Data protection declaration , format: Article, area: Authority

Data protection

General

The Federal Office for Migration and Refugees respects your privacy and is thus committed to data protection and freedom of information. This also applies when you visit our website, of course.

We are issuing this data protection declaration to inform you about our data protection policies and measures, and in particular about what we do to protect your data and what data we collect in the first place.

We are committed to protecting the data of visitors to our website. This also applies to external service providers within the scope of their tasks performed for the Federal Office for Migration and Refugees.

Children and persons under the age of 18 should not submit any personal data to us without the consent of their parents or legal guardians. We encourage parents and guardians to play an active role in their children's online activities and interests.

The Federal Office for Migration and Refugees does not request personal data from children, does not collect it and does not pass it on to third parties.

Data controller

The data controller pursuant to Art. 4 No. 7 GDPR is the Federal Office for Migration and Refugees (BAMF), represented by the President, Dr Hans-Eckhard Sommer.

Data protection officer

The official data protection officer (Art. 37-39 GDPR) of the BAMF is Mr Albert Wittke.

Access and storage

Each time you access our website and each time you download a file, the following information is automatically stored:

• Browser type and version used
• Operating system of the user
• Internet service provider of the user
• Date and time of access
• Websites from which the us-er's system accesses our website
• Websites that are accessed by the user's system via our website
• HTTP status code

The processing of the browser data is technically required and is carried out in our interest to properly display our website to you and to ensure its stability and security.

The legal basis for the data processing is Art. 6 para. 1 (f) GDPR.

We store the browser data in server log files for a period of six months for the purpose and in our interest of clarifying acts of abuse or fraud.

The browser data is not stored together with other data relating to you. Any browser data that needs to be retained for evidence purposes will not be deleted until the respective incident has been definitively clarified.

The legal basis for the data processing is Art. 6 para. 1 (f) GDPR.

For the provision of the website, we use the services of the Informationstechnikzentrum Bund (ITZ-Bund) or of a web host with whom we have concluded an order processing agreement in accordance with Art. 28 para. 3 GDPR.

Use of the website

... Session cookies

When using websites, what are known as session cookies may be deployed. Cookies are small text files that are stored in the browser's local cache. These cookies serve to support the offering in the course of the respective "session" and are deleted after use. You can deactivate the use of cookies in your browser.

However, in order to use our offering, you are required to agree to our use of necessary cookies. Necessary cookies are required for the basic functions and proper functioning of the website.

In addition, cookies can be used for statistical evaluation of visitors to the website and the user-friendly design of the platform.

These cookies enable the browser to be recognised on subsequent visits to the website. The life span of these cookies is limited to 30 days.

The cookies do not store any personal data, including IP address. They collect the information anonymously and help us to understand how our visitors use the offering.

When you access our website for the first time, a window appears informing you of the use of the specified cookies and requesting your consent.

... YouTube videos

This website embeds videos from YouTube. This always requires that YouTube is aware of the IP address of the visiting users, as it cannot send the video content to the browser of the respective user without the IP address. The IP address is therefore required in order to display this video content. Further information on this can be found in YouTube's or Google's privacy policy at https://policies.google.com/privacy.

The videos are embedded in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. When you click on the video, the browser data and the information that you have accessed the corresponding subpage of our website are transmitted to YouTube. YouTube is also informed that you are watching the video.

If you are logged in to YouTube, this information is also assigned to your user account. You can prevent this by logging out of YouTube before viewing the video. We have no influence on the transmission of data to or further data processing by YouTube. YouTube also processes your personal data in the USA. The USA is what is known as a third country, which means that the level of data protection is currently not comparable with that in the EU. The Federal Office for Migration and Refugees has no influence on the collection of data or its further use by YouTube. Information on which data is processed by YouTube/Google and for which purposes can be found in the privacy policy of YouTube or Google: https://policies.google.com/privacy.

The legal basis for the data processing is Art. 6 para. 1 (f) GDPR.

... Matomo web analysis software (formerly: Piwik)

The Federal Office for Migration and Refugees uses the web analysis software Matomo (tracking) for the statistical evaluation of visitors to the website. This enables the anonymous evaluation of visitor behaviour on the platform. No conclusions can be drawn about the identity of the "users" or "participants". The information is used for the further development and im-provement of the platform.

The legal basis for the data processing is Art. 6 para. 1 (f) GDPR.

... External links

Our website may contain links to other websites. If you click on these links, you leave our website. These external sites are not under our control and may deviate from our data protection measures. We are not responsible for the information or content on third-party websites. Personal data that you pass on to third-party providers who are not connected to the Federal Office for Migration and Refugees is not covered by our data protection declaration.

We recommend that you read the data protection provisions of each company carefully before disclosing personal information to them. Several third-party providers may, under certain circumstances, pass your personal data on to the Federal Office for Migration and Refugees. In this case, the disclosure is subject to the data protection provisions of the respective third-party provider.

Data collection/processing

When you contact us, we process the personal data provided by you in our interest and for the purpose of processing your enquiry or feedback, responding to it and/or contacting you about it.

Contact via the contact form

If you use the contact form of the Federal Office for Migration and Refugees for communication, it helps to include a form of address, your surname and your first name as well as your e-mail address, because without this data your request cannot be processed or can only be processed inadequately.

If a user makes use of this option, the data transmitted to us is stored. At the time you send your message using the contact form, the following data is stored:

• IP address of the accessing computer
• Date and time of registration

If we receive a message from you via the contact form, we assume that we are entitled to reply by e-mail. Otherwise, you need to explicitly request us to use an alternative method of communication.

When using the contact form, the content of the data fields is transmitted to the competent specialist departments at the Federal Office for Migration and Refugees. By sending the contact form, you consent to the transmission and storage of your personal data and IP address in accordance with Art. 6 para. 1 (f) GDPR. Processing and temporary storage of personal data serve the purpose of answering your enquiry within the framework of Article 17 of the Basic Law (Grundgesetz).

The data is deleted as soon as it is no longer required to achieve the purpose it was collected for. For the personal data from the contact form input screen, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter concerned has been conclusively clarified.

If your request cannot be dealt with by the staff responsible, it will be forwarded to the appropriate department. By sending the enquiry, you agree that your enquiry may be passed on to third parties if this is necessary in order to answer it.

If you do not consent to the processing of your data, you can terminate the contact process at any time. Your message will then not be sent.

Contact in connection with attending an event

For the organisation of the event concerned and for the purpose of averting danger, the Federal Office for Migration and Refugees will collect, store and process your personal data when you register for an event and delete it no later than 30 days after the visit. By submitting the registration, you declare your consent to this.

The data collected in the context of an event registration is collected and processed for the organisation and realisation of the event.

The legal basis for data processing is Art. 6 para. 1 (e) GDPR in conjunction with Section 3 of the Federal Data Pro-tection Act (BDSG).

Contact by e-mail

Contact with the Federal Office for Migration and Refugees by e-mail is possible via functional mailboxes as well as the central e-mail addresses service@bamf.bund.de, post-stelle@bamf.bund.de and pressestelle@bamf.bund.de.

The personal data sent to the central e-mail addresses and stored in the organisational unit responsible for central message distribution will be deleted in accordance with legal requirements and upon request.

The data provided by you (e.g.: surname, first name, address), but at least the e-mail address, as well as the information contained in the e-mail (including any personal data provided by you) are stored in the organisational units for the purpose of contacting you and processing your request.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 (e) GDPR.

It is necessary to process the personal data provided by you for the purpose of processing your request.

If we receive an e-mail from you, we assume that we are entitled to reply by e-mail. Otherwise, you need to explicitly request us to use an alternative method of communication.

The user has the option to revoke his/her consent to the processing of personal data at any time. If the user contacts us by e-mail, he/she can object to the storage of personal data at any time. In this case, the conversation cannot be continued.

All personal data stored in the course of contacting us is then deleted.

Contact by letter

If you write a letter to the Federal Of-fice for Migration and Refugees, the data provided by you (e.g.: surname, first name, address) and the information contained in the letter (any personal data you may have provided) are stored for the purpose of contacting you and processing your request.

The legal basis for the processing of data is Art. 6 para. 1 (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act.

Contact by telephone

If you contact an employee by telephone, personal data from you will be processed to the extent necessary to process your request.

The legal basis for the processing of data transmitted via telephone contact is Art. 6 para. 1 (a) or (e) GDPR.

If you contact the Service Centre via the telephone number +49 911-943-0 or the hotline "Working and living in Germany" via the telephone number +49 30 1815-1111, no personal data will be stored. The storage of personal data will only take place in cases where you have requested a callback or a written message.

Subscribing to a newsletter

On our website you can subscribe to a free newsletter. When registering for the newsletter, the data from the input screen is transmitted to us. In addition, the following data is collected at the time of registration:

• IP address of the accessing computer
• Date and time of registration

Your consent will be obtained for the processing of the data as part of the registration process, and you will be referred to this data protection declaration. In connection with data processing for the sending of newsletters, no data will be passed on to third parties. The data will be used exclusively for sending the newsletter.

The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 (a) GDPR if the user has given consent.

The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used. The data is deleted as soon as it is no longer required to achieve the purpose it was collected for. The user's e-mail address is thus stored as long as the subscription to the newsletter is active.

The subscription to the newsletter can be cancelled by the user concerned at any time. There is a link in each newsletter for this purpose. This also allows for the revocation of consent to the storage of personal data collected during the registration process.

Sending press releases

When we collect personal data from the media, other press offices or associations/institutions for the purpose of sending press releases and press invitations, we store the following information in an e-mail contact group:

• First name, surname
• The medium/association/institution
• Telephone number
• E-mail address

The legal basis for this data collection/processing is Art. 6 para.1 sentence 1 (e) GDPR.

The personal data collected by us will be deleted at your request or as soon as the e-mail address proves to be invalid.

A transfer of your personal data to third parties will not take place, unless you have given your consent in accordance with Article 6 para. 1 sentence 1 (a) GDPR or the transfer is necessary for the performance of a task that is in the public interest or connected with the exercise of public authority that has been transferred to the Federal Office for Migration and Refugees.

Ordering publications

During the ordering process for publications, our site uses cookies that are valid for the duration of your visit to the website. This is necessary for the function of the shopping basket for technical reasons. All data collected by us during the ordering process will be deleted after the ordering process has been completed.

The legal basis for this data collection/processing is Art. 6 para.1 (a) GDPR.

Rights of data subjects

Information

Everybody has the right to request confirmation from the Federal Office for Migration and Refugees as to whether personal data concerning them is processed. If such processing has occurred, information may be requested on all the data processed.

Correction/completion

If it is proven that the personal data processed by the Federal Office for Migration and Refugees is incorrect or incomplete, it is to be corrected or completed immediately after becoming known.

Deletion

If it is proven that personal data has been processed unlawfully, the data concerned is to be deleted immediately. This also applies if the data is no longer required to complete the task.

Withdrawal of consent

If data is processed on the basis of the consent of the data subject, the consent can be withdrawn at any time without giving reasons with effect for the future. The processing carried out until the consent is withdrawn remains unaffected by this.

Right to complain

Data subjects have the option of contacting the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit, Graurheindorfer Str. 153, 53117 Bonn) if they believe that the processing of data concerning them violates the General Data Protection Regulation.