We only process personal data (hereinafter referred to as ‘data’) to the extent necessary and exclusively for the purpose of providing a functional and user-friendly website.
According to
Art. 4(1) – Definition of the terms ‘personal data’ and “processing”
of the General Data Protection Regulation (GDPR), ‘processing’ means any operation performed on personal data, such as collection, storage, use, transmission or deletion.
This privacy policy provides you with clear information about what personal data we process on our website and for what purposes. We also explain which third-party providers we may use to improve functionality, security or user-friendliness.
Our privacy policy is structured as follows:
- Information about us as the controller
- Hosting
- Rights of users and data subjects
- Information on data processing
1. Information about us as the controller
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
The responsible provider of this website in terms of data protection law is:
Altmarkkreis Salzwedel
– Kulturamt –
Karl-Marx-Str. 32
29410 Salzwedel
Contact Person:
Ms Simone Franz
Telefon: +49 3901 840 4202
E-Mail: simone.franz@altmarkkreis-salzwedel.de (opens e-mail programme)
E-Mail: redaktion@altmark-rundschau.de (opens e-mail programme)
Data Protection Officer
We have appointed a Data Protection Officer in accordance with
Art. 37 GDPR – Appointment of a data protection officer
in conjunction with
§ 38 BDSG – Data protection officers for non-public bodies
appointed.
Our data protection officer is:
Ms Simone Franz
Telefon: +49 3901 840 4202
E-Mail: simone.franz@altmarkkreis-salzwedel.de (opens e-mail programme)
If you have any questions about data protection or exercising your rights as a data subject, you can contact our data protection officer directly at any time.
Storage period
Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place after these reasons no longer apply.
2. Hosting
This website is hosted by the following provider:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
Telephone: +49 6721 91 00
Website: https://www.ionos.de
Commercial register: Montabaur Local Court, HRB 24498
The personal data collected by us via this website is processed on our host’s servers. This includes, in particular, IP addresses, access data, meta and communication data, and content transmitted via the website.
No processing takes place outside the European Union.
Processing is based on our legitimate interest in the secure, stable and efficient provision of our online services in accordance with
Art. 6(1)(f) GDPR – processing based on legitimate interests, provided that there are no overriding interests of the data subject.
We have a contract with the hosting provider for order processing in accordance with
Art. 28 GDPR – Regulations on order processing by external service providers.
3. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, to information about the data being processed, to further information about data processing and to copies of the data (see also
Art. 15 GDPR – Right of the data subject to obtain access to the personal data processed; - to have inaccurate or incomplete data corrected or completed (see also
Art. 16 GDPR – Right to rectification of inaccurate data or completion of incomplete data); - immediate erasure of data concerning them (see also
Art. 17 GDPR – Right to erasure of personal data under certain conditions),
or, alternatively, if further processing is not permitted in accordance with
Art. 17(3) GDPR – Exceptions to the right to erasure, in particular in the case of statutory retention obligations
is necessary to restrict processing in accordance with
Art. 18 GDPR – Right to restriction of processing of personal data; - to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (see also
Art. 20 GDPR – Right to data portability in a structured, machine-readable format); - to lodge a complaint with the supervisory authority if you believe that the data concerning you is being processed by the provider in violation of data protection regulations (see also
Art. 77 GDPR – Right to lodge a complaint with a data protection supervisory authority).
The competent supervisory authority is the
State Commissioner for Data Protection Saxony-Anhalt
Otto-von-Guericke-Straße 34a
39104 Magdeburg
Germany
Telephone: +49 391 81803-0
Email: poststelle@lfd.sachsen-anhalt.de
Website: https://datenschutz.sachsen-anhalt.de
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing that has been made on the basis of the
Art. 16 GDPR – Right to rectification of inaccurate data or completion of incomplete data,
Art. 17(1) GDPR – Right to erasure of personal data under certain conditions,
Art. 18 GDPR – Right to restriction of processing of personal data.
However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has the right to obtain information about these recipients.
Furthermore, users and data subjects have the following rights under
Art. 21 GDPR – Right to object to processing, in particular where processing is based on legitimate interests
the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with
Art. 6 para. 1 lit. f GDPR – processing based on legitimate interests, unless there are overriding interests of the data subject .
In particular, an objection to data processing for the purpose of direct marketing is permissible.
4. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no legal retention obligations preventing the deletion of the data, and no other information on individual processing procedures is provided below.
Server log files
When you visit our website, the web server automatically creates so-called server log files. These files contain the following data, among other things:
- Date and time of access,
- Name and URL of the file accessed,
- Amount of data transferred,
- Notification of successful retrieval,
- Browser type and version used,
- User’s operating system,
- Referrer URL (previously visited page),
- IP address and requesting provider.
This data is used exclusively for the purpose of ensuring trouble-free operation, for error analysis and for defending against and tracking unauthorised access. This data is not merged with other data sources.
The legal basis is
Art. 6(1)(f) GDPR – processing based on legitimate interests, provided that there are no overriding interests of the data subject.
The log files are usually deleted after seven days at the latest, unless further storage is necessary for evidence purposes.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries via the contact form.
You can recognise an encrypted connection by the fact that the address line of your browser changes from http:// to https:// and by the lock symbol in your browser line.
The transmission is encrypted and protected against unauthorised access using state-of-the-art technology.
Cookies and Cookie Manager
General information about cookies
Our website uses cookies. Cookies are small text files that are stored on your device.
Some cookies are technically necessary for the operation of the website (‘essential cookies’).
Other cookies are used for statistical purposes, marketing purposes or to measure reach (‘non-essential cookies’).
The storage and retrieval of information on your device is carried out – where necessary – on the basis of
§ 25 (1) TDDDG – Consent requirement for the storage or reading of information on end devices, e.g. cookies;
technically necessary processes are carried out in accordance with
Section 25 (2) No. 2 TDDDG – Exception to the consent requirement for technically necessary processes.
The processing of personal data is carried out – insofar as consent is required – on the basis of your consent in accordance with
Art. 6(1)(a) GDPR – processing based on voluntary consent).
You can revoke or adjust your consent at any time via the Cookie Manager integrated on this website.
In addition, you can delete cookies at any time via your browser settings or prevent new cookies from being set.
Please note that deactivating technically necessary cookies may limit the functionality of this website.
Borlabs Cookie (cookie consent management)
We use the cookie consent manager Borlabs Cookie (WordPress plugin) to manage consent for the use of cookies and similar technologies.
Provider:
Borlabs GmbH
Hamburger Str. 11
22083 Hamburg
Germany
Borlabs Cookie is used to record, store, document and technically implement your consent (e.g. loading/blocking services).
For this purpose, a technically necessary cookie is stored on your device, in which the respective consent status (accepted, rejected or partially accepted) is documented.
Processed data:
- Consent status for individual categories and services
- Time of consent or revocation
- Anonymous consent ID
- Technical information about the browser
- IP address (truncated/anonymised, if technically possible)
This data is not passed on to third parties. It is not transferred to third countries.
Purpose of processing:
- Obtaining and documenting consent
- Fulfilling legal obligations to provide evidence and accountability
- Controlling the delivery of services requiring consent
Legal basis:
Art. 6(1)(c) GDPR – Processing for compliance with a legal obligation
in conjunction with
Section 25(2)(2) TDDDG – Exemption from the consent requirement for technically necessary processes
Storage period:
The cookie set by Borlabs Cookie is stored for a period of up to 12 months or until you revoke your consent or delete the cookies in your browser.
Revocation of consent:
You can change or revoke your consent at any time with future effect via the cookie settings on our website.
Contacting us
If you contact us via the contact form, email or telephone, the personal data you provide (e.g. name, email address, telephone number, message text) will be processed in order to deal with your enquiry.
The legal basis for this is:
- Art. 6(1)(b) GDPR – Processing for the performance of a contract or in order to take steps prior to entering into a contract,
- Art. 6(1)(f) GDPR – Processing based on legitimate interests, provided that there are no overriding interests of the data subject,
- and, if you have given your consent,
Art. 6(1)(a) GDPR – Processing based on voluntary consent.
Your data will be deleted as soon as your request has been finally processed and there are no legal retention obligations to the contrary.
Profiles with third-party providers (social media)
We maintain public profiles on various social media platforms. The following information applies to all company profiles operated by us.
When visiting our social media sites, users’ personal data may be processed. Data processing may be carried out by us or by the respective platform operator. We have no complete influence on the type, scope and purpose of data processing by the platform operators.
Our social media sites serve to provide information, communicate and present our company to the outside world.
Please note that social media platforms generally use cookies and similar technologies to analyse user behaviour and create profiles.
Data subjects’ rights can generally be asserted both against us and against the respective platform operator. However, the platform provider may be primarily responsible for certain processing operations.
The legal basis for the processing of personal data in connection with the operation of our social media profiles is our legitimate interest in contemporary public relations and communication in accordance with
Art. 6(1)(f) GDPR – processing based on legitimate interests, provided that there are no overriding interests of the data subject.
If users have given their consent to the respective platform operator for certain processing operations (e.g. tracking, profiling or personalised advertising), this processing is carried out on the basis of
Art. 6(1)(a) GDPR – processing based on freely given consent.
Consent can be revoked at any time by contacting the respective platform provider.
1. Facebook
We operate a company page on Facebook. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
For certain processing operations (in particular Page Insights), there is joint responsibility in accordance with
Art. 26 GDPR – Regulations on joint responsibility of several bodies in data processing.
Data subjects’ rights can be asserted both against us and against Meta. Meta is primarily responsible for fulfilling data subjects’ rights in connection with Page Insights.
The joint controller agreement is available at:
https://www.facebook.com/legal/terms/page_controller_addendum
When you visit our Facebook page, Meta processes users’ personal data (e.g. IP address, device information, interactions). Meta provides us with anonymised usage statistics (‘Page Insights’).
Further information on data processing by Meta can be found at:
https://www.facebook.com/privacy/explanation
Data transfer to third countries (in particular the USA) cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework (DPF).
General links to third-party profiles
Our website contains links to our profiles on social networks. These are purely links (text or graphic links).
When you visit our website, these links do not transfer any personal data to the respective platform operators.
The legal basis for the links is our legitimate interest in a modern corporate presentation and in providing an easy way to contact us in accordance with
Art. 6(1)(f) GDPR – processing based on legitimate interests, provided that there are no overriding interests of the data subject.
Only when you click on one of the integrated links will a connection to the respective social network be established and data transfer to the platform operator triggered. From this point on, data processing is carried out under the responsibility of the respective platform operator in accordance with data protection law.
In particular, the following data may be processed by the respective provider:
- IP address of the terminal device used,
- date and time of access,
- subpage accessed,
- browser and device information,
- if applicable, assignment to an existing user account, provided you are logged in to the respective service.
If you wish to prevent platform operators from directly assigning your visit to our website to your personal user account, please log out of the respective network before clicking on the links. You can also adjust the privacy settings in your user account.
Linked social media profiles
Facebook
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy:
https://www.facebook.com/policy.php
Accessibility widget ‘Ally’ from Elementor
On our website, we use the accessibility widget ‘Ally – Accessibility & Usability on the Web’ from Elementor Ltd. The widget serves to improve digital accessibility and allows visitors to customise the display of the website (e.g. adjusting contrast, font size, highlighting links or activating a reading mode).
The widget is only loaded after you have given your express consent. The legal basis for the associated processing of personal data is
Art. 6(1)(a) GDPR
in conjunction with
Section 25(1) TDDDG
(if information is accessed on your terminal device, e.g. through cookies or similar technologies).
When the widget is activated, scripts are loaded from Elementor Ltd. servers. In doing so, personal data may be transmitted to the provider’s servers. This applies in particular to:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Pages accessed
- Any accessibility settings selected
Processing is carried out exclusively for the purpose of providing and technically implementing the accessibility functions.
Data transfer to Israel cannot be ruled out. According to the European Commission’s adequacy decision, Israel is considered to be an adequate country for data transfer pursuant to
Art. 45 GDPR – Data transfer on the basis of an adequacy decision
as a third country with an adequate level of data protection.
You can revoke your consent at any time with future effect by adjusting the relevant settings in our consent tool.
Further information on data processing by Elementor can be found at:
https://elementor.com/about/privacy/
Google Fonts (local hosting)
We use Google Fonts exclusively via local hosting. The fonts are stored on our own servers and delivered from there.
When you visit our website, the fonts we provide locally are not loaded from Google’s servers. This means that no connection to Google servers is established in the context of font provision and no personal data is transmitted to Google in this respect. Consent is not required for this.
A connection to Google servers can only be established if you expressly consent to the use of external Google services such as Google Maps or YouTube. In these cases, additional resources (e.g. scripts, styles or fonts) may be downloaded from Google for technical reasons. No personal data is processed in connection with the provision of the fonts.
Further information on Google Fonts can be found at:
https://developers.google.com/fonts/faq
Google’s privacy policy can be found at:
https://policies.google.com/privacy?hl=de
Google Maps
We use the Google Maps service on our website to display our location and make it easier for visitors to plan their journey. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps can be integrated in two ways:
- via an iframe (embedded map) or
- via the Google Maps JavaScript API (dynamic, interactive map).
The following applies to both variants:
Google Maps is only loaded after you have given your express consent. No data is transferred to Google before activation. Only after you have given your consent via the cookie/consent banner is the map loaded and a connection to Google servers established.
As part of the integration of Google Maps, additional resources (e.g. fonts/styles) from Google may also be loaded.
Data processing is carried out on the basis of your consent in accordance with
Art. 6(1)(a) GDPR – Processing based on voluntarily given consent
in conjunction with
§ 25 (1) TDDDG – Consent requirement for storing or reading information on terminal devices, e.g. cookies.
Consent can be revoked at any time with effect for the future.
What data is processed when using Google Maps?
After activating the service, the following data in particular may be transmitted to Google and processed there:
- IP address,
- date and time of the page view,
- the subpage accessed,
- browser and device data,
- location data (if you have enabled this in your browser),
- referrer URL.
With your consent, Google may use cookies or similar technologies to store user settings and provide content.
Integration via iframe
When integrating a Google Maps iframe, the map content is loaded directly from Google servers. The above-mentioned data is processed by Google as soon as you activate the map.
Integration via the Google Maps JavaScript API
When using the JavaScript API, your browser also loads scripts from Google. This allows Google to access additional technical information (e.g. browser configuration, API usage data). The data processing corresponds to the use described for iframe.
Transfer to the USA / EU-US Data Privacy Framework
The use of Google Maps may involve the transfer of personal data to the USA.
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may act as the recipient of personal data.
If recipients are certified under the EU-US Data Privacy Framework (DPF), the transfer is based on the adequacy decision; otherwise, it is based on appropriate safeguards (e.g. EU standard contractual clauses). We have no influence on the further processing of the data by Google.
Google processes the data under its own responsibility for data protection.
Further information
Google’s privacy policy:
https://policies.google.com/privacy
Google Maps Terms of Service:
https://www.google.com/help/terms_maps.html
Cloudflare
We use services provided by Cloudflare Inc., 101 Townsend Street, San Francisco, CA 94107, USA, on our website to protect our website from attacks, optimise loading times and ensure stable delivery of content. Cloudflare acts as a content delivery network (CDN) and security service.
Processing is based on our legitimate interest in the secure, stable and efficient provision of our website in accordance with
Art. 6(1)(f) GDPR – processing based on legitimate interests, provided that there are no overriding interests of the data subject.
Insofar as Cloudflare uses technically necessary cookies or comparable technologies for security and misuse detection, this is done on the basis of
Section 25(2)(2) TDDDG – Exemption from the consent requirement for technically necessary processes.
When you visit our website, data is necessarily processed via Cloudflare. This includes in particular:
- IP address of the requesting device,
- content and files accessed,
- date and time of access,
- technical information transmitted by the browser (browser type, operating system),
- information for detecting and preventing malicious access (e.g. bot detection).
Cloudflare may use this data for security purposes (e.g. DDoS protection), to detect malicious access and to optimise delivery.
To the best of our knowledge, Cloudflare does not use cookies for analysis or marketing purposes. Depending on the configuration, technically necessary cookies may be used for security and misuse detection.
Transfer to third countries (in particular the USA) cannot be ruled out.
If recipients are certified under the EU-US DPF, the transfer is based on the adequacy decision; otherwise, it is based on appropriate safeguards (e.g. EU standard contractual clauses).
Cloudflare processes some of the data on its own responsibility as part of security measures.
Further information on data processing by Cloudflare can be found at:
https://www.cloudflare.com/privacypolicy/
Use of the WPStatistics analysis tool
Our website uses the WordPress plugin WPStatistics for statistical analysis of visitor behaviour. WPStatistics is used exclusively for statistical analysis, e.g. to determine:
- Browser versions
- Referrers (referrals and search queries)
- Visitor numbers by country
Data collection and anonymisation
We use WPStatistics in such a way that no usage profiles are created for marketing purposes.
IP addresses are truncated/anonymised (or not stored in full) before being saved, so that it is generally not possible to directly identify individual visitors.
Type of data processed
- Number of visitors and page views
- Time of page view
- Browser and device data
- Visitor’s country of origin (based on anonymised/filtered data)
Legal basis
Processing is carried out on the basis of our legitimate interest in accordance with
Art. 6(1)(f) GDPR – processing based on legitimate interests, provided that there are no overriding interests of the data subject.
WPStatistics is configured so that no tracking cookies or comparable identifiers for recognition are set.
If a technically necessary cookie is set within the scope of the opt-out function, this is done on the basis of
§ 25(2)(2) TDDDG – Exemption from the consent requirement for technically necessary processes.
Storage of data
The anonymised statistical data is stored exclusively on our own server (host: IONOS SE) and is automatically deleted after 365 days.
The collected data is not merged with other data sources and the statistical data is not passed on to third parties.
Cookies / Consent
WPStatistics does not set any cookies for reach measurement or profiling in our configuration. Only if you use the opt-out function will a technically necessary cookie be set to store your objection for a period of one year. No consent is required for this processing.
Opt-out option
You can object to anonymous statistical collection at any time. This will set a technically necessary opt-out cookie for a period of one year.
Link to deactivate collection by WPStatistics:
https://salzwedelstipendium.de/?wp_statistics_opt_out=0
If you delete your browser cookies, you will need to opt out again.
Further information
https://wp-statistics.com/resources/what-we-collect/
Objection to advertising emails
We hereby expressly object to the use of the contact details published in accordance with the legal notice requirement for the purpose of sending unsolicited advertising and information material.
The operators of this website reserve the right to take legal action in the event of unsolicited advertising information being sent, for example via spam emails.
Changes and validity of this privacy policy
We regularly review and update this privacy policy to ensure that it always complies with current legal requirements and correctly reflects our technical and organisational developments. Changes can therefore be made at any time. The current version available on this website is authoritative.
If you have any questions about the processing of your personal data or this privacy policy, you can contact us at any time using the contact details provided in the section ‘Information about us as the controller’.
