Privacy policy

Last updated 28.July 2022

This privacy policy provides information on what personal data we collect and when; on how we use this data and what your rights are as a user of our internet services.

Who is responsible for data processing and whom can you contact?

The person responsible in the sense of data protection law is:

Federal Office for the Safety of Nuclear Waste Management (BASE).
President Wolfram König
Wegelystrasse 8
10623 Berlin
Germany
Phone: +49 (0)3018 7676 5000
Email: info@base.bund.de

You can reach the Data Protection Officer at:

Federal Office for the Safety of Nuclear Waste Management (BASE).
Data Protection Officer
11513 Berlin
Email: dsb@base.bund.de

What is personal data?

Personal data in the sense of this information is all information that may relate to your person, e.g. name, address, email and IP address, picture, sound and video recordings.

Where is personal data processed and for what purpose?

The process of data collection for visits to our website is outlined below:

1. Visit to the website and creation of log files

1.1 Description and scope of data processing

We will collect necessary user data each time you visit the BASE web pages. In this context, the IP address is only processed to relay requests or responses at the level of network communication, but is not made available to the web application (website), and is therefore not stored or evaluated in relation to the use of the web application.

Every visit to our website is recorded in a log file to ensure data security. The following data is stored in a log file:

• Visited page or name of the retrieved file,
• Date and time of access,
• Volume of data transferred,
• Notification whether the access or retrieval was successful,
• Details of the programme retrieving the data (web browser, etc.),
• Internet address of the previously visited page,
• Parameter list of the request (e.g.: Search parameters, sort sequence and page specification within lists), provided these are contained in the URL.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, the user cannot object to this data being collected.

1.2 Legal basis for data processing

The legal basis for this form of data processing is Art. 6 para. 1 p. 1 lit. e) GDPR in conjunction with §§ 5 para. 2, 6 Site Selection Act (StandAG); § 3 Federal Data Protection (BDSG). The functionality of the website, the performance of security analyses and the prevention of dangers are legitimate interests of BASE.

1.3 Purpose of data processing

The system needs to temporarily store the IP address to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes will not take place in this context.

1.4 Duration of storage

Data will only be stored for as long as it is needed and deleted immediately afterwards. The log file will be retained for a period of 30 days.

2 Use of cookies

2.1 Description and scope of data processing

We use cookies to enhance the secure performance of our website. Cookies are intended to increase the security and functionality of the web applications offered. The following cookies are essential:

• JSESSIONID cookie: Used for session management of the application server. The validity ends with the expiry of the current session.
• AL-SESS-S / AL_LB: Serves the sole purpose of load distribution. The validity ends with the expiry of the current session.
• NID: Serves the sole purpose of load distribution. Expires at the end of the current session.
• TS...: The cookie name varies depending on the website. Serves to always forward a user's requests to the same server within a session. Expires at the end of the current session.

2.2 Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. e) GDPR in conjunction with §§ 5 (2), 6 StandAG; § 3 BDSG.

2.3 Purpose of data processing

The purpose of using strictly necessary cookies is to provide the basic functions of the website and enhance browsing experience. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected through strictly necessary cookies is not used to create user profiles.

2.4 Duration of storage

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing your internet browser settings, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If strictly necessary cookies are deactivated for our website, it may no longer be possible to use all the functions of the website.

3. Links to websites of other providers and social media

The BASE internet site https://www.endlagersuche-infoplattform.de contains links to websites of other providers and social media. We herewith explicitly state that they process the data of their users in accordance with their own data protection guidelines. BASE has no influence on whether these providers comply with data protection regulations. Please check the privacy policy of the respective responsible body.

4 Contact form and e-mail contact

4.1 Contact form

4.1.1 Description and scope of data processing

The BASE website contains a contact form which can be used to contact us electronically. If a user takes advantage of this option, the data provided in the entry form is transmitted to BASE and stored there.

This comprises the following data:

• Title
• Name
• Email address
• Your concern
• First name (optional)
• Telephone number (optional)
• Institution (optional)
• Subject (optional)

The data collected in this context will not be passed on to third parties. It is used exclusively for processing the conversation.

4.1.2 Legal basis for data processing

The legal basis for the processing of data in this case is the consent of the user, pursuant to Art. 6 para. 1 p. 1 lit. a), 7 GDPR.

4.1.3 Purpose of data processing

The processing of personal data provided when contacting us via the contact form serves solely to process the contact request and to ensure the security of our information technology systems.

4.1.4 Duration of storage

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent for storage, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory statutory provisions – in particular statutory storage periods – remain unaffected.

4.2 Email

4.2.1 Description and scope of data processing

Alternatively, it is possible to contact us via the email address provided. In this case, we will store the personal user data transmitted with the email.
Data collected in this context will not be passed on to third parties. The data is used exclusively for processing the conversation.

4.2.2 Legal basis for processing

The legal basis for the processing of data transmitted while sending an email is Art. 6 para. 1 p. 1 lit. e) GDPR. The possibility of electronic contact serves the fulfilment of our sovereign tasks. If the email contact is aimed at the conclusion or implementation of a contract, the additional legal basis for the processing of data is Art. 6 para. 1 p. 1 lit. b) GDPR.

4.2.3 Purpose of processing

We process personal data from the email with the sole purpose of dealing with your contact request. This constitutes a legitimate interest for the processing of your data.

4.2.4 Duration of storage

The data you send to us by email will remain with us until you request its deletion, revoke your consent to storage, or until the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions - in particular legal storage periods - remain unaffected.

5. Newsletter

There is an option to register for a newsletter. For this purpose, you will be redirected to the BASE website. Further information can be found in BASE’s privacy policy.

6. Embedded videos, e.g. YouTube

YouTube videos provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland are integrated in our online services. These videos are stored on youtube.com and can be played directly from our website to improve user-friendliness and facilitate the presentation of various contents. This serves to inform the public as extensively as possible. The processing of data thus serves to fulfil a public duty in the sense of Art. 6 para. 1 p. 1 lit. e) GDPR.

We have embedded our videos in an "extended data protection mode" to facilitate data protection-friendly viewing. A connection to a YouTube server is only established when you play the videos. When you visit the website, YouTube will receive the information that you have accessed the corresponding sub-page of our website. Furthermore, the above-mentioned basic data such as the IP address and time stamp will be transmitted. This shall take place regardless of whether you are logged in to a YouTube user account or whether no such user account exists.

If you are logged in to YouTube as a member, YouTube shall assign this information to your personal user account. When using the service, for example by clicking on the start button of a video, this information will also be assigned to your user account. You can prevent this assignment of information by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. and deleting the corresponding cookies before using our website.

YouTube will store your data as usage profiles and use them for the purposes of advertising, market research and/or the needs-based design of its website.

Our website also uses the YouTube plugin of the service provider Google Ireland Limited. A direct connection to the provider's server will only be established when you activate the respective plugin by clicking the corresponding button (consent). Simply visiting our pages will not trigger any data transmission. We would like to point out that, as the site operator, we have no knowledge of the content of the transmitted data, or its use by Youtube.

Further information on data processing and data protection by YouTube can be found in the terms of use. You will also find further information on your rights and privacy protection options there.

7. Social media plugins/buttons

Social media plugins are used on our pages (e.g. Twitter and Instagram) to make our content more visible. This serves to provide the public with extensive information. The processing of data thus serves the public fulfilment of duties within the meaning of Art. 6 para. 1 p. 1 lit. e) GDPR.
You can usually recognise the plugins by the respective social media logos.

Please note: A direct connection to the provider's server is only established when you activate the respective plugin by clicking on the associated button (consent). Simply visiting our pages does not trigger any data transmission.
Activating the plugin constitutes consent within the meaning of Art. 6 (1) p. 1 lit. a) GDPR.

If you activate data transmission by clicking the corresponding button, the following data transmission will take place.

7.1 Twitter

Our website uses plugins of the social network twitter.com ("Twitter"). Twitter is provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. A direct connection to the provider's server will only be established if you activate the respective plugin by clicking on the associated button (consent). Simply visiting our pages does not trigger any data transmission.

We would like to emphasise that, as the site operator, we have no knowledge of the content of the transmitted data or its use by Twitter. You can find more information on this in Twitter's privacy policy at http://twitter.com/privacy.
You can change your Twitter privacy settings in your account settings.

7.2 Instagram

Functions of the Instagram service are integrated on our pages. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This will allow Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

For more information, please see the Instagram privacy policy: https://privacycenter.instagram.com/policy

7.3 Mastodon

You can also find us on the short messaging service Mastodon, our profile is @base@social.bund.de. Mastodon is a decentralised microblogging service.

BASE uses the technical platform and the services of the Federal Commissioner for Data Protection and Freedom of Information (BfDI), Graurheindorfer Str. 153, 53117 Bonn for this short message service. Hence, we hereby refer to the data protection declaration of the BfDI. Information about which data is processed by the BfDI and for which purposes can be found in the BfDI's data protection declaration. BASE itself will not collect or store any data in this context. We would like to point out that using the Mastodon short message service and its functions happens in your own responsibility.

Please also note our information regarding the problem of external links, which also applies to the Mastodon profile.

8. Telephone contact

8.1 Description and scope of data processing

If you contact us by phone, your personal data will also be processed.

The following data will normally be processed:

• Name
• Telephone number

The data is used exclusively for processing the conversation.

8.2 Legal basis for data processing

The possibility of contacting us by telephone serves the fulfilment of our sovereign tasks and the closely related public relations work. The legal basis for the processing is therefore Art. 6 para. 1 p. 1 lit. e), 7 GDPR in conjunction with. §§ 5 para. 2; § 3 BDSG; § 6 StandAG.

8.3 Purpose of storage

The processing of personal data serves the sole purpose of dealing with the contact request.

8.4 Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

What are your rights?

If your personal data is processed, you are the person concerned within the meaning of the Datenschutzgrundverordnung DSGVO (General Data Protection Regulation (GDPR)).
You have the following rights vis-à-vis the person responsible:

• Information pursuant to Art. 15 GDPR.
• Correction of your data according to Art. 16 GDPR.
• Deletion of the data concerning you pursuant to Art. 17 GDPR.
• Restriction of the processing of your data pursuant to Art. 18 GDPR.
• Data transfer pursuant to Art. 20 GDPR.
• Revocation of consent: You can revoke your consent to the processing of personal data at any time with effect for the future.
• Right of objection pursuant to Art. 21 GDPR

The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right to deletion. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6 (1) c) and e) GDPR (data processing in the public interest).

In case of an objection, BASE will no longer process your personal data, unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.

The objection can be made without formalities and should preferably be addressed to:

Bundesamt für die Sicherheit der Nuklearen Entsorgung (BASE)
Z 7 Datenschutzreferat
11513 Berlin
Email: datenschutzreferat@base.bund.de

Right of appeal to a supervisory authority

If you think that we have not complied with data protection regulations when processing your data, you can lodge a complaint with the Federal Commissioner for Data Protection and Freedom of Information, who will examine your complaint (cf. also Art. 77 GDPR). Please address your complaint to:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
(The Federal Commissioner for Data Protection and Freedom of Information)
Graurheindorfer Str. 153
53117 Bonn
Telephone: +49 (0)228-997799-0
Fax: +49 (0)228-997799-5550
E-mail: poststelle@bfdi.bund.de