Privacy
Privacy
The Federal Agency for Cartography and Geodesy (BKG) is particularly concerned about the protection of your personal data, which is why we only process personal data to the extent necessary. Which data are required and processed for what purpose and on what basis depends to a large extent on the type of service you use or depends on the task for which we require it.
The term "personal data" means all information related to an identified or identifiable natural person. Natural persons are considered identifiable if they can be identified directly or indirectly, in particular by linking them to an identifier such as a name, identification number, location data or an online reference number.
More detailed information on what data are collected, for what purpose and on what basis, how you can contact the responsible body and the data protection officer and what rights you have with regard to the processing of personal data can be found in this data protection declaration.
1. Controller and data protection officer
The controller responsible for processing personal data is the
Bundesamt für Kartographie und Geodäsie (BKG)
Richard-Strauss-Allee 11
60598 Frankfurt am Main
Telefon: 069 6333-1
Fax: 069 6333-235
E-Mail: mailbox@bkg.bund.de
DE-Mail: poststelle@bkg-bund.de-mail.de
If you have specific questions about how your privacy is protected, please contact the BKG data protection officer:
Bundesamt für Kartographie und Geodäsie
Richard-Strauss-Allee 11
60598 Frankfurt am Main
E-Mail: dsb@bkg.bund.de
The following statement gives you an overview of how the BKG guarantees the protection of your data and what kind of data is collected on what basis and for what purpose.
2. Data processing related to visiting this website
Each time you visit a website, data are collected and exchanged that are necessary to provide the service. These are:
- IP address
- type and version of your Internet browser
- operating system used
- the requested page
- referrer URL (the previously visited page)
- time of the server request
The data are stored beyond the time of the visit in the log files of our system. According to Article 6 (1) (e) GDPR in conjunction with Section 5 of the Act on the Federal Office for Information Security (BSI-Gesetz), we are also required to store data past the time of your visit in order to protect against attacks on the BKG’s Internet infrastructure and federal communications technology. These data are analyzed and, in case of attacks on the communications technology, needed to initiate legal and criminal proceedings.
These data are not stored together with other personal data of the user.
Data logged when the BKG website is accessed are shared with third parties only if we are legally obligated to do so, or if needed for legal or criminal proceedings in case of attacks on federal communications technology. Otherwise these data are not shared with third parties. The BKG does not combine these data with other data sources.
Session cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters, a so-called session ID, which enables the browser to be uniquely identified when the website is called up again.
Dealing with cookies
Cookies can be controlled with all Internet browsers. Most browsers are set to accept all cookies without asking the user. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically.
If you would like to use our website to the full extent, you should set your browser so that session cookies are accepted.
If you reject all cookies,
- our shop systems will not work and
- various web applications (including interactive maps) will not work correctly.
Check your data
Every Internet browser can show you when cookies have been stored on your computer and what they contain. The websites of the Federal Commissioner for Data Protection and Freedom of Information and the Federal Office for Information Security offer more detailed information.
3. Processing personal data when you contact us
Personal data are processed differently depending on how you contact us: via e-mail, online form, post, telephone or videoconferences and online meetings.
3.1 Contacting the BKG via e-mail
You can contact the BKG using the central e-mail address named in the publication data or the e-mail address of individual staff members.
If you contact the BKG by e-mail, the data you send - at least your e-mail address and the information contained in your message (including any personal data you provide) - will be stored for the purpose of contact and responding to your message in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO).
Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG. To respond to your message, it is necessary to process the personal data you provide.
3.2 Contacting the BKG using the contact form
If you use this form, you will need to provide your first and last name and e-mail address. Without this information, your message cannot be processed. A phone number is optional and enables us to respond by phone, if requested.
Please note that the data transmitted with the online form and its content (which may also include personal information you provide) will be processed on the basis of Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG for the purpose of responding to your message.
Your request, which you have communicated to us via the contact form, is processed by staff of the BKG. Your data are stored in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO).
3.3 E-mail addresses of third parties
The BKG website also provides e-mail addresses of third parties (e.g., project managers commissioned by the BKG) regarding specific topics. These addresses do not end in @bkg.bund.de. If you send a message to one of these addresses, the BKG is not responsible for processing the personal data. If you have any questions about how these third parties deal with your personal data, please contact them directly.
Exceptions are e-mail addresses with the following character strings after @:
- adv.online.de
- geomis.bund.de
- gdi-de.org
- erdrotation.de
- iers.org
- geoportal.de
- eurogeographics.org
These e-mail addresses are subject to the regulations and notices mentioned under point 3.a.
3.4 Contacting the BKG by post
If you write a letter to the BKG, the data you send (such as first and last name, address) will be stored and the information contained in your letter (including any personal data you provide) will be stored for the purpose of contact and responding to your letter in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO).
Please note that the data will be processed in compliance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG. To respond to your message, it is necessary to process the personal data you provide.
3.5 Contacting the BKG by telephone
If you contact a BKG staff member by telephone, your personal data will be processed as far as necessary to respond to your concern.
If your personal data are processed by an employee of the BKG for the purpose of processing your request that falls in the duties of the BKG these data are stored in accordance with the time limits for record retention given in the Registry Directive, supplemental to the Joint Rules of Procedure of the Federal Ministries (GGO).
Please note that the data transmitted and the content (which may also include personal data you provide) will be processed on the basis of Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG for the purpose of processing your request.
3.6 Contacting via video conferencing
Contacting via video conferencing and online meetings via Cisco Webex Meetings
For video conferencing and online meetings, we use the Webex Meetings service of Cisco Systems, Inc. An appropriate level of data protection is guaranteed by the "Privacy Shield" certification and other certificates of Cisco Systems, Inc. For more information, please visit: https://www.cisco.com/c/de_de/about/legal/privacy-full.html
Our data processing takes place in Germany and in the EU, a transfer of data to a third country or an international organization does not take place on our part. In the case of video conferences, both the signaling and the call content are encrypted.
The scope of the data required for the use of the application depends on the data you provide before or during participation in the conversation via Webex. The following types or categories of data are subject to processing:
User details:
- First name, last name
- Email address
Meeting metadata:
- meeting session information (title, date and time, frequency, average and actual duration, number, quality, network activity, and network connectivity)
- Participant IP addresses
- device/hardware information
If you join via a browser, then Cisco Systems, Inc. gains knowledge of the browser. If you install the software, Cisco Systems, Inc. obtains knowledge about your operating system and hardware information. Depending on your operating system, you may be able to control the information you disclose.
Text, Audio and Video Data:
- When using chat, question or survey features during a conversation, the text input you provide is processed to display it during the conversation and, if necessary, log it.
- To enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the conversation. You can switch off or mute the camera or microphone yourself at any time via the settings. Please note, however, that the call is then interrupted and possibly also terminated.
- Conference and call recording: Recording of the video conference using the recording capabilities of the Cisco Webex Meetings service will only take place with the consent of the participants and after prior notice. We do not know whether Cisco Systems, Inc. records the calls and, if so, how long the data is stored there. The recordings will be deleted immediately after the recording purpose stated in the consent has been achieved.
4. Processing personal data in the context of providing information
How personal data are processed depends on the form in which information is provided: printed publications, analog maps and digital spatial data, the dispatch of newsletters and information services as well as events and informational visits to the BKG.
4.1 Ordering free printed publications
If you order brochures, flyers or other printed publications from this website, we must process your personal data to carry out pre-contractual measures and the contract (providing publications) according to Article 6 (1) (b) GDPR. The following personal data are needed to process your order:
- name, first name
- street, house number
- postal code, city or town
- e-mail address (for electronic orders)
These data are processed to carry out your order. If we are unable to finalize your order, the data you provide will be shared with third parties (shipping company, other government agencies or institutions which send the ordered material). If you do not provide the necessary data, your order will not be processed.
Additional information, such as your title, telephone number, institution or company are not necessary to process your order, although they are helpful.
The data transmitted by you will be deleted after processing the order.
4.2 Ordering analog maps and printed publications
If you order analog maps and printed publications from this website, we must process your personal data to carry out pre-contractual measures and the contract (providing publications) according to Article 6 (1) (b) GDPR.
The following personal data are needed to process your order:
- title
- name, first name
- street, house number
- postal code and city or town
These data are processed within the scope of ordering analog maps by the company GeoCenter Touristik Medienservice GmbH and by the company Landkarten und Reiseführer, Frank Schühle. If the aforementioned data are not available, the order cannot be processed. The processing of the above-mentioned personal data for the ordering of printed publications takes place in the BKG.
Additional information, such as your company / institution, federal state, country, telephone number, fax and e-mail address are not necessary to process your order, although they serve the communication in the context of the order.
4.3 Ordering digital spatial data
If you order digital spatial data (spatial data and spatial data services) from this website, we must process your personal data to carry out pre-contractual measures and the contract (providing digital spatial data) according to Article 6 (1) (b) GDPR. The following personal data are needed to process your order:
- company / institution
- title
- name, first name
- street, house number
- postal code and city or town
- country
- e-mail address
- VAT ID
These data are processed within the scope of ordering. If the aforementioned data are not available, the order cannot be processed.
Additional information, such as telephone number and fax are not necessary to process your order, although they serve the communication in the context of the order.
The BKG as Central Office for Geotopography (ZSGT) licenses cross-state digital spatial data on behalf of the surveying authorities of the federal states of the Federal Republic of Germany. For this reason, the BKG is subject to an information obligation towards the federal states. The personal data are therefore also made available to the surveying authorities of the federal states of the Federal Republic of Germany for information purposes.
With the paid licensing of spatial data services, you automatically receive information by e-mail that is required for the use of the services you have purchased. The information service is shipped on the basis of a valid license agreement. A revocation during the contract period is not possible.
4.4 Newsletters
If you sign up for the e-mail newsletters of the Service Center, we will store your e-mail address on a server. Your data will be processed based on your consent pursuant to Article 6 (1) (a) GDPR. We use these data only to send the newsletters and for statistical evaluations in order to analyze system performance. We do not share your data with third parties and do not use them for any other own purposes.
If you no longer wish your data to be stored for this purpose, and thus no longer wish to subscribe to our newsletter, you may unsubscribe at any time, and the data you provided will be deleted. Please use this http://www.geodatenzentrum.de/geodaten/gdz_desktop.gdz_news_out?gdz_spr=deu&gdz_user_id= to unsubscribe. To do so, you will need the e-mail address you provided when subscribing.
4.5 Data for the dispatch of information services
If you sign up for a BKG information service in the course of using a spatial data service, we will store on a server your e-mail address and the services you have selected. Your data will be processed based on your consent pursuant to Article 6 (1) (a) GDPR. We use these data only to send the information service and for statistical evaluations in order to analyze system performance. We do not share your data with third parties and do not use them for any other own purposes.
After you sign up for an information service on our website, you will receive an e-mail with a link to click on to finalize your subscription. This double opt-in system ensures that you have consciously chosen to receive the information service.
When you register, your data are stored on our server, and an e-mail confirming registration is sent to the e-mail address you provided; this e-mail contains a link to click on to finalize registration.
Only after you click on the link to finalize registration will your data be stored for the purpose of sending you the information service as long as your subscription continues.
If you no longer wish your data to be stored for this purpose, and thus no longer wish to subscribe to the information service, you may unsubscribe at any time via dlz@bkg.bund.de, and the data you provided will be deleted. This right of withdrawal does not apply to receiving paid spatial data services. The information service is sent here on the basis of a valid license agreement.
4.6 Events and visitor groups
The BKG organizes its own events and regularly welcomes groups for an informational visit. In order to grant participants and groups access to the premises of the BKG, we must collect your first name and surname in accordance with Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG (Federal Data Protection Act) in order to fulfil our duties (public relations) within the framework of event organization and for security reasons prior to the event.
Additional information, such as the institution, type of school, class level, club or mobility limitations are optional in most cases but help in preparing the visit to the BKG. These data for the purpose of the event or the informational visit are processed based on your consent pursuant to Article 6 (1) (a) GDPR; you may withdraw this consent at any time. The lawfulness of processing on the basis of the consent provided remains unaffected until the BKG receives notification that consent has been withdrawn.
4.7 Use of web applications and web services
When using web applications and web services, the following personal data of users is processed:
- IP address and Internet service provider
- request parameters, if applicable, including map section (e.g. coordinates, resolution, etc.), addresses, etc.
- browser and operating system
- language
- the page called up
- the previously visited page (referrer URL)
- date and time of access
- user identifier (for authorization check/usage logging with regard to web applications and web services that are not freely accessible
In order to integrate external content, it is necessary to pass this information on to third parties.
The log data of web accesses for web applications/web services are stored as follows:
- 3 days for anonymous use
- 2 years for authenticated use
After the specified periods, the log data is anonymized and subsequently used for statistical evaluations to analyze system performance.
If the web applications and web services are accessed via the BKG website, No. 2 of this data protection declaration must also be taken into account.
In the case of web applications and web services that are not accessible to the public, authorization is checked and, if necessary, billing takes place. The following additional personal data is processed for this purpose:
- first name
- last name
- institution / organizational unit / domain / IP address
- time of registration
- telephone and address, if applicable
The aforementioned data is processed on the basis of Article 6(1)(b) GDPR (General Data Protection Regulation) for the purposes of authorization verification or billing and stored for the period of use.
4.8 Data preparation and data provision of geodata
Geodata regularly contain personal data. Geodata primarily represent facts that are related to spatial units - for example land or buildings. This means that there is an (indirect) personal reference in that, for example, plots of land are shown that are owned or held by natural persons who could be identified by simple searches (e.g. Google, online telephone directory). The BKG has no detailed knowledge of the identity of the individual persons concerned. In principle, there is no direct personal reference.
4.8.1 Data preparation and data provision for the needs of the federal administration
The BKG is responsible for the continuous transmission of geodata and geodata services to the federal government, granting rights of use for the performance of its mandatory tasks (statutory mandate under the Federal Geodata Act).
Data input
The digital geodata are made available to the BKG by the federal states in accordance with the "Agreement on the continuous transmission of official digital geodata of the federal states for use in the federal sector (VGeoBund)" or by third parties.
Data processing
The data is compiled into standardized national datasets in accordance with qualitative and technical specifications. Subsequent products (e.g. VG25) are derived using data from the federal states (e.g. Basis-DLM), data from third parties (e.g. zip codes) and BKG data.
The geodata is kept up to date. One or two previous data statuses are retained in order to roll back older statuses in the event of a data error. For time series analysis, also within the federal administration, historical input data as well as intermediate statuses and the presentation of results are retained. These are also used selectively for comparison with current data, e.g. in the area of services of general interest. Here, they are particularly necessary for the planning of sustainable state infrastructure measures. A review of past conditions is also helpful for this purpose.
Data provision
Data is provided via the Service Center for the following authorized users:
- federal authorities and authorized users within the meaning of § 4 V GeoBund
- authorized users in accordance with special agreements under V GeoBund
The provision of geodata (and geodetic data) is carried out by the BKG as central service provider in the geospatial sector and supports the needs of the federal administration.
Data is provided via the Service Center for the following authorized users:
- federal authorities and authorized users within the meaning of § 4 VGeoBund
- authorized users in accordance with special agreements under V GeoBund
4.8.2 Data preparation and data provision for the Central Office for Geotopography (ZSGT)
The Central Office for Geotopography (ZSGT) is commissioned by the federal states of the Federal Republic of Germany to provide the economy, science, administration and all citizens with digital, cross-state geodata of the Federal Republic of Germany. The ZSGT is operated by the Service Center of the Federal Agency for Cartography and Geodesy in Leipzig.
Data input
The digital geodata of the federal states is made available to the ZSGT by the state surveying authorities or the "Central Office for House Coordinates and Building Polygons" (ZSHH) in accordance with the "Agreement on the Cross-State Provision of Digital Geotopographic Basic Geodata" (V ZSGT).
Data processing
The data is compiled into nationally standardized datasets and processed as geodata services or applications in accordance with qualitative and technical specifications.
The geodata is kept up to date. To roll back older versions in the event of a data error, one or two previous data versions are retained.
Data provision
The provision as data, service or an application takes place via the Service Center for the following authorized users:
- state authorities and authorized users within the meaning of Section 3 V GeoLänder (state authorities, BOS institutions)
- science and universities
- everyman
The provision of geodata (and geodetic data) is undertaken by the BKG as a central service provider in the geospatial sector and supports the needs of the respective specialist authorities in the federal and state administrations. Anyone can make use of the data provision via the Service Center.
4.9 Provision of geodata on the Internet (web maps) and their internal processing
Some geodata are made available to the public by the BKG on the Internet. This usually takes the form of web maps, which can be called up in web applications and web services, for example. The BKG web maps may contain personal data of residents and property owners. Although the maps primarily depict facts relating to spatial units - for example land or buildings - there is an (indirect) personal reference, because natural persons residing or owning property at locations on the map can be identified by another person using a search (e.g. Google, online telephone directory). The BKG has no further knowledge of the identity of the individual data subjects and does not itself establish a direct personal reference - neither in the context of publication nor during internal processing.
The web maps contain topographic map bases (e.g. DTK, basemap.de, TopPlusOpen, OSM, orthophotos, satellite images, possibly enriched with e.g. address data; this list is not exhaustive) as well as specialist data. This data is merged and processed for cartographic visualizations. The web maps are kept up to date. For time series analysis, also within the federal administration, and for services of general interest, historical input data as well as interim data and the presentation of results are stored. This enables long-term observations and evaluations (e.g. with regard to climate change), which are used for decision-making by the authorities. The creation of web maps is sometimes also outsourced to service providers who process the input data according to the technical requirements. The data provided is only processed by the service providers for this defined purpose and is deleted after the results are handed over at the end of the project. For quality control purposes, interim results may be transmitted to the data owners of the geodata.
The cartographically processed data is made available to a limited group of users or to the public as a web service on the Internet. GIS, map viewers or other (web) applications integrate these web services in order to make them accessible to end users (see "No. 4g Use of web applications and web services").
The BKG's web maps serve to exploit the potential of digital geodata by linking it with current specialist data and to further develop the underlying procedures and methods. The creation of web maps is undertaken by the BKG as a central service provider in the geospatial sector and supports the needs of the respective specialist authorities in the federal administration (Section 3 (2), 3 No. 1, 5 of the Federal Geospatial Reference Data Act - BGeoRG). They are made available to the public in accordance with Section 11 (1) of the Geodata Access Act (Geodatenzugangsgesetz - GeoZG) and Section 10 of the Environmental Information Act (Umweltinformationsgesetz - UIG).
The presentation as web maps enables spatial references to be established quickly and is therefore indispensable for interpretation and decision-making. It serves to inform the authorities, those affected and / or the public about the facts presented. The web maps enable a wide range of different uses and value chains in the sectors of mobility, route planning, operational planning, urban and spatial planning, agriculture, insurance and especially in preventive disaster protection - not only in administration.
5. Data processing through film and/or photo recordings
Film and/or photo recordings are made at BKG events and BKG trade fair appearances. These files are stored on BKG servers, processed and published on the Internet on our websites and/or in the intranet as well as in print products for the purpose of external and internal public relations. The deletion period for the files is 12 months after the time of recording. At the end of the 12 months we delete them from our servers.
5.1 Social networks
The BKG is active in the social networks Twitter, YouTube and XING.
The BKG is active on the social networks Twitter, Instagram, YouTube and XING.
Please note that the BKG has no influence on the terms of use of the social networks mentioned. We expressly draw your attention to the fact that the operators of social networks permanently store data outside Germany and use them for business purposes. To what extent and for how long the data are stored is not apparent for us.
For information about which data Twitter processes and for which purposes they are used, please see Twitter’s privacy statement: https://twitter.com/de/privacy.
The Instagram Privacy Policy is available here: https://help.instagram.com/519522125107875.
For information about which data YouTube processes and for which purposes they are used, please see the privacy statement of YouTube or Google: https://policies.google.com/privacy .
Please see the privacy statement of XING here: https://privacy.xing.com/de/datenschutzerklaerung.
The BKG has no influence on the transfer of your data to third parties. We therefore recommend that you carefully check which personal data you make available to these networks. We treat your data with the utmost care, but accept no liability for the conduct of the named operators or third parties.
6. Data processing when using the guest WLAN (wireless LAN, commonly called Wi-Fi)
The following personal data, which is necessary for the provision of the service, is processed when the BKG guest WLAN is used:
- IP and MAC address
- type and version of your internet browser
- operating system used
- the page accessed
- the previously visited page (referrer URL)
- date and time of access
Processing is carried out on the basis of Article 6(1)(e) GDPR (General Data Protection Regulation) in conjunction with Section 3 of the Federal Data Protection Act (BDSG) and Section 15(1) of the Telemedia Act. In addition, the BKG is obliged to process this data in accordance with Article 6(1)(e) of the EU General Data Protection Regulation (GDPR) in conjunction with Section 5 of the BSI Act to store the data - to protect against attacks on the BKG's Internet infrastructure / federal communications technology - beyond the time of your visit. The logging data is analysed and, in the event of attacks on the communications technology, required to initiate legal and criminal prosecution.
The personal data is collected when the guest WLAN is used in order to provide the aforementioned service, to ensure the security of the service and to take appropriate legal action in the event of misuse or the commission of criminal offences.
The processed data is stored for a maximum of 7 days and then deleted. In the event of a malfunction or error, the data concerned will be stored for the required period of time in order to rectify the error or eliminate the malfunction. The storage period for all logging data is a maximum of three months. At the end of the three months, i.e. 90 days, the logging data is irrevocably deleted. Security-related events (provided they do not contain any personal information) and general events that have been demonstrably attributed to a cyber-attack can be excluded from this deletion. If laws or administrative regulations provide for longer storage periods in individual cases (e.g. Section 76 BDSG), these shall take precedence (if applicable to the logging source).
The personal data is processed automatically and is not transmitted further.
If the processing of personal data is based on your consent (Article 6(1)(a) GDPR), you can withdraw this consent at any time for the relevant purpose. The lawfulness of the processing based on your consent remains unaffected until receipt of your revocation.
7. Video surveillance
The properties of the BKG
- Richard-Strauss-Allee 11, 60598 Frankfurt am Main
- Karl-Rothe-Straße 10-14, 04105 Leipzig
- Geodätisches Observatorium Wettzell, Sackenrieder Straße 25, 93444 Bad Kötzting
are monitored with a video system in the outside area in order to maintain the domestic authority. Video data are processed in compliance with Article 6 (1) (e) GDPR in conjunction with Article 4 BDSG. Only external identification features are stored. The data collected in this way will only be transferred to third parties if we are legally obliged to do so or if the transfer is necessary for legal or criminal prosecution in cases of violations of domestic authority. Data are not transmitted in other cases.
The records are only evaluated in specific cases of suspicion. If there is no suspicious case, the records are deleted after 24 hours at the latest.
8. Your rights
You have the following rights vis-à-vis the BKG with regard to personal data concerning you:
- Right of access, Article 15 GDPR
- Right to rectification, Article 16 GDPR
- Right to rectification and erasure, Article 17 GDPR
- Right to restriction of processing, Article 18 GDPR
- Right to object to collecting, processing and/or using , Article 21 GDPR
- Right to data portability, Article 20 GDPR
- If the personal data are processed on the basis of consent (Article 6 (1) (a) GDPR), you can withdraw your consent at any time for the purpose in question. The lawfulness of processing on the basis of the consent provided remains unaffected until notification has been received that consent has been withdrawn.
- You also have the right to submit a complaint to the supervisory authority under data protection law (e.g., Federal Commissioner for Data Protection and Freedom of Information). You may also submit questions and complaints to the BKG Data Protection Officer.
Version: 02/07/2024
Service