
- Purpose of data processing
- Legal foundation for data processing
- Where applicable, the recipients of the processed personal data
- Expected duration of data storage
- Consequences if a data subject does not satisfy his or her duty to provide personal data
- Further processing of personal data for a purpose other than the purpose of collection and/or
- Source from which the processed personal data originate.
You can contact us - firstname.lastname@example.org
It is possible to get in touch by telephone using the number 02204 43–0, requesting that you be connected to the official data protection officer.
The legislator has also given data subjects the following rights in particular:
1. Right to information
Accordingly, the data subject can request information as to whether and which data BASt processes on him/her, where it obtained the data, to whom they were communicated and whether he/she can request correction, deletion or restriction of processing.
2. Right to correct
If personal data processed by BASt are incorrect or incomplete, the data subject can request that they be corrected or completed immediately.
3. Right to delete
BASt must delete personal data of the data subject immediately once the data is no longer required for satisfaction of tasks or the data subject has revoked his/her consent and there is no other legal foundation for processing or the data are unlawfully processed.
4. Righ to restrict processing
BASt may basically only process personal data with the consent of the data subject if processing has been restricted. The data subject can request a restriction of this nature
- if he/she has disputed the correctness of the data and then for an appropriate period of time in which the controller checks whether this applies,
- if the processing is unlawful but the data subject only requests a restriction to use instead of deletion,
- if BASt no longer requires the data but the data subject does to safeguard his/her rights.
If you are affected, you can reach us at the above email address and telephone number in this respect.
Data subjects also have the possibility to get in contact with the BfDI if they are of the opinion that data is not processed by BASt in compliance with data protection. BfDI is the supervisory authority responsible for the Federal Institute here.Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
(Federal Officer for Data Protection and Freedom of Information)
Fon: 0228 997799–0
Fax: 0228 997799–550