Privacy policy - Civic Innovation Platform

Privacy policy

With this data protection policy, the Federal Ministry of Labour and Social Affairs (BMAS), as the controller responsible for data privacy, fulfils the information obligations arising from Article 13, Article 14 (7) 3 (3) and Article 21 (4) of the General Data Protection Regulation (GDPR).

The subject of data protection is personal data. Personal data is any information relating to an identified or identifiable natural person (data subject). Consequently, all information that uniquely identifies a person or makes it possible to unambiguously indicate a person, such as name, address, telephone number or e-mail address counts as personal data. Personal data also includes information necessarily generated from the use of the website, such as the beginning time, end time and extent of use and IP address.

The Federal Ministry of Labour and Social Affairs processes personal data to the extent necessary to perform the public tasks of the Federal Ministry of Labour and Social Affairs and to fulfil its statutory obligations. The processing of this personal data is carried out on the basis of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) in particular.

Below we explain what data is required and processed for what purpose and on what basis. The data protection policy provides information on how to contact the responsible body and the data protection officer of the Federal Ministry of Labour and Social Affairs and what data subjects' rights are with regard to the processing of personal data.

    1. Controller and data protection officer

    The controller of the processing of personal data is:

    Federal Ministry of Labour and Social Affairs
    Wilhelmstrasse 49
    10117 Berlin
    Germany
    Phone: Berlin offices 030 18 527-0 / Bonn offices 0228 99 527-0
    E-Mail:
    DE-Mail:

    Data subjects may also contact the official data protection officer if they have specific questions regarding the protection of personal data:

    Data Protection Office of the Federal Ministry of Labour and Social Affairs
    53107 Bonn
    Phone: 0228 99 527-0
    E-Mail:

    2. Information for data subjects according to Articles 13 and 14 GDPR

    2.1 Data processing when visiting the website

    2.1.1 Purpose

    Every time you visit the Civic Innovation Platform (CIP) website, data is collected and stored as required to make the website available. On the basis of Section 5 of the Act to Strengthen the Security of Federal Information Technology (BSI Act), the Federal Ministry of Labour and Social Affairs is obliged to store data to protect against attacks on the Federal Ministry of Labour and Social Affairs' internet infrastructure and the communication technology of the Federation. This data is analysed and, in the event of attacks on communications technology, used to initiate legal and criminal proceedings.

    2.1.2 Nature and source of the data

    The following data is collected and processed when you visit the Civic Innovation Platform website:

    • internet browser type and version
    • operating system used
    • IP address and name of the server
    • the date and time of the server request
    • HTTP protocol and status
    • data volume transferred
    • file path
    • referrer
    • URL accessed
    2.1.3 Legal basis

    The legal basis for data processing when visiting the website is Article 6 (1) e of the EU’s General Data Protection Regulation (GDPR) in connection with Section 5 BSI Act on the storage of data.

    2.1.4 Recipient (third country, if applicable)

    The data is stored in log files beyond the time of the visit on a server at the web provider commissioned by the Federal Ministry of Labour and Social Affairs, Digitas PixelparkGmbH.

    Data logged during access to the Federal Ministry of Labour and Social Affairs website will only be transmitted to third parties if there is a legal obligation to do so, or if the transmission is necessary for legal or criminal prosecution in the event of an attack on the communication technology of the Federation. In other cases, no data is transmitted.

    There is no intention to transmit the personal data to recipients in a third country or to an international organisation.

    2.1.5 Storage duration

    The data is stored in log files beyond the time of the visit on a server at the web provider Digitas Pixelpark GmbH commissioned by the Federal Ministry of Labour and Social Affairs for a period of three months and then deleted.

    In principle, data is only stored for as long as necessary to fulfil the contractual and legal obligations for which the data was collected. Digitas Pixelpark GmbH will then delete the data immediately, unless the data is still required as evidence for civil law claims or due to legal storage obligations until the legal limitation period expires.

    2.1.6 Automated decision making

    There is no automated decision making.

    2.1.7 Obligation to provide the data and consequences of not providing the data

    Without the above mentioned technical connection data, the use of the website is not possible in practice, or respectively for legal reasons.

    2.2 Web analysis on the internet site

    2.2.1 Purpose

    The evaluation of usage information is carried out for statistical purposes as part of public relations work, for the purpose of improving the website and for the provision of information as required for the tasks to be performed by the Federal Ministry of Labour and Social Affairs.

    2.2.2 Nature and source of the data

    The software leaves cookies on visitors’ computers. If individual pages of our website are accessed, the following data is stored:

    • The anonymised IP address of the visitor's device (the last 3 digits are anonymised or shortened as soon as possible)
    • the web page accessed,
    • the website from which the user has reached the accessed website (referrer)
    • recognition of recurring visitors and visitor history
    • the subpages that are accessed from the accessed web page,
    • the time spent on the website and
    • the frequency with which the website is accessed.
    2.2.3 Legal basis

    The data processing is based on Article 6 (1) e GDPR in connection with Section 3 Federal Data Protection Act.

    2.2.4 Recipient (third country, if applicable)

    The software runs exclusively on the service provider's servers on behalf of the Federal Ministry of Labour and Social Affairs. The usage information is only stored there. The data will not be passed on to third parties.

    2.2.5 Storage duration

    Digitas Pixelpark GmbH evaluates the usage information on behalf of the Federal Ministry of Labour and Social Affairs. This is done with the web analysis service Google Analytics and Google Optimize. For this purpose, an explicit declaration of consent is obtained from the users when they access the website (informed consent).

    The IP address of the user is immediately made anonymous during this process, so that the user remains anonymous to us.

    The software is set up in such a way that the IP addresses are not stored completely. One byte of the IP address is masked (e.g.: 192.168.100.xxx) In this way, it is no longer possible to assign the shortened IP address to the device accessing the website.

    In addition, the user ID is deactivated as an extended function of Google Analytics. As a result, no connection can be made between the use of different end devices of the visitors. In addition, no advanced marketing features, such as remarketing or retargeting, are used on this website.

    The use of the website is only logged by Google Analytics and Google Optimize if users give their informed consent in advance. This is accomplished by the choices made by users at the beginning of their visit in the cookie notification dialogue. If users wish to change the selection or the consent or rejection at a later date, they can do so by clicking on the link below. The cookie information dialogue will then open again and the settings can be changed accordingly.

    to the cookie notification dialogue

    In order to be able to offer the users the possibility of consent or rejection, a consent management system is used on this website. This ensures the technical implementation of the possibility to give consent or disagree with Google Analytics and Google Optimize.

    Google Tag Manager is also used for the technical integration of Google Analytics and Google Optimize. This allows tags to be placed on web pages, which enable a technical connection to various services. The Tag Manager itself is a cookie-less domain and does not collect any personal data. The tool only triggers other tags that collect data in some cases, but does not access this data. If there has been deactivation at the domain or cookie level, that remains in effect for all tracking tags implemented with Google Tag Manager. The Tag Manager is only used on this website to integrate Google Analytics and Google Optimize.

    2.2.6 Automated decision making

    There is no automated decision making.

    2.2.7 Obligation to provide the data and consequences of not providing the data

    There is no effect on the information and/or services provided on the website when consent is not given.

    2.3 Data processing in the context of making contact

    2.3.1 Purpose

    The project called the Civic Innovation Platform (CIP), which is supported by the Federal Ministry of Labour and Social Affairs, aims to provide both non-material and financial support for the development and implementation of AI-based applications for the common good, in particular encouraging networking and the exchange of ideas among very diverse actors. Processing personal data allows us to process contact requests and, potentially, the issue addressed within the scope of this project.

    2.3.2 Nature and source of the data

    The personal data of users of the following contact methods will be stored. These usually include last name, first name and contact details (e.g. private or business e-mail address, twitter account, etc.):

    2.3.3 Legal basis

    The data is processed on the basis of Article 6 (1) e of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG).

    2.3.4 Recipient

    The processing of an issue, which the users communicate via the contact methods listed below, is carried out by the employees of the Federal Ministry of Labour and Social Affairs. This applies to contact via:

    Issues users submit to the e-mail address or will be processed by the staff of Telemark Rostock Kommunikations- und Marketinggesellschaft mbH, the service provider commissioned by the Federal Ministry of Labour and Social Affairs. If your issue cannot be processed by the employees of Telemark Rostock, it will be forwarded to the Federal Ministry of Labour and Social Affairs.

    Issues users submit to the e-mail address will be processed by the staff of Digitas Pixelpark GmbH, the service provider commissioned by the Federal Ministry of Labour and Social Affairs.

    2.3.5 Storage duration

    The storage of data for the contact methods listed below is based on the time limits for the storage of written material as laid down in the registry directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO). This applies to contact via:

    If contact is made via and , Telemark Rostock Kommunikations- und Marketinggesellschaft mbH, the service provider commissioned by the Federal Ministry of Labour and Social Affairs to process the issues, stores the users' data exclusively for the purpose of processing the request and in accordance with the legal and contractual requirements. Insofar as the data is forwarded to the Federal Ministry of Labour and Social Affairs, storage of the data is based on the time limits for the storage of written material as laid down in the registry directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).

    If contact is made via , Digitas Pixelpark GmbH, the service provider commissioned by Federal Ministry of Labour and Social Affairs, will store the data exclusively for the purpose of processing the issue and in accordance with the legal and contractual requirements. Insofar as the data is forwarded to the Federal Ministry of Labour and Social Affairs, storage of the data is based on the time limits for the storage of written material as laid down in the registry directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).

    2.3.6 Automated decision making

    There is no automated decision making.

    2.3.7 Obligation to provide the data and consequences of not providing the data

    It is not possible to process and reply to the enquiry without address data and personal data relevant to the issue.

    2.4 Data processing during registration for the restricted section

    2.4.1 Purpose

    On our website, the Federal Ministry of Labour and Social Affairs offers users the opportunity to register by entering personal data to log in to the restricted section. In the member section additional information, contents and functionality are available.

    The data is collected for the purpose of enabling registration for the non-public area, as well as

    • to enable contact between registered users,
    • the basic functionality of the platform: matching,
    • the establishment of contact by the Federal Ministry of Labour and Social Affairs,
    • the submission of draft ideas and project proposals and their processing, and
    • for statistical purposes.

    Since one of the formal requirements of the funding regulations is that the idea must be implemented in Germany, asking for the address serves to ensure that this requirement is met. The e-mail address serves as a method of contact as a user name and therefore cannot be changed.

    The e-mail address is set as the primary contact option during registration. The contact option can be changed in the profile area. At least one contact option must always be specified in order to enable the basic purpose of the restricted section - the contacting and networking of registered users.

    For certain activities - such as registration or the creation and publication of a project idea - information e-mails are sent to users for platform administration.

    2.4.2 Nature and source of the data

    The following data is collected during the registration process:

    • Type of institution represented or indication “private individual”
    • Name of the institution (not applicable to private individuals)
    • First name
    • Last name
    • Valid email address
    • Place of residence and
    • Password.

    In addition, voluntary information can be given concerning address, title, function and URL. In all cases, the data is provided by the users themselves.

    2.4.3 Legal basis

    Name, contact details and postal addresses are processed on the basis of Article 6 (1) e of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG). Other personal data is provided on the basis of a consent pursuant to Article 6 (1) a in conjunction with Article 7 GDPR.

    2.4.4 Recipient

    Personal data of users will only be transmitted by us to recipients outside the Federal Ministry of Labour and Social Affairs if this is necessary for project implementation (e.g. in the context of awarding prize money and project funding, especially to external jury members, and via the restricted member section to all other participants in this restricted section).

    2.4.5 Storage duration

    The personal data will be stored for as long as necessary for project implementation or documentation.

    Membership of the restricted section can be terminated at any time and the consent to the storage of personal data, which was given to us at registration, can be revoked at any time. The same applies to the request for deletion of the profile and the associated stored data. All users need to do is send an informal message via e-mail to . The legality of the data processing already carried out remains unaffected by the revocation. However, not consenting means that access to the restricted member section and thus to its functions will no longer be possible.

    2.4.6 Automated decision making

    There is no automated decision making.

    2.4.7 Obligation to provide the data and consequences of not providing the data

    Participation in the exchange of ideas and in the ideas competition in the restricted section is not possible without the contact data and, if applicable, personal project data.

    3. Your rights

    Data subjects have rights vis-à-vis the Federal Ministry of Labour and Social Affairs as the controller responsible with regard to the personal data concerning them:

    3.1 General rights of data subjects

    • Right of access (Article 15 GDPR)

    The right of access gives data subjects a comprehensive right of access to information about their personal data and some other important criteria, such as the purposes of the processing and the duration of the storage. The exceptions to this right provided for in Section 34 BDSG apply.

    • Right to rectification (Article 16 GDPR)

    The right of rectification includes the possibility for data subjects to have inaccurate personal data concerning them be corrected.

    • Right to erasure (Article 17 GDPR)

    The right to erasure includes the possibility for the data subject to have data erased by the controller. This is only possible if, for example, the personal data is no longer necessary, has been processed unlawfully or if consent has been revoked in this respect. The exceptions to this right provided for in Article 17 GDPR and Section 35 BDSG apply.

    • Right to restriction of processing (Article 18 GDPR)

    The right to restriction of processing includes the possibility for data subjects to stop further processing of personal data in certain circumstances.

    • Right to data portability (Article 20 GDPR)

    The right to data portability includes the possibility in certain circumstances for data subjects to obtain the personal data concerning them from the controller in a commonly used, machine-readable format, in order to have it forwarded to another controller if needed. The exception to this right regulated in Article 20 (3) 2 GDPR applies.

    3.2 Right of revocation for data processing based on consent

    If personal data is being processed on the basis of consent (Article 6 (1) a, Article 7 or Article 9 (2) a of the GDPR), it can be revoked at any time (Article 7 (3) 1).

    The legality of the processing based on consent remains unaffected until the receipt of the revocation.

    In individual cases, processing of the data limited to certain purposes may be permissible and necessary even after revocation (e.g. documentation purposes).

    The revocation can be sent to the above mentioned contact addresses of the Federal Ministry of Labour and Social Affairs if no indication of a particular addressee was given.

    3.3 Right to object under Article 21 GDPR

    If the processing of personal data is based on Article 6 (1) e GDPR (performance of a task carried out in the public interest), data subjects have the right to object to the processing at any time for reasons arising from their particular situation (Article (21) 1 GDPR). The exceptions to this right provided for in Article 21 GDPR and Section 36 BDSG apply.

    The objection can be made without any particular form, stating the name and, if applicable, other identification features (e.g. e-mail address, postal address) and should be sent to the above-mentioned address of the Federal Ministry of Labour and Social Affairs if no reference is made to a particular addressee.

    3.4 Right of appeal

    Data subjects may submit a complaint to the above-mentioned data protection officer or to the data protection supervisory authority responsible for the Federal Ministry of Labour and Social Affairs.

    Federal Commissioner for Data Protection and Freedom of Information
    Graurheindorfer Str. 153
    53117 Bonn

    Phone: 0228  997799-0

    E-Mail: