Geoportal.de

Privacy Policy

The Federal Agency for Cartography and Geodesy (BKG) is particularly concerned about the protection of your personal data, which is why we only process personal data to the extent necessary. Which data are required and processed for what purpose and on what basis depends to a large extent on the type of service you use or depends on the task for which we require it.

The term "personal data" means all information related to an identified or identifiable natural person. Natural persons are considered identifiable if they can be identified directly or indirectly, in particular by linking them to an identifier such as a name, identification number, location data or an online reference number.

More detailed information on what data are collected, for what purpose and on what basis, how you can contact the responsible body and the data protection officer and what rights you have with regard to the processing of personal data can be found in this data protection declaration.

1. Controller and data protection officer

The controller responsible for processing personal data is the

Bundesamt für Kartographie und Geodäsie (BKG)
Richard-Strauss-Allee 11
60598 Frankfurt am Main
Telefon: 069 6333-1
Fax: 069 6333-235
elektronische Post: mailbox@bkg.bund.de
DE-Mail: poststelle@bkg-bund.de-mail.de

If you have specific questions about how your privacy is protected, please contact the BKG data protection officer:

Bundesamt für Kartographie und Geodäsie
Richard-Strauss-Allee 11
60598 Frankfurt am Main
elektronische Post: dsb@bkg.bund.de

The following statement gives you an overview of how the BKG guarantees the protection of your data and what kind of data is collected on what basis and for what purpose.
 

2. Data processing related to visiting this website

Each time you visit a website, data are collected and exchanged that are necessary to provide the service. These are:

  • IP address
  • type and version of your Internet browser
  • operating system used
  • the requested page
  • referrer URL (the previously visited page)
  • time of the server request

The data are stored beyond the time of the visit in the log files of our system. According to Article 6 (1) (e) GDPR in conjunction with Section 5 of the Act on the Federal Office for Information Security (BSI-Gesetz), we are also required to store data past the time of your visit in order to protect against attacks on the BKG’s Internet infrastructure and federal communications technology. These data are analyzed and, in case of attacks on the communications technology, needed to initiate legal and criminal proceedings. 

These data are not stored together with other personal data of the user.

Data logged when the BKG website is accessed are shared with third parties only if we are legally obligated to do so, or if needed for legal or criminal proceedings in case of attacks on federal communications technology. Otherwise these data are not shared with third parties. The BKG does not combine these data with other data sources. 

Session cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters, a so-called session ID, which enables the browser to be uniquely identified when the website is called up again.

Dealing with cookies

Cookies can be controlled with all Internet browsers. Most browsers are set to accept all cookies without asking the user. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

If you would like to use our website to the full extent, you should set your browser so that session cookies are accepted.

We do not use any functional or tracking cookies on our website.

Anonymous Statistics

To improve our services, we collect only anonymized usage statistics. No personal data is stored, and no individual user analysis is performed. No additional cookies are used for this analysis.

Check your data

Every Internet browser can show you when cookies have been stored on your computer and what they contain. The websites of the Federal Commissioner for Data Protection and Freedom of Information and the Federal Office for Information Security offer more detailed information.
 

3. Processing personal data when you contact us

Personal data are processed differently depending on how you contact us: via e-mail, online form, post or telephone.

3.1 Contacting via e-mail

You can contact the BKG using the central e-mail address named in the publication data or the e-mail address of individual staff members.

If you use any of the above contact methods via email, the data you send - at least your e-mail address and the information contained in your message (including any personal data you provide) - will be stored for the purpose of contact and responding to your message in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO).

Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG. To respond to your message, it is necessary to process the personal data you provide.

3.2 Contacting by using the contact form

If you use this form, you will need to provide your first and last name and e-mail address. Without this information, your message cannot be processed. A phone number is optional and enables us to respond by phone, if requested.

Please note that the data transmitted with the online form and its content (which may also include personal information you provide) will be processed on the basis of Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG for the purpose of responding to your message.

Your request, which you have communicated to us via the contact form, is processed by staff of the BKG. Your data are stored in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO).

3.3 Contacting by post

If you write a letter to the BKG, the data you send (such as first and last name, address) will be stored and the information contained in your letter (including any personal data you provide) will be stored for the purpose of contact and responding to your letter in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO). 

Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG. To respond to your message, it is necessary to process the personal data you provide.

3.4 Contacting by telephone

If you contact a BKG staff member by telephone, your personal data will be processed as far as necessary to respond to your concern.

If your personal data are processed by an employee of the BKG for the purpose of processing your request that falls in the duties of the BKG these data are stored in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO). 

Please note that the data transmitted and the content (which may also include personal data you provide) will be processed on the basis of Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG for the purpose of processing your request.

3.5 Contacting via video conferencing

Contacting via video conferencing and online meetings via Cisco Webex Meetings

For video conferencing and online meetings, we use the Webex Meetings service of Cisco Systems, Inc. An appropriate level of data protection is guaranteed by the "Privacy Shield" certification and other certificates of Cisco Systems, Inc. For more information, please visit: https://www.cisco.com/c/de_de/about/legal/privacy-full.html

Our data processing takes place in Germany and in the EU, a transfer of data to a third country or an international organization does not take place on our part. In the case of video conferences, both the signaling and the call content are encrypted.

The scope of the data required for the use of the application depends on the data you provide before or during participation in the conversation via Webex. The following types or categories of data are subject to processing:

User details:

  • First name, last name, Email address

Meeting metadata:

  • meeting session information (title, date and time, frequency, average and actual duration, number, quality,
  • network activity, and network connectivity)
  • Participant IP addresses
  • device/hardware information

If you join via a browser, then Cisco Systems, Inc. gains knowledge of the browser. If you install the software, Cisco Systems, Inc. obtains knowledge about your operating system and hardware information. Depending on your operating system, you may be able to control the information you disclose.

Text, Audio and Video Data:

  • When using chat, question or survey features during a conversation, the text input you provide is processed to display it during the conversation and, if necessary, log it.
  • To enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the conversation. You can switch off or mute the camera or microphone yourself at any time via the settings. Please note, however, that the call is then interrupted and possibly also terminated.
  • Conference and call recording: Recording of the video conference using the recording capabilities of the Cisco Webex Meetings service will only take place with the consent of the participants and after prior notice. We do not know whether Cisco Systems, Inc. records the calls and, if so, how long the data is stored there. The recordings will be deleted immediately after the recording purpose stated in the consent has been achieved.
     

4. Processing personal data in the context of providing information

How personal data are processed depends on the form in which information is provided: printed publications, analog maps and digital spatial data, the dispatch of newsletters and information services as well as events and informational visits to the BKG.

4.1 Data for sending the newsletter

If you sign up for the e-mail newsletters, we will store your e-mail address on a server. Your data will be processed based on your consent pursuant to Article 6 (1) (a) GDPR. We use these data only to send the newsletters and for statistical evaluations in order to analyze system performance. We do not share your data with third parties and do not use them for any other own purposes. 

If you no longer wish your data to be stored for this purpose, and thus no longer wish to subscribe to our newsletter, you may unsubscribe at any time, and the data you provided will be deleted. Please use this link: https://maillist.gdi- de.org/sympa/signoff/newsletter to do so, you will need the e-mail address you provided when subscribing. 

4.2 Ordering free printed publications

If you order brochures, flyers or other printed publications from this website, we must process your personal data to carry out pre-contractual measures and the contract (providing publications) according to Article 6 (1) (b) GDPR. The following personal data are needed to process your order:

  • name, first name
  • street, house number
  • postal code, city or town
  • e-mail address (for electronic orders)

These data are processed to carry out your order. If we are unable to finalize your order, the data you provide will be shared with third parties (shipping company, other government agencies or institutions which send the ordered material). If you do not provide the necessary data, your order will not be processed.

Additional information, such as your title, telephone number, institution or company are not necessary to process your order, although they are helpful. 

Please note that the processing of your data is based on Article 6(1)(e) of the GDPR in conjunction with Section 3 of the BDSG. The processing of the personal data you provide is necessary for the purpose of handling your request.

All personal data will be deleted no later than six weeks after the order has been processed.

4.3 Events and visitor groups

The BKG organizes its own events and regularly welcomes groups for an informational visit. In order to grant participants and groups access to the premises of the BKG, we must collect your first name and surname in accordance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG (Federal Data Protection Act) in order to fulfil our duties (public relations) within the framework of event organization and for security reasons prior to the event.

Additional information, such as the institution, type of school, class level, club or mobility limitations are optional in most cases but help in preparing the visit to the BKG. These data for the purpose of the event or the informational visit are processed based on your consent pursuant to Article 6 (1) (a) GDPR; you may withdraw this consent at any time. The lawfulness of processing on the basis of the consent provided remains unaffected until the BKG receives notification that consent has been withdrawn. 

4.4 Provision of Personal Data to GDI-DE by the Federal Government, the States, and the Business and Scientific Sectors

Pursuant to the Agreement between the Federal Government and the States on the Joint Development and Operation of the German Spatial Data Infrastructure (VV GDI-DE), as amended on December 5, 2017, the BKG was tasked with coordinating and operating the national technical components of the German Spatial Data Infrastructure.

On behalf of SDI Germany, the Geodatenkatalog.de stores and maintains metadata provided by the federal government, the states, and the business and scientific sectors—which may also contain personal information in the form of contact details—for the purpose of providing information. Through its connection to Geodatenkatalog.de, Geoportal.de enables the search and display of this metadata. The legal obligation arises from Directive 2007/2/EC of the European Parliament and of the Council of March 14, 2007, establishing an Infrastructure for Spatial Information in the European Community (INSPIRE), in conjunction with the Federal Act on Access to Digital Spatial Data (Geodata Access Act – GeoZG), Last updated on February 25, 2021. Geodata regularly contains personal data. Although geodata primarily depicts facts related to spatial units—such as parcels of land or buildings—there is an (indirect) personal connection insofar as, for example, parcels of land are depicted that are owned or possessed by natural persons who could be identified through simple research (e.g., Google, online phone directory), could be identified. The BKG has no further information regarding the identities of the individuals concerned. There is generally no direct link to specific individuals.

4.5    Registration in GDI-DE Web Applications

On some of our web pages, we offer the option to register by providing personal data. Your data is entered into a form, transmitted to us, and stored. Data is only shared with third parties when necessary. The following data is collected as part of the registration process:

  •  First name, last name
  • Address
  • Phone number
  • Email address
  • Name of institution/company (if applicable)
  • Date and time of registration
  • IP address

As part of the registration process, we will obtain your consent to the processing of this data. The legal basis for the processing of the data, where consent has been given, is Article 6(1)(a) of the GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This applies to the data collected from you during the registration process if your registration on our website is canceled or modified.

As a user, you may cancel your registration at any time. You may have your stored data modified at any time.

You may withdraw your consent to the processing of your personal data at any time. If you contact us via email, you may object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in connection with your inquiry will be deleted in this case.

4.6    Web Analytics for Statistical Purposes

Pursuant to Article 6(1)(e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act, the BKG analyzes usage data for statistical purposes as part of its public relations activities and to provide information tailored to user needs regarding the tasks to be performed by the agency and the Coordination Office SDI Germany.

This is done using the web analytics service Matomo (formerly Piwik).

When individual pages of our website www.geoportal.de are accessed, the following data is stored:

  • two bytes of the IP address of the user’s system (anonymized)
  • the webpage accessed
  • the date and time of the visit
  • the website from which the user accessed the webpage (referrer)
  • the subpages accessed from the visited webpage
  • the duration of the visit to the website
  • the frequency of visits to the website
  • country/location (based on the anonymized IP address with low accuracy)
  • screen resolution used
  • Search terms used
  • Time in the user’s local time zone
  • Selected and downloaded files
  • External links
  • Page load time
  • Browser’s primary language
  • Browser’s user agent
  • Computer’s operating system and browser software

Matomo is operated in a privacy-friendly configuration without the use of cookies. No technologies are used that enable the personal identification of users. Data is processed exclusively in anonymized form. The IP address is truncated prior to processing, so that it can no longer be linked to a specific individual. It is not possible to identify individual users. 

The information collected by Matomo regarding the use of our website is stored exclusively on our server. The data is not shared with third parties. It is not combined with other data sources. 
 

4.7 Social Media

The Coordination Office SDI Germany at the Federal Agency for Cartography and Geodesy is active on LinkedIn (@Kst. Geodateninfrastruktur Deutschland). In doing so, it processes personal data through its social media accounts, while data processing also takes place via the social media platforms themselves. BKG is not responsible for the data processing practices of these companies based in the United States of America. To the extent that BKG processes personal data, please refer to BKG’s separate “Social Media” privacy policy. You can find it here.
 

5. Video surveillance

The properties of the BKG

  • Richard-Strauss-Allee 11, 60598 Frankfurt am Main
  • Karl-Rothe-Straße 10-14, 04105 Leipzig
  • Geodätisches Observatorium Wettzell, Sackenrieder Straße 25, 93444 Bad Kötzting

are monitored with a video system in the outside area in order to maintain the domestic authority. Video data are processed in compliance with Article 6 (1) (e) GDPR in conjunction with Article 4 BDSG. Only external identification features are stored. The data collected in this way will only be transferred to third parties if we are legally obliged to do so or if the transfer is necessary for legal or criminal prosecution in cases of violations of domestic authority. Data are not transmitted in other cases.

The records are only evaluated in the case of concrete suspicion. Unless there is a suspicious case, the records shall be deleted after 24 hours at the latest.

6. Your rights

You have the following rights vis-à-vis the BKG with regard to personal data concerning you:

  • Right of access, Article 15 GDPR
  • Right to rectification, Article 16 GDPR
  • Right to rectification and erasure, Article 17 GDPR
  • Right to restriction of processing, Article 18 GDPR
  • Right to object to collecting, processing and/or using , Article 21 GDPR
  • Right to data portability, Article 20 GDPR
  • If the personal data are processed on the basis of consent (Article 6 (1) (a) GDPR), you can withdraw your consent at any time for the purpose in question. The lawfulness of processing on the basis of the consent provided remains unaffected until notification has been received that consent has been withdrawn. 
  • You also have the right to submit a complaint to the supervisory authority under data protection law (e.g., Federal Commissioner for Data Protection and Freedom of Information). You may also submit questions and complaints to the BKG Data Protection Officer.