Data privacy policy

Data privacy policy for the website thelä On this page you will find all relevant information under Articles 13 and 14 of the General Data Protection Regulation.

General notices

The Department of State Marketing in the State Ministry (Office of the Premier) of Baden-Württemberg takes the protection of your personal data very seriously. For this reason, we have taken measures to ensure that the regulations on data protection are observed both by us and by our external service providers.

1. Who is responsible for processing your personal data?

The controller pursuant of data processing is the State Ministry of Baden-Württemberg.

State Ministry of Baden-Württemberg
Department of State Marketing
Richard-Wagner-Straße 15
70184 Stuttgart

E-Mail: [email protected]

2. Contact for data protection

You can reach our data protection officers at the State Ministry at:

State Ministry of Baden-Württemberg
Richard-Wagner-Straße 15
70184 Stuttgart

E-Mail: [email protected]

5. Who gets your data and why?

a) Vimeo without tracking (Do-Not-Track)

This website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages displaying a Vimeo video, a connection is created to Vimeo servers in the USA. The Vimeo server is thus notified about which of our pages you have visited. Vimeo also obtains your IP address. However, we have set Vimeo so that Vimeo will not track your user activity.

We use Vimeo in the interest of providing an interesting online website presentation. This is a legitimate interest within the meaning of Article 6(1) sentence 1 f) GDPR.

You can find further information on the handling of user data in the privacy policy of Vimeo at:

b) Social wall | Flockler

We use an API from Flockler to display publicly shared social media posts with the hashtag #theländ. Flockler is a social media aggregator tool to curate social media feeds and showcase social media content that we believe is relevant and inspiring to you. Flockler does not place cookies and does not store any information about your visit. However, depending on the platform, social media services may store information about you if you choose to interact with the content (e.g. play a video or visit our social media profile page). By clicking on a post, you will be redirected to the respective social media channel of the post. On these pages, the corresponding privacy policy of the social media service applies. Currently, we only include content from Instagram that has been publicly posted in a user’s feed under #theländ. In the Instagram privacy policy you will find detailed information on this.

c) Hosting

We host our website with the provider Platform SH, GmbH, Marienstr. 90, 50825 Cologne, Germany, with whom we have concluded a commissioned data processing agreement. In addition, we use the headless content management system of the provider Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria. In particular, the images contained in our website are hosted and provided via the systems of this provider. In the process, your IP address is transmitted to Storyblok and stored there for up to seven days.

d) Cloudflare

We use the service "Cloudflare". The provider is Cloudflare Inc, 101 Townsend St, San Francisco, CA 94107, USA (hereinafter "Cloudflare").

Cloudflare offers a globally distributed content delivery network with DNS. This technically routes the transfer of information between your browser and our website through Cloudflare's network. This enables Cloudflare to analyze traffic between your browser and our website and to serve as a filter between our servers and potentially malicious traffic from the Internet. In doing so, Cloudflare may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described herein.

The use of Cloudflare is based on our legitimate interest in providing our website in as error-free and secure a way as possible Art. 6 para. 1 lit. f DSGVO). The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here.

More information about security and data protection at Cloudflare can be found here.

We have entered into a data processing agreement (AVV) with the provider mentioned above. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.

6. What rights do you have?

a) Right of cancellation

Insofar as we process your data on the basis of your consent pursuant to Article 6 (1) sentence 1 a) GDPR, you may revoke your consent at any time with future effect. Withdrawal of consent does not affect the lawfulness of any processing based on consent before its withdrawal. For the revocation, an informal message to us using the contact data mentioned under section 1 or 2 suffices

b) Right of objection

You may object to the processing of your personal data insofar as it is based on Article 6 (1) sentence 1 f) GDPR (“legitimate interests”) (Article 21 GDPR). Your personal data will no longer be processed unless there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal rights/claims. To exercise the right of objection, it is sufficient to send a short message to the contact details provided under section 1 or 2.

c) Rights of data subjects

In addition, you may – if the applicable legal requirements are met and subject to any restrictions pursuant to sections 9, 10 of the Data Protection Act of the State of Baden-Württemberg (LDSG BW) – make use of the following rights, which you can exercise by contacting us at any time using the data specified in sections 1 and 2:

  • Right of access pursuant to Article 15 GDPR: You have the right to obtain information about your personal data processed by us (the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and the intended effects of such processing concerning you, as well as your right to be informed about the guarantees existing pursuant to Article 46 of the GDPR if your data is transferred to third countries) and to a copy of the data;

  • Right of rectification pursuant to Article 16 GDPR: You have the right to have any incorrect data relating to you corrected without delay and/or to have any incomplete data stored by us completed;

  • Right to erasure pursuant to Article 17 GDPR: You have the right to demand the erasure of your personal data if the requirements of Article 17 (1) GDPR are met. However, this right shall particularly not exist if processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal rights/claims;

  • Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you dispute is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal rights/claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection on the grounds of your particular situation as long as it has not yet been determined whether our legitimate grounds outweigh your interests;

  • Right to be informed pursuant to Article 19 GDPR: If you have exercised your right of any rectification or erasure of personal data or restriction of processing vis-a-vis the controller, the controller is required to communicate any rectification, erasure or restriction of processing of personal data to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to obtain information about those recipients;

  • Right to data transferability pursuant to Article 20 GDPR: You have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to require its transmission to another controller as long as this is technically feasible.

d) Right of appeal

If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to appeal to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, in accordance with Article 77 of the GDPR, without prejudice to any other administrative or judicial remedy. The supervisory authority with jurisdiction over us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

7. Data security

We apply organisational, contractual – for example, with hosting providers – and technical security measures in accordance with the latest technological standards to ensure that the provisions of the data protection laws are complied with and to thereby protect the data processed by us from accidental or intentional manipulation, loss, destruction or from access by unauthorised persons.

The security measures include in particular the encrypted transmission of data between your browser and our server.