Data privacy policy

Data privacy policy for the website theländ.de. On this page you will find all relevant information under Articles 13 and 14 of the General Data Protection Regulation.

General notices

The Department of State Marketing in the State Ministry (Office of the Premier) of Baden-Württemberg takes the protection of your personal data very seriously. For this reason, we have taken measures to ensure that the regulations on data protection are observed both by us and by our external service providers.

1. Who is responsible for processing your personal data?

The controller pursuant of data processing is the State Ministry of Baden-Württemberg.

State Ministry of Baden-Württemberg
Department of State Marketing
Richard-Wagner-Straße 15
70184 Stuttgart

E-Mail: kontakt@thelaend.de

2. Contact for data protection

You can reach our data protection officers at the State Ministry at:

State Ministry of Baden-Württemberg
Richard-Wagner-Straße 15
70184 Stuttgart

E-Mail: datenschutz@stm.bwl.de

5. Who gets your data and why?

a) Vimeo without tracking (Do-Not-Track)

This website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages displaying a Vimeo video, a connection is created to Vimeo servers in the USA. The Vimeo server is thus notified about which of our pages you have visited. Vimeo also obtains your IP address. However, we have set Vimeo so that Vimeo will not track your user activity.

We use Vimeo in the interest of providing an interesting online website presentation. This is a legitimate interest within the meaning of Article 6(1) sentence 1 f) GDPR.

You can find further information on the handling of user data in the privacy policy of Vimeo at: https://vimeo.com/privacy

b) Social wall | Flockler

We use an API from Flockler to display publicly shared social media posts with the hashtag #theländ. Flockler is a social media aggregator tool to curate social media feeds and showcase social media content that we believe is relevant and inspiring to you. Flockler does not place cookies and does not store any information about your visit. However, depending on the platform, social media services may store information about you if you choose to interact with the content (e.g. play a video or visit our social media profile page). By clicking on a post, you will be redirected to the respective social media channel of the post. On these pages, the corresponding privacy policy of the social media service applies. Currently, we only include content from Instagram that has been publicly posted in a user’s feed under #theländ. In the Instagram privacy policy you will find detailed information on this.

c) Hosting

We host our website www.thelaend.de with the provider Platform SH, Platform.sh GmbH, Marienstr. 90, 50825 Cologne, Germany, with whom we have concluded a commissioned data processing agreement. In addition, we use the headless content management system of the provider Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria. In particular, the images contained in our website are hosted and provided via the systems of this provider. In the process, your IP address is transmitted to Storyblok and stored there for up to seven days.

d) Myra Security

We use the service "Myra Security". The provider is Myra Security GmbH, Landsberger Straße 187, 80687 Munich (hereinafter "Myra").

Myra offers a globally distributed content delivery network with DNS. This technically routes the transfer of information between your browser and our website through Myra's network. This enables Myra to analyze traffic between your browser and our website and to serve as a filter between our servers and potentially malicious traffic from the Internet. In doing so, Myra may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described here (attack prevention and not for marketing purposes). Since the service is necessary for the technical security of the website, the legal basis is our legitimate interest pursuant to Art. 6 (1) f DSGVO. We have concluded an order processing contract with Myra pursuant to Art. 28 DSGVO. The use of Myra is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f DSGVO).

You can find more information about security and data protection at Myra here.

e) cidaas

This website uses the cidaas identity and access management software. The provider is Widas ID GmbH, Maybachstraße 2, 71299 Wimsheim. The service is hosted exclusively in Germany on the provider’s servers. We have concluded a data processing contract with the provider.

The software enables you to voluntarily register in our B2B section, which involves the provision of personal data. The personal data transferred to us can be found in the registration data entry mask (generally salutation, first name, surname, email address, company name, company address). The personal data that you enter are collected and stored for internal use and for our own purposes only. We may transfer your data to one or multiple processors, such as delivery service providers, e.g. if you order “Part of THE LÄND” stickers.

Your registration with voluntary provision of personal data serves the purpose of offering content and services to you which, by nature, can only be offered to registered users. Registered users can change the personal data provided or request the erasure of their personal data from our database at any time.

cidaas also collects data which are not personal data, such as your IP address and cookies, when you login to our B2B platform. However, these data are only retained until the end of the browser session. When the browser is closed, they are erased.

You can find further information about security and data privacy at cidaas here.

f) Wonderlandmovies

This website uses Wonderlandmovies personalised video software. The provider is Wonderlandmovies GmbH, Große Hamburger Straße 28, 10115 Berlin. We have concluded a data processing contract with the provider.

When users create video clips in the B2B section Wonderlandmovies does not receive any of their personal data. The video clip creation process necessitates the processing of usage data (selection of static content, personalised free text and uploaded files). The video clip is generated immediately on the basis of these data and the transferred data are erased from the database. The video clips are stored on the servers for six months, then automatically and irrevocably erased.

The service is hosted exclusively in Germany on the servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen.

You can find further information about data privacy at Wonderlandmovies here

6. What rights do you have?

a) Right of cancellation

Insofar as we process your data on the basis of your consent pursuant to Article 6 (1) sentence 1 a) GDPR, you may revoke your consent at any time with future effect. Withdrawal of consent does not affect the lawfulness of any processing based on consent before its withdrawal. For the revocation, an informal message to us using the contact data mentioned under section 1 or 2 suffices

b) Right of objection

You may object to the processing of your personal data insofar as it is based on Article 6 (1) sentence 1 f) GDPR (“legitimate interests”) (Article 21 GDPR). Your personal data will no longer be processed unless there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal rights/claims. To exercise the right of objection, it is sufficient to send a short message to the contact details provided under section 1 or 2.

c) Rights of data subjects

In addition, you may – if the applicable legal requirements are met and subject to any restrictions pursuant to sections 9, 10 of the Data Protection Act of the State of Baden-Württemberg (LDSG BW) – make use of the following rights, which you can exercise by contacting us at any time using the data specified in sections 1 and 2:

  • Right of access pursuant to Article 15 GDPR: You have the right to obtain information about your personal data processed by us (the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and the intended effects of such processing concerning you, as well as your right to be informed about the guarantees existing pursuant to Article 46 of the GDPR if your data is transferred to third countries) and to a copy of the data;

  • Right of rectification pursuant to Article 16 GDPR: You have the right to have any incorrect data relating to you corrected without delay and/or to have any incomplete data stored by us completed;

  • Right to erasure pursuant to Article 17 GDPR: You have the right to demand the erasure of your personal data if the requirements of Article 17 (1) GDPR are met. However, this right shall particularly not exist if processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal rights/claims;

  • Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you dispute is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal rights/claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection on the grounds of your particular situation as long as it has not yet been determined whether our legitimate grounds outweigh your interests;

  • Right to be informed pursuant to Article 19 GDPR: If you have exercised your right of any rectification or erasure of personal data or restriction of processing vis-a-vis the controller, the controller is required to communicate any rectification, erasure or restriction of processing of personal data to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to obtain information about those recipients;

  • Right to data transferability pursuant to Article 20 GDPR: You have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to require its transmission to another controller as long as this is technically feasible.

d) Right of appeal

If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to appeal to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, in accordance with Article 77 of the GDPR, without prejudice to any other administrative or judicial remedy. The supervisory authority with jurisdiction over us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

7. Data security

We apply organisational, contractual – for example, with hosting providers – and technical security measures in accordance with the latest technological standards to ensure that the provisions of the data protection laws are complied with and to thereby protect the data processed by us from accidental or intentional manipulation, loss, destruction or from access by unauthorised persons.

The security measures include in particular the encrypted transmission of data between your browser and our server.