The following information is intended to inform you about the processing of personal data by the Federal Ministry of Justice and Consumer Protection (BMJV).
Personal data refers to information about an individual or information relating to an individual (e.g., name, address, mailing address, phone number, IP address) that can be used to determine the identity of that individual. Personal data includes all information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified directly or indirectly—in particular by association with an identifier such as a name, an identification number, location data, or an online identifier.
1. Data Controller and Data Protection Officer
The entity responsible for the processing of personal data is the
Federal Ministry of Justice and Consumer Protection,
Anton-Wilhelm-Amo-Straße 37, 10117 Berlin,
poststelle@bmjv.bund.de
If you have specific questions regarding the protection of your data, please contact the
Official Data Protection Officer,
Federal Ministry of Justice and Consumer Protection,
Anton-Wilhelm-Amo-Straße 37, 10117 Berlin,
+49 (0)30 18 580 - 0
datenschutz@bmjv.bund.de
You may also contact the Federal Commissioner for Data Protection and Freedom of Information if you believe your rights have been violated in connection with the processing of your personal data by the BMJV.
If you have questions about data protection at the European Commission, you can find more information on the European Commission’s website.
2. Data processing when visiting this website
a) Data collection
Whenever a user accesses our website or retrieves a file, data relating to that activity is processed temporarily in a log file. This is necessary for security reasons and to provide and optimise a fully functional website, as well as our content and services.
Specifically, the following data is stored on a server operated by the Federal Information Technology Centre (ITZBund) for each access request or file retrieval:
- date and time of the access (timestamp) as well as the IP address of the accessing device or server;
- request details and destination address (protocol version, HTTP method, referrer, User-Agent string);
- the name of the requested file and the volume of data transferred (requested URL including the query string and the size in bytes);
- a message indicating whether the request was successful (HTTP status code).
Pursuant to Article 6(1)(e) and Article 6(3)(b) of the General Data Protection Regulation (GDPR), in conjunction with Section 5 of the BSI Act, we are required to retain this data beyond the time of your visit in order to protect the BMJV's internet infrastructure and the Federal Government's communications technology against attacks. The data is analysed and, in the event of attacks on the communications technology, is required to initiate legal proceedings and criminal investigations. The data will be deleted after 30 days.
In addition, to protect against attacks on the BMJV’s internet infrastructure, we use systems provided by the Federal Office for Information Security (BSI) to analyse log data and logging data in order to fulfil our obligation under Section 5(1), sentence 4, and Section 5a, sentences 2 and 3, of the BSI Act. Information on the data processed in this context and the applicable legal bases can be found in the BSI Privacy Policy (Sections 2, 2.2, and 2.3).
Data logged when you access the BMJV's website is disclosed to third parties only where we are legally required to do so or where disclosure is necessary, in the event of attacks on the Federal Government's communications technology, for legal proceedings or criminal investigations. Data is not disclosed in any other cases. This data is not combined with data from other sources (e.g. contact information provided when ordering brochures or subscribing to newsletters).
b) Use of Cookies
For technical reasons, both session cookies and persistent cookies are used when you visit this website. Neither type contains any personal data. Their use is technically necessary for the functioning of the shopping basket, website navigation and the display of the cookie banner. This use is based on Article 6(1)(e) and Article 6(3)(b) of the GDPR in conjunction with Section 3 of the E-Government Act (EGovG) (see also Section 25(2), no. 2 of the Telecommunications Digital Services Data Protection Act [TDDDG]) as part of the BMJV’s public information activities to provide information tailored to users' needs about the tasks assigned to the BMJV.
Session cookies are small pieces of information that a website stores in the memory of the visitor's computer. A session cookie contains a randomly generated unique identification number, known as a session ID. In particular, the session ID is not based on the IP address or other traceable data. A cookie also contains information about its origin and the length of time for which it is stored. These cookies cannot store any other data. Session cookies expire at the end of the session and are automatically deleted when the browser window is closed. When ordering brochures, please note the following: your orders are collected in your shopping basket using the session ID. The session cookies used are deleted when you end the session. If you close your browser window, your shopping basket will be reset. If you end your session without completing the ordering process, the items previously added to your shopping basket will need to be selected again.
In addition, a persistent cookie is set during your first visit to the website. It records that the cookie banner (notice regarding the use of cookies) has already been displayed, so that this message does not appear again. This cookie also contains no personal data and is valid for one month, after which it is automatically deleted.
3. Web analytics
This website and its individual services are part of the BMJV’s public information activities. In order to tailor the information provided to the needs of users, the BMJV analyses access to this website for statistical purposes on the basis of your consent in accordance with Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG.
You can decide at any time whether to allow us to collect statistical information about your use of this website using the etracker service. The aggregated analyses generated by this software help us improve this website. If you wish to withdraw your consent with effect for the future, please open the consent management tool using the link at the bottom of the page, untick "Statistics" and click "Confirm selection". Conversely, if you previously declined statistical analysis, you can enable it by ticking the box and clicking “Confirm Selection.”
How does etracker work? Subject to your consent, a script on our website automatically transmits your IP address and browser data (the so-called User-Agent) to etracker GmbH. Your IP address is immediately and automatically truncated so that it can no longer be traced back to you. The software then pseudonymises the transmitted data solely for the purpose of identifying repeated use during the session. After seven days, any link to the session is deleted and your statistical data is fully anonymised. etracker is a German company and processes your usage data exclusively on our behalf on secure servers. Your data is not disclosed to any other third parties.
By default, web analytics is disabled. You can choose whether a unique web analytics cookie may be stored in your browser to enable the website operator to collect and analyse various statistical data. If you change your mind at a later time or wish to adjust your preferences, please click the “Cookies” button at the bottom of the website to change your cookie settings.
4. Processing of personal data when submitting information and enquiries
In connection with information submitted and enquiries, we process only the data that is necessary to communicate with you and to properly document the BMJV's administrative activities. This includes, in particular, personal information (e.g. last name, first name, postal address, email address, etc.) that we receive directly from you, as well as information about your chosen method of contact (letter, phone, email, contact form). The processing of this data is necessary for the performance of our tasks (see Article 6(1)(e) and (3)(b) of the GDPR in conjunction with Section 3 of the BDSG).
We disclose the data we receive from you to third parties only where you have expressly consented or where we are required to do so by law or pursuant to a court decision. Information submitted and enquiries that are received in electronic form are retained, like those received in paper form, in accordance with the retention periods laid down in the Registraturrichtlinie (Records Management Guidelines), which supplements the Joint Rules of Procedure of the Federal Ministries. As a rule, the retention period is ten years.
5. Further processing of personal data
a) Ordering brochures
If you order brochures using the shopping basket function on our website, by post or by email, we require your name and address in order to dispatch your order. Please note, however: that we cannot process your order unless the aforementioned data is provided.
The data relating to your order is processed on the basis of Article 6(1)(e) and Article 6(3)(b) of the GDPR, in conjunction with Section 3 of the BDSG. Once you have submitted the order form, the data you have provided is disclosed to our service provider (IBRo Versandservice GmbH, Kastanienweg 1, 18184 Roggentin). The transmitted data is deleted one month after the order has been processed.
b) Newsletter distribution
When you subscribe to a BMJV newsletter, your email address, the newsletter you have selected and, optionally, a username of your choice are stored on a server. The data is processed on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. We use this data to send the newsletters. We do not disclose your data to third parties or use it for any other purposes of our own.
When you register, your data is stored on our server and a confirmation email containing a link to complete your registration is sent to the email address you provided. If you do not confirm your registration by clicking the link in the email, your data will be deleted after 24 hours. Otherwise, your data will be deleted immediately when you unsubscribe from the newsletter. You can unsubscribe from the newsletter here.
c) Visitor groups
The BMJV regularly welcomes visitor groups to the Ministry to learn about its work. In order to grant visitors access to the BMJV’s premises, we must, for security reasons, collect your first and last name, as well as your date and place of birth in advance of the scheduled visit. This is necessary for the performance of our public information tasks in accordance with Article 6(1)(e) and Article 6(3)(b) of the GDPR, in conjunction with Section 3 of the BDSG. This data is disclosed to the competent Federal Police authority for access-control purposes.
Additional information, such as the organisation you represent, type of school, year group, association, or mobility restrictions, may be provided voluntarily to help us prepare for your visit to the BMJV. The data you provide to us (first and last name; date and place of birth), as well as any personal data you may have voluntarily submitted, is deleted in full one week after your visit to the BMJV.
d) Registration for events at the BMJV
To participate in events at the BMJV, you must generally register in advance. For security reasons, we must collect your first name and surname, date of birth and place of birth before the event. This is necessary for the performance of our public information tasks in accordance with Article 6(1)(e) and Article 6(3)(b) of the GDPR, in conjunction with Section 3 of the BDSG. This data is disclosed to the competent Federal Police authority for access-control purposes.
The requested data is transmitted via an encrypted web form on our website to the responsible unit within the Ministry, where it is processed and deleted in full one week after the event. During registration, however, you can choose whether to allow us to store your data permanently in an invitation mailing list so that we can invite you to future Ministry events where appropriate. You may withdraw your consent to the storage of your data at any time using this form.
Filming and photography: At some events, photos and videos are taken as part of the BMJV’s press and public relations activities. This is typically indicated upon entering the event venue. The recordings may be published on our website, social media channels, in print media, and other media. The legal bases are Article 6(1)(e) and Article 6(3)(b) of the GDPR, in conjunction with Section 3 of the BDSG and Section 23 of the Act on Copyright in Works of Fine Art and Photography. If you object to the recordings or their publication, please contact the photographer responsible for selecting subjects directly, wherever possible.
Further information on data protection at BMJV events can be found in the following Privacy Notice (not accessible) [PDF, 152 KB] .
e) Contact with the BMJV
If you contact BMJV staff or, for example, give them your business card, personal data (name and contact details) will be entered in address and contact directories where necessary for the further performance of our tasks. The data will be deleted as soon as it is no longer required.
f) Specialist supervision of the Ministry's portfolio
The BMJV’s area of responsibility includes the Federal Court of Justice, the Federal Administrative Court, the Federal Fiscal Court, the Federal Prosecutor General, the Federal Patent Court, the German Patent and Trade Mark Office and the Federal Office of Justice. Personal data transmitted to the BMJV may be processed as part of its specialist supervision of these courts and authorities.
6. Video surveillance
The BMJV premises at Anton-Wilhelm-Amo-Straße 37 in Berlin are monitored by a video surveillance system in the outdoor areas to enforce the Ministry's domiciliary rights and for the purposes of preventing threats and prosecuting criminal offences. Video surveillance is carried out by the Federal Police, acting as the controller, pursuant to Section 5 in conjunction with Section 27 of the Federal Police Act (BPolG). Unless the data collected is necessary to avert an imminent danger or to prosecute a criminal offence or administrative offence, the deletion periods set out in section 27 of the BPolG apply.
The BMJV premises at Friedrichstraße 191 and Leipziger Straße 127–128 in Berlin are monitored by the BMJV, acting as the controller, by means of video surveillance systems for the purposes of enforcing the Ministry's domiciliary rights and preventing threats, in accordance with Article 6(1)(e) and Article 6(3)(b) of the GDPR, in conjunction with Section 4 of the Federal Data Protection Act (BDSG). The surveillance is carried out without recording or storing the footage.
7. Data subject rights
The BMJV is responsible for processing personal data both in the performance of its public tasks and as a party to contracts governed by civil law. Data subjects therefore have the following rights under the GDPR:
a) Right of access – Article 15 of the GDPR
The right of access enables data subjects to obtain comprehensive information about the personal data concerning them, as well as other important information such as the purposes of the processing and the storage period. The exceptions set out in Section 34 of the BDSG apply.
b) Right of rectification – Article 16 of the GDPR
The right to rectification enables data subjects to have inaccurate personal data concerning them corrected.
c) Right to erasure – Article 17 of the GDPR
The right to erasure enables data subjects to request that the controller erase personal data concerning them. However, this is only possible if the personal data concerning the data subject is no longer necessary, is being processed unlawfully, or consent to such processing has been withdrawn. The exceptions to this right set out in Section 35 BDSG apply.
d) Right to restriction of processing – Article 18 of the GDPR
The right to restriction of processing allows the data subject to prevent the further processing of their personal data temporarily. Restriction of processing primarily applies while the exercise of other data subject rights is being reviewed.
e) Right to data portability – Article 20 of the GDPR
The right to data portability allows the data subject to receive their personal data from the controller in a structured, commonly used and machine-readable format so that it can be transferred to another controller, if necessary. However, pursuant to Article 20(3), second sentence, of the GDPR, this right does not apply if the data processing serves the performance of public tasks. At the BMJV, the right to data portability is available only where personal data is processed for fiscal purposes.
f) Right to object – Article 21 of the GDPR
The right to object includes the possibility for data subjects to object to the further processing of their personal data on grounds relating to their particular situation, provided that such processing is justified by the performance of public tasks or by public or private interests. Pursuant to Section 36 of the Federal Data Protection Act (BDSG), this right does not apply if a public authority is required by law to process the data.
g) Right to withdraw consent
To the extent that the processing of personal data is based on your consent (Article 6(1)(a) of the GDPR), you may withdraw this consent at any time for the relevant purpose. The lawfulness of processing based on your consent remains unaffected until we receive your withdrawal of consent.
8. Right to lodge a complaint
You have the right to lodge a complaint regarding the BMJV's data processing with the Federal Commissioner for Data Protection and Freedom of Information who is responsible for supervising federal authorities with regard to data protection. The Commissioner can be contacted as follows:
The Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153, 53117 Bonn,
poststelle@bfdi.bund.de