Privacy Policy

Responsible handling of personal data is a high priority for the Federal Office for the Safety of Nuclear Waste Management (BASE). To enable you to use all the functions of this website, it is necessary to collect certain information during your visit to the website. This privacy policy provides information on what personal data we collect and when; on how we use this data and what your rights are as a user of our internet services. We also provide information about the personal data we collect from visitors to our premises.

Content

I. Who is responsible for data processing and whom can you contact?
II. What is personal data?
III. Where is personal data processed and for what purpose?
1. Visit to the website and creation of log files
2. Use of cookies
3. Links to websites of other providers and social media
4. Contact form and email
5. Newsletter
6. Embedded videos, e.g. YouTube
7. Social media plugins
8. Ordering publications
9. Registration as a visitor at reception
10. Telephone contact
11. Video surveillance
IV. What are your rights?
V. Right of appeal to a supervisory authority

I. Who is responsible for data processing and whom can you contact?

The person responsible in the sense of data protection law is:

Federal Office for the Safety of Nuclear Waste Management (BASE)
Wegelystraße 8
10623 Berlin
Postal address: 11513 Berlin
Phone: +49 (0)30 18 4321 0
Email: info@base.bund.de

You can reach the Data Protection Officer at:

Federal Office for the Safety of Nuclear Waste Management (BASE)
Data Protection Officer
11513 Berlin
Email: dsb@base.bund.de

II. What is personal data?

Personal data in the sense of this information is all information that may relate to your person, e.g. name, address, email and IP address, picture, sound and video recordings.

III. Where is personal data processed and for what purpose?

The processes of data collection both for visits to our website as well as visits to one of our premises are outlined below:

1. Visit to the website and creation of log files

1.1 Description and scope of data processing

We will collect and store user data each time you visit the BASE web pages. In this context, the IP address is only processed to relay requests or responses at the level of network communication, but is not made available to the web application (website), and is therefore not stored or evaluated in relation to the use of the web application.

Every visit to our website is recorded in a log file to ensure data security. The following data is stored in a log file:

• Visited page or name of the retrieved file,
• Date and time of access,
• Volume of data transferred,
• Notification whether the access or retrieval was successful,
• Details of the programme retrieving the data (web browser, etc.),
• Internet address of the previously visited page (so-called referrer),
• Parameter list of the request (e.g.: Search parameters, sort sequence and page specification within lists), provided these are contained in the URL.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, the user cannot object to this data being collected.

1.2 Legal basis for data processing

The legal basis for this form of data processing is Art. 6 para. 1 p. 1 lit. e) GDPR. The functionality of the website, the performance of security analyses and the prevention of dangers are legitimate interests of BASE.

1.3 Purpose of data processing

The system needs to temporarily store the IP address to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for other purposes, such as PR communication, will not take place in this context.

1.4 Duration of storage

Data will only be stored for as long as it is needed, and deleted immediately afterwards. The log file will be retained for a period of 30 days.

2. Use of cookies

2.1 Description and scope of data processing

We use cookies to enhance the secure performance of our website. Cookies are intended to increase the security and functionality of the web applications offered. The following cookies are essential:

JSESSIONID cookie: Used for session management of the application server. The validity ends with the expiry of the current session.

AL-SESS-S / AL_LB: Serves the sole purpose of load distribution. The validity ends with the expiry of the current session.

NID: Serves the sole purpose of load distribution. Expires at the end of the current session.

TS...: The cookie name varies depending on the website. Serves to always forward a user's requests to the same server within a session. Expires at the end of the current session.

GSB banner: Used to prevent the cookie banner from being displayed again if the user has already clicked the OK button. Validity: 1 month.

You can use any internet browser to see when cookies are set and what they contain.

2.2 Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. e) GDPR.

2.3 Purpose of data processing

The purpose of using strictly necessary cookies is to provide the basic functions of the website and enhance browsing experience. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected through strictly necessary cookies is not used to create user profiles.

2.4 Duration of storage

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing your internet browser settings, you can deactivate or restrict the transmission of cookies.

Cookies that have already been stored can be deleted at any time. This can also be done automatically. If strictly necessary cookies are deactivated for our website, it may no longer be possible to use all the functions of the website.

3. Links to websites of other providers and social media

The BASE website contains links to websites of other providers and social media. We herewith explicitly state that they process the data of their users in accordance with their own data protection guidelines. BASE has no influence on whether these providers comply with data protection regulations. Please check the privacy policy of the respective responsible body.

4. Contact form and email

4.1 Contact form

4.1.1 Description and scope of data processing

The BASE website contains a contact form which can be used to contact us electronically. If a user takes advantage of this option, the data provided in the entry form is transmitted to BASE and stored there. This comprises the following data:

• Title
• Name
• Email address
• Postcode and residence
• Your concern
• First name (optional)
• Telephone number (optional)
• Street, house number (optional)
• Institution (optional)

The data collected in this context will not be passed on to third parties. It is used exclusively for processing the conversation.

4.1.2 Legal basis for data processing

The legal basis for the processing of data in this case is the consent of the user, pursuant to Art. 6 para. 1 p. 1 lit. a), 7 GDPR.

4.1.3 Purpose of data processing

The processing of personal data provided when contacting us via the contact form serves to process the contact request and to ensure the security of our information technology systems.

4.1.4 Duration of storage

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent for storage, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions - in particular statutory storage periods - remain unaffected.

4.2 Email

4.2.1 Description and scope of data processing

Alternatively, it is possible to contact us via the email address info@base.bund.de. In this case, we will store the personal user data transmitted with the email.

Data collected in this context will not be passed on to third parties. The data is used exclusively for processing the conversation.

4.2.2 Legal basis for processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 p. 1 lit. e) GDPR. The possibility of electronic contact serves the fulfilment of our sovereign tasks. If the email contact is aimed at the conclusion or implementation of a contract, the additional legal basis for the processing of data is Art. 6 para. 1 p. 1 lit. b) GDPR.

4.2.3 Purpose of processing

We process personal data from the email with the sole purpose of dealing with your contact request. This constitutes a legitimate interest for the processing of your data.

4.2.4 Duration of storage

The data you send to us by email will remain with us until you request its deletion, revoke your consent to storage, or until the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular legal storage periods - remain unaffected.

5. Newsletter

5.1 Description and scope of data processing

You can subscribe to a newsletter on the BASE website. The newsletter is sent out via the content management system "GSB" (Government Site Builder).

Subscriptions for the newsletter are logged so that we can verify the subscription process in accordance with legal requirements. The personal data collected for sending out the newsletter (email address) is used exclusively for sending the newsletter.

We will obtain your consent to our processing your data during the registration process, where reference will be made to this privacy policy. The newsletter subscription process follows a so-called double opt-in procedure, i.e. after registration you will receive an email in which you are asked to confirm your subscription. This confirmation is necessary to avoid anyone using others’ email adresses to register.

It is possible to revoke your consent to the storage of personal data at any time. This can be done via an unsubscribe link, which can be found at the end of an email sent via the newsletter backend system.

Alternatively, you can also unsubscribe from the newsletter here.

5.2 Legal basis for data processing

The processing of personal data is based on Art. 6 para. 1 p. 1 lit. a), 7 GDPR following consent given by you.

5.3 Purpose of data processing

The purpose of collecting the user's email address is to deliver the newsletter.

5.4 Duration of storage

The data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. Your data will therefore be processed throughout the duration of your subscription.

6. Embedded videos, e.g. YouTube

YouTube videos provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland are integrated in our online services. These videos are stored on https://www.youtube.com and can be played directly from our website to improve user-friendliness and facilitate the presentation of various contents (e.g. a video on “what exactly is radioactivity?”). This serves to inform the public as extensively as possible. The processing of data thus serves to fulfil a public duty in the sense of Art. 6 para. 1 p. 1 lit. e) GDPR.

We have embedded our videos in an "extended data protection mode" to facilitate data protection-friendly viewing. A connection to a YouTube server is only established when you play the videos. When you visit the website, YouTube will receive the information that you have accessed the corresponding sub-page of our website. Furthermore, the above-mentioned basic data such as the IP address and time stamp will be transmitted.

This shall take place regardless of whether you are logged in to a YouTube user account or whether no such user account exists. If you are logged in to YouTube as a member, YouTube shall assign this information to your personal user account. When using the service, for example by clicking on the start button of a video, this information will also be assigned to your user account.

You can prevent this assignment of information by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. and deleting the corresponding cookies before using our website. YouTube will store your data as usage profiles and use them for the purposes of advertising, market research and/or the needs-based design of its website.

Further information on data processing and notes on data protection by YouTube can be found at https://policies.google.com/privacy?hl=de&gl=de. This site also provides further information regarding your rights and setting options to protect your privacy.

7. Social media plugins

Social media plugins are used on our pages (e.g. Twitter, Youtube, Instagram, XING, kununu und Linkedin) to make our content more visible. This serves to provide the public with extensive information. The processing of data thus serves the public fulfilment of duties within the meaning of Art. 6 para. 1 p. 1 lit. e) GDPR. You can usually recognise the plugins by the respective social media logos.

Please note: A direct connection to the provider's server is only established when you activate the respective plugin by clicking on the associated button (consent). Simply visiting our pages does not trigger any data transmission. Activating the plugin constitutes consent within the meaning of Art. 6 (1) p. 1 lit. a) GDPR.

If you activate data transmission by clicking the corresponding button, the following data transmission will take place.

7.1 Twitter

Our website uses plugins of the social network twitter.com ("Twitter"). Twitter is provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. A direct connection to the provider's server will only be established if you activate the respective plugin by clicking on the associated button (consent). Simply visiting our pages does not trigger any data transmission.
We would like to emphasise that, as the site operator, we have no knowledge of the content of the transmitted data or its use by Twitter. You can find more information on this in Twitter's privacy policy at http://twitter.com/privacy.

You can change your Twitter privacy settings in your account settings.

7.2 YouTube

Our website uses plugins from the website YouTube. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in "extended data protection mode". According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video.

Regarding further details, we would like to refer you to the explanations under point 6.

7.3 Instagram

Instagram service functions embedded in our pages. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This will allow Instagram to connect the visit to our pages to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

7.4 XING

Plugins to the social network XING are integrated into our website. The operator of the website is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Clicking on the corresponding button will redirect you to BASE's profile on XING.

We would like to point out that, as the site operator, we have no knowledge of the content of the transmitted data or its use by XING. Further information can be found in XING's privacy policy at https://privacy.xing.com/en

7.5 kununu

Plugins of the social network kununu, which is operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, are integrated into our website. Clicking on the corresponding button will redirect you to BASE's profile on kununu.

We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by kununu. We have no influence on the scope of the data that kununu collects via the button. Information regarding the purpose and scope of the collection, further processing and use of your data by kununu, your rights and setting options for protecting your privacy can be found in kununu's privacy policy: https://privacy.xing.com/en/privacy-policy

If you do not want kununu to be able to assign your visit to our pages to your user account, please log out of your kununu user account beforehand.

7.6 LinkedIn

Plugins of the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are integrated into our website.

Clicking on the corresponding button will redirect you to BASE's profile on LinkedIn, and LinkedIn will also learn that you have visited our site.
We have no knowledge of and no influence on the possible collection and use of your data by LinkedIn after the button has been clicked.
For more information, please refer to LinkedIn's privacy policy at https://de.linkedin.com/legal/privacy-policy.

8. Ordering publications

8.1 Description and scope of data processing

The BASE website also offers the option to order publications. This is done by placing them in a virtual shopping basket.

The following fields must be completed as part of the ordering process:

• Salutation
• First name (optional)
• Surname
• Company (optional)
• Street, house number
• Postcode (optional)
• City (optional)
• Country (optional)
• Email address (optional)

8.2 Legal basis for data processing

The processing is based on Art. 6 para. 1 p. 1 lit. b GDPR. The ordering process shall constitute a gratuitous contract, the fulfilment of which requires the processing of data.

8.3 Purpose of storage

The purpose of storage/processing of data is to enable us to send you the publication.

8.4 Duration of storage

The data you send us will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

9. Registration as a visitor at reception

9.1 Description and scope of data processing

When visiting one of our properties you will be asked to present yourself at the reception desk. As a visitor, you must provide the following personal data in writing:

- Surname and first name
- Authority/company, if applicable
- Your address
- Your telephone number
- email address
- duration of the appointment

If you visit our properties as an employee of our contractors/service providers, it is sufficient to provide your employer’s contact (address, telephone number and email).

9.2 Legal basis for data processing

The legal basis is Art. 6 para. 1 p. 1 lit. e) GDPR. The security of the properties serves to maintain the operation of services. The processing of data is thus indispensable for the fulfilment of our legal duties.

9.3 Purpose of storage

The listed data is logged in order to maintain an overview of who has been on the property - outside the circle of employees – for security reasons.

9.4 Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

10. Telephone contact

10.1 Description and scope of data processing

If you contact us by phone, your personal data will also be processed. The following data will normally be processed:

• Name
• Telephone number

The data will be used exclusively for processing the conversation.

10.2 Legal basis for data processing

The possibility of contacting us by telephone serves the fulfilment of our sovereign tasks and the closely related public relations work. The legal basis for the processing of data is Art. 6 para. 1 p. 1 lit. e), 7 GDPR.

10.3 Purpose of storage

The processing of personal data serves the sole purpose of dealing with the contact request.

10.4 Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

11. Video surveillance

Insofar as video surveillance of the premises of the Federal Office for the Safety of Nuclear Waste Management takes place, this is done for the purpose of exercising domiciliary rights and maintaining security. The data collected in this way shall only be associated with a specific person in exceptional cases of violation of domiciliary rights or in the event of criminal or irregular behaviour. The processing of data is carried out on the basis of Article 6 para. 1 p. 1 lit. e) GDPR in conjunction with § 4 Federal Data Protection Act (BDSG).

In the case of video surveillance taking place, the data retention period shall be 48 hours.

IV. What are your rights?

If your personal data is processed, you are the person concerned within the meaning of the Datenschutzgrundverordnung DS-GVO (General Data Protection Regulation (GDPR)), and you have the following rights vis-à-vis the person responsible:

1. Information pursuant to Art. 15 GDPR;
2. Correction of your data according to Art. 16 GDPR;
3. Deletion of the data concerning you pursuant to Art. 17 GDPR;
4. Restriction of the processing of your data pursuant to Art. 18 GDPR;
5. Data transfer pursuant to Art. 20 GDPR;
6. Revocation of consent: You can revoke your consent to the processing of personal data at any time with effect for the future.
7. Right of objection pursuant to Art. 21 GDPR

The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right to deletion. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6 (1) c) and e) GDPR (data processing in the public interest).

In case of an objection, BASE will no longer process your personal data, unless we can provide compelling legitimate reasons for the processing of data which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

The objection can be made without formalities and should preferably be addressed to:

Bundesamt für die Sicherheit der nuklearen Entsorgung (BASE)
Z 7 Datenschutzreferat
11513 Berlin

Email: datenschutzreferat@base.bund.de

V. Right of appeal to a supervisory authority

If you think that we have not complied with data protection regulations when processing your data, you can lodge a complaint with the Federal Commissioner for Data Protection and Freedom of Information, who will examine your complaint (cf. also Art. 77 GDPR).

Please address your complaint to:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
(The Federal Commissioner for Data Protection and Freedom of Information)
Graurheindorfer Str. 153
53117 Bonn, Germany
Telephone: +49 (0)228-997799-0
Fax: +49 (0)228-997799-5550
Email: poststelle@bfdi.bund.de