Privacy statement

1. Controller according to Article 4 para 7 GDPR

Federal Office for Radiation Protection
President Dr. Inge Paulini
Willy-Brandt-Straße 5
38226 Salzgitter
Germany

Phone: +49 (0) 3018 333-0
Fax: +49 (0) 3018 333-1885
Email: ePost@bfs.de

2. Data Protection Officer

Adina Inan
Willy-Brandt-Straße 5
38226 Salzgitter
Germany

Phone: +49 (0) 3018 333-1410
Fax: +49 (0) 3018 333-1415
Email: datenschutz@bfs.de

3. Purposes for the processing of personal data

The Federal Office for Radiation Protection processes personal data within the scope of its legal responsibilities. These are mainly federal administrative duties in the fields of radiation protection and emergency response, which are conferred on the Federal Office by the Atomic Energy Act, the Radiation Protection Act or other federal laws or by provisions based of these laws. They include in particular the following tasks:

• Establishment and maintenance of a register with respect to the radiation exposure of occupationally exposed persons (radiation protection register).
• Establishment and maintenance of a register of high-activity sealed radioactive sources.
• Establishment and maintenance of a register of the ethics committees operating in accordance with the Radiation Protection Ordinance and the X-ray Ordinance.
• Licensing of the use of radioactive substances or ionising radiation in humans in medical research.
• Design approval of plants and equipment according to the Radiation Protection Ordinance and the X-ray Ordinance.

The Federal Office for Radiation Protection provides technical and scientific support in the areas mentioned above to the Federal Ministry for the Environment, Nature Conservation and Nuclear Safety (BMU). It conducts scientific research to this end.

The Federal Office for Radiation Protection also supports the competent authorities, at their request, in cases of loss or discovery of radioactive material or radioactively contaminated substances. It is also involved in cases where a criminal offence in connection with such substances is suspected, in the investigation and analysis of such substances and in protective measures associated with their seizure.

Please find the Act on the Establishment of a Federal Office for Radiation Protection at http://www.gesetze-im-internet.de/bastrlschg.

The Federal Office for Radiation Protection informs the public about the effects and risks of ionising and non-ionising radiation. In this context, it also provides answers to questions in the field of radiation protection.

In order to fulfil its legal duties, the Federal Office for Radiation Protection processes personal data as a public body and also as a contracting party under civil law. This applies to personnel management, for example, or to the areas of finance and purchasing.

4. Legal basis of data processing

• Art. 6 para 1 (a) GDPR,
• Art. 6 para 1 (b) GDPR,
• Art. 6 para 1 (e) GDPR in conjunction with § 2 of the Act on the Establishment of a Federal Office for Radiation Project in conjunction with specific legal regulations, such as the provisions stipulated in the atomic energy and radiation protection laws, the law on freedom of information or the civil service law.

§ 3 Federal Data Protection Act (BDSG) stipulates that the processing of personal data by a public body is permissible if it is necessary to perform the task that the person responsible is accountable for or if such processing is performed in the exercise of official authority assigned to the person responsible.

5. Recipients or categories of recipients

The Federal Office for Radiation Protection transmits personal data to federal or Länder authorities, to its contracting parties and to parties involved in administrative proceedings, insofar as this is necessary for the performance of the Federal Office's duties.

With respect to the management of the radiation protection register, personal data are transmitted to radiation protection supervisors, statutory accident insurance institutions, competent authorities, measuring offices or research institutions.

The Federal Office for Radiation Protection also transmits personal data to partners abroad within the framework of international cooperation.

6. Duration for which the personal data are stored

Personal data are stored in paper form as well as in electronic form for the performance of the duties of the Federal Office for Radiation Protection according to the records management guidelines. If the files are no longer required for the performance of the Federal Office's duties, they are offered to the Federal Archives; files not transferred to the Federal Archives are destroyed/deleted.

Records management is regulated in an instruction to be implemented by the Federal Office for Radiation Protection.

7. Rights of data subjects

The data subjects whose personal data are processed by the Federal Office for Radiation Protection are entitled to the following rights:

1. Right of access under Art. 15 GDPR
   According to Art. 15 GDPR in conjunction with § 34 BDSG, the data subject is entitled to access to the personal data relating to him or her.
2. Right to rectification under Art. 16 GDPR
   The data subject is entitled to request that inaccurate personal data concerning him or her are rectified.
3. Right to erasure under Art. 17 GDPR
   The data subject is entitled to have personal data erased. However, this applies only if the data are no longer necessary, are unlawfully processed or if the data subject has withdrawn his or her consent. Further restrictions are laid down in § 35 BDSG.
4. Right to restriction of processing under Art. 18 GDPR
   Under the conditions mentioned in Art. 18 GDPR, the data subject is entitled to demand restriction of the processing of his or her personal data (previously "blocking").
5. Right to data portability under Art. 20 GDPR
   The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Federal Office for Radiation Protection (Art. 20 para 3 Sentence 2 GDPR).
6. Right to object under Art. 21 GDPR
   The data subject has the right to object to the processing of personal data concerning him or her if he or she is in a particular situation. This right is limited by § 36 BDSG if there is a compelling public interest in the processing outweighing the interests of the data subject or if a legal regulation requires such processing.

8. Right of appeal regarding the processing of personal data

According to § 9 BDSG, the supervisory authority of the Federal Office for Radiation Protection for data protection purposes is the

Federal Commissioner for Data Protection and Freedom of Information
Husarenstraße 30
53117 Bonn
Germany

Phone: +49 (0) 228 99 7799 - 0
Fax: +49 (0) 228 99 7799 - 550

Email: poststelle@bfdi.bund.de
Web: www.bfdi.bund.de

According to Art. 77 GDPR, the data subject is entitled to lodge a complaint with the supervisory authority if he or she considers that the processing of personal data relating to him or her infringes the applicable laws or regulations.

9. Video surveillance

If the premises of the Federal Office for Radiation Protection are subject to video surveillance, this is done to exercise domiciliary rights. An allocation of the data collected in this way to a specific person only takes place in exceptional cases in the event of a violation of domiciliary rights.

In the case of video surveillance of laboratories and measuring equipment for safety purposes, the persons concerned will be informed separately.

10. Use of the website of the Federal Office for Radiation Protection

The user's data required for the use of the website are stored each time the web pages of the Federal Office for Radiation Protection are accessed. In this context, the IP address is only processed for the transmission of requests and/or responses at the level of network communication but is not made available to the web application (website) and is therefore not stored or evaluated in relation to the use of the web application.

During a usage process, the following data set is stored in a log file:

• the page accessed or the name of the file retrieved,
• date and time of access,
• the amount of data transferred,
• indication whether the access or retrieval has been successful,
• information on the programme retrieving the data (web browser, etc.),
• web address of the previously visited page,
• parameter list of the request (i.e. search parameters, sort order and page numbers within lists, etc.), if these are contained in the URL.

This data set is evaluated for the purpose of optimising the website offer and for statistical purposes.

In addition, temporary cookies are used which expire after the session and exclusively serve for the operation of the website. These cookies do not contain any personal data.

Data collected during the access to the website of the Federal Office for Radiation Protection will only be transmitted to third parties if the Federal Office for Radiation Protection is required to transmit such data by law or court order or if such transmission is necessary for legal or criminal prosecution in the event of attacks on the web infrastructure.

Statistical evaluation

This website uses the Matomo web tracking tool to collect and store data for statistical and optimisation purposes. This function can be deactivated (objection to tracking by Matomo) as explained below. As a user, you have the option of rejecting tracking by Matomo at any time. Please find the necessary steps at the bottom of this page.

Every time a web page is accessed, data concerning this process is stored, including the following information: page title, search term (entered by the user to get to this page), search engines, page URL, number of pages visited, user's location (country), provider, browser language settings, browser, operating system, screen resolution, browser plugins, time of access, duration of access, entry pages, exit pages, downloads, referring websites.

Personal data

If you order information material or brochures, subscribe to newsletters or evaluate an article on the BfS website as "helpful" or "unhelpful", we ask you to give your name and other personal information in the contact form. You are free to decide if you wish to enter these data or not. The contents of the BfS contact forms are transmitted via an encrypted https connection. The personal data (e-mail address) collected for sending the newsletter will be used exclusively for the purpose of sending the newsletter.

If you send us a message via a contact form or an e-mail, your data will be used for correspondence with you. If we receive a message from you via the contact form or an e-mail, we assume that we are entitled to reply by e-mail. If this is not the case, you have to inform us expressly of the type of communication to be used.

Enquiries in electronic form are archived in files in the same way as requests in paper form (see Section 6 above).

References/Links

The web pages of the Federal Office for Radiation Protection contain references or links to web pages made available by other providers. The Federal Office for Radiation Protection has no influence on whether these providers comply with data protection regulations.

Social media

The Federal Office for Radiation Protection has no influence on data collection and the further use of such data by social media.

We therefore draw express attention to the fact that the YouTube service (Google group of companies) used by the Federal Office for Radiation Protection stores the data of its users (such as the IP address or other location-based information, use of cookies, etc.) in accordance with its privacy and data use statement and uses them for business purposes.

The Federal Office for Radiation Protection is also a member of the XING online business network. Please refer to the provider's privacy statement.

Objection to tracking by Matomo

As a user, you have the option of rejecting tracking by Matomo at any time. In this case, please follow the steps described below:

If users have activated the option "I don't want to be tracked" in their browser, Matomo will not store these users' data. In this case, you do not have to do anything else.

If you have not made this setting, please follow the instructions below.

(If you are using Internet Explorer, please make the following settings to deactivate Matomo: Follow TOOLS → INTERNET OPTIONS → DATA PROTECTION → ADVANCED, please tick "Override automatic cookie handling" and click on "OK" to confirm. Once these settings have been made, you can tick the box to object.)

Please note: If you delete your cookies, the opt-out cookie will be deleted as well and you will have to activate it again in order to make use of the opt-out option.