Privacy policy

Responsible handling of personal data is a high priority for the Federal Ministry for Economic Affairs and Energy (BMWE). We want users to know which data is collected and used by the BMWE and when.

As an authority of the Federal Republic of Germany without legal capacity, the BMWE operates a website under the domain www.bmwk.de on which it informs the public about its activities and provides low-threshold information to the public.

We only process personal data to the extent necessary. Which data is required and processed for what purpose and on what basis depends largely on the type of service you use, or depends on the purpose for which it is required.

We have taken technical and organizational measures to ensure that both we and our external service providers comply with data protection regulations.

The processing of personal data in the BMWE is carried out in accordance with the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

1. basics

1.1 Controller and data protection officer

Responsible for the processing of personal data is the

Federal Ministry for Economic Affairs and Energy
Scharnhorststr. 34-37
10115 Berlin
Postal address: 11019 Berlin
E-Mail: info@bmwk.bund.de
Internet: www.bmwk.de
Phone: +49 (0)30 18615 0

If you have specific questions about the protection of your data at the BMWE, please contact the data protection officer at the BMWE:

Data protection officer at the BMWE
Scharnhorststr. 34-37
10115 Berlin
E-Mail: datenschutzbeauftragte@bmwk.bund.de

1.2 Personal data

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

1.3 Protection of minors

Persons under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians.

However, if persons under the age of 16 contact the BMWE by e-mail, contact form, letter or similar, points 3.1, 3.3, 3.4, 3.5 to 3.8 apply. If the data is required to visit the BMWE, points 3.4 and 3.10 apply.

1.4 Legal basis for the processing of personal data

The BMWE processes personal data in the performance of its duties in the public interest. The public tasks of the BMWE include, in particular, public relations work and, among other things, the provision of information to the public on this website. The legal basis for processing here is Art. 6 para. 1 lit. e GDPR in conjunction with the corresponding national or European task standard, or in conjunction with Section 3 BDSG. The same applies to applications in the context of which the BMWE processes personal data for the purpose of processing applications (e.g. applications for funding or for access to information under the Federal Freedom of Information Act, the Environmental Information Act or under press law). Insofar as the processing of personal data should be necessary in individual cases to fulfill a legal obligation, Art. 6 para. 1 lit. c GDPR in conjunction with the corresponding legal provision from which the legal obligation arises also serves as the legal basis.

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR also serves as the legal basis in individual cases. This also applies to processing operations that are necessary to carry out pre-contractual measures. As a contracting party under civil law, the BMWE is particularly active in the area of recruitment and procurement.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

1.5 Processing of personal data from the business division

To the Business division of the BMWE: Federal Cartel Office, Federal Network Agency, Federal Office of Economics and Export Control, Federal Institute for Materials Research and Testing, Physikalisch-Technische Bundesanstalt and Federal Institute for Geosciences and Natural Resources. As part of the technical supervision of these authorities, the BMWE may process personal data transmitted.

2. data processing in connection with the visit to this website

2.1 Data collection

Every time a user accesses our website and every time a file is retrieved, data about this process is temporarily processed in a log file. In detail, the following data is stored for each access/retrieval:

• Date and time of access (time stamp), as well as the IP address of the accessing device or server,
• Request details and destination address (protocol version, HTTP method, referrer, user agent string),
• Name of the retrieved file and transferred data volume (requested URL including query string, size in bytes), as well as a
• Message indicating whether the request was successful (HTTP status code).

On the basis of Article 6(1)(e) GDPR in conjunction with Section 5 BSI Act, we are obliged to store this data beyond the time of your visit to protect against attacks on the BMWE's internet infrastructure and the federal government's communications technology. This data is analyzed and required to initiate legal and criminal prosecution in the event of attacks on the communication technology. The data is deleted as soon as it is no longer required for the fulfillment of tasks.

Data logged when accessing the BMWE website will only be passed on to third parties if we are legally obliged to do so or if disclosure is necessary for legal or criminal prosecution in the event of attacks on the Federal Government's communications technology. Data will not be passed on in other cases. The BMWE does not merge this data with other data sources.

2.2 Session cookies

Session cookies are used on the pages of our order service for brochures and for the display of banners, which are valid for the duration of the visit to the website. This is necessary for the function of the shopping cart and the display of banners for technical reasons. This is done on the basis of Art. 6 para. 1 lit. e GDPR in conjunction with § 3 BDSG in the context of public relations work for the demand-oriented provision of information on the tasks assigned to the BMWE, or in the case of orders for the purpose of contract fulfillment on the basis of Art. 6 para. 1 lit. b GDPR.

Session cookies are small units of information that a provider stores in the working memory of the visitor's computer or comparable end device. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. Such a cookie also contains information about its origin and the storage period. These cookies cannot store any other data. With the help of the session ID, the orders you have placed in your shopping cart can be assigned to your end device.

The session cookies used are deleted when you end the session. If you close the browser window or open another page, your shopping cart will be reset. The contents of the shopping cart collected up to that point must be recompiled if you end the session but have not completed the order process.

You can use any internet browser to see when cookies are set and what they contain. Detailed information can be found on the websites of the Federal Commissioner for Data Protection and Freedom of Information and the Federal Office for Information Security.

There are also persistent cookies to recognize visitors even after a long time. We do not use such cookies on our website.

Most browsers are preset to accept cookies automatically. However, you can deactivate the storage of cookies or set the browser so that cookies are only stored for the duration of the respective connection to the Internet.

2.3 Web analysis

You can decide at any time whether, in addition to technically necessary cookies, you allow us to collect statistical information using the etracker service. The pseudonymized evaluations of this software help us to improve our websites. You can revoke your consent at any time and also stop an ongoing statistical analysis by clicking on the slider in the top right-hand corner of the main bar of the window. You can reactivate tracking by clicking it again.

How does etracker work? A script on our website triggers an http request that automatically forwards your IP address and the so-called user agent to etracker GmbH. Here, your IP address is first shortened automatically. The software then pseudonymizes the transmitted data for the sole purpose of being able to determine multiple uses in the session. After 7 days, any assignment to the session is deleted and your statistical data is completely anonymized. etracker is a German company and processes your data exclusively on our behalf on protected servers. It is not transmitted to other third parties. The legal basis is your consent in accordance with Section 25 (1) TTDSG in conjunction with Article 6 (1) (a) GDPR and Section 3 (1) EGovG. We have ensured that you can revoke your consent at any time without adverse consequences and would like to give you full control over tracking on our website.

Opt-out completed; your visits to this website will not be recorded by the web analysis tool. Please note that the Matomo deactivation cookie on this website will also be deleted if you remove the cookies stored in your browser. In addition, if you use a different computer or web browser, you will have to complete the deactivation procedure again.

You have the option of preventing the actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

Your visit to this website is currently recorded by Matomo web analytics. Uncheck this box to opt-out. Your visit to this website is currently not recorded by Matomo Web Analytics. Activate this checkbox for opt-in.

The tracking opt-out function requires cookies to be activated.

3. processing of personal data in the context of establishing contact

The processing of personal data depends on the method of contact. A distinction can be made between contact by e-mail, contact form, letter or telephone (hotline).

3.1 Contacting the BMWE by e-mail

Contact with the BMWE by e-mail is also possible via this central e-mail address in addition to the employees' personal business e-mail addresses and various functional mailboxes: info@bmwk.bund.de. The IP address of the sender is recorded. The date and time of your request are also transmitted to us. The personal data sent to this central address and stored in the organizational unit responsible for central message distribution will be forwarded to the responsible organizational units of the BMWE and deleted after one year. Please refer to 3.3 and 3.4 for information on contacting the Citizens' Dialogue team and the Visitor Service.

The organizational units store the data you send (for example: surname, first name, address), but at least the e-mail address, as well as the information contained in the e-mail (including any personal data you may have sent yourself) for the purpose of contacting you and processing your request. This is done in accordance with the deadlines for the storage of documents set out in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO). We would like to point out that this data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG. The processing of the data you provide is necessary for the purpose of processing your request.

The IP address is used exclusively in the context of state law enforcement and security measures in compliance with the legal requirements.

3.2 E-mail addresses without BMWE reference

The BMWE website also provides third-party e-mail addresses for specialist topics. These addresses do not contain "bmwk.bund.de" after the @. If you use one of these addresses to contact us, the BMWE is not responsible for processing your personal data. If you have any questions regarding the handling of your personal data by this third party, please contact them accordingly.

3.3 Contact via the contact form of the Citizens' Dialogue Team

They can be downloaded from the BMWE website using the Forms Contact the Citizens' Dialogue team of the BMWE. Providing your address is optional and enables us to process your request by post if you expressly wish. The IP address of the sender is recorded. This also takes place when sending a conventional e-mail to the address buergerdialog@bmwk.bund.de. The date and time of your request are also transmitted to us.

By activating the checkbox and submitting the contact form, you consent to the transmission and storage of your personal data and IP address in accordance with Art. 6 para. 1 lit. a GDPR. The purpose of processing and storing personal data is to respond to your inquiry. The IP address is used exclusively in the context of state law enforcement and security measures in compliance with the legal requirements.

When using the contact form of the Citizens' Dialogue team, the content of the data fields is transmitted exclusively to the Citizens' Dialogue team of the BMWE.

The content of the Citizens' Dialogue team's contact form is transmitted via an encrypted https connection.

If we receive a message via the Team Bürgerdialog contact form, we assume that we are authorized to reply by e-mail. Otherwise, you must expressly inform us of another form of communication.

Processing is carried out centrally by the staff of the Citizens' Dialogue team. The specialist units of the BMWE provide support with processing as required. The Citizens' Dialogue stores the data you send (e.g. surname, first name, address, etc.) and the information contained in the e-mail (including any personal data you may have provided) for the purpose of contacting you and processing your request, in accordance with the time limits applicable to the storage of documents in the Registry guidelinethat the Joint Rules of Procedure of the Federal Ministries (GGO) supplemented. We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG. Processing of the personal data transmitted by you is necessary for the purpose of processing your request.

If you have agreed in the contact form that your inquiry - if necessary - can also be forwarded to other state and federal authorities to answer your inquiry, this forwarding will take place in compliance with data protection regulations.

If you do not agree with the processing of your data, you can cancel the contact process at any time before sending. Your data will then not be stored. Consent can be revoked at any time. The legality of the processing based on your consent remains unaffected until receipt of your revocation.

3.4 Contacting us via the visitor service contact form

The BMWE regularly receives groups for an information visit. As far as you Contact form of the visitor service For communication purposes, it is necessary to provide a form of address, your surname and first name, your e-mail address, telephone number, preferred date and number of participants. Without this data, your request sent via the contact form cannot be processed. The IP address of the sender is recorded. This also takes place when sending a conventional e-mail to the addresses buergerdialog@bmwk.bund.de and besucherservice@bmwk.bund.de. The date and time of your request are also transmitted to us.

By activating the checkbox and submitting the contact form, you consent to the transmission and storage of your personal data and IP address in accordance with Art. 6 para. 1 lit. a GDPR. The purpose of processing and storing personal data is to respond to your inquiry. The IP address is used exclusively in the context of state law enforcement and security measures in compliance with the legal requirements.

When using the visitor service contact form, the content of the data fields will be transmitted exclusively to the Citizens' Dialogue Department of the BMWE. In addition, by submitting the request, you agree that your request may be passed on to third parties, in particular to the security control center at the BMWE, if and insofar as this is necessary for processing your request.

The content of the BMWE contact forms is transmitted via an encrypted https connection.

If we receive a message from you via the visitor service contact form or a corresponding e-mail, we assume that we are entitled to reply by e-mail. Otherwise, you must expressly inform us of another form of communication.

Your request, which you have communicated to us via the contact form, will be processed by the visitor service staff.

Due to its tasks and functions, the Federal Ministry for Economic Affairs and Energy is generally exposed to a high level of abstract threat according to the security authorities. There is therefore a correspondingly high need for protection for all persons who are present in the Ministry. In order to be able to grant you access to the BMWE premises, the BMWE must collect the first and last names and dates of birth of the participants in advance of the appointment for security reasons. Further data, such as institution, type of school, class level, club or mobility restrictions, are optional and serve to better prepare the visit to the BMWE. The surname, first name and date of birth of visitors are stored in an IT-supported system for business process reasons and checked on site by means of ID checks.

The BMWE visitor service will store the data you provide for the purpose of contacting you and processing your request, in accordance with the time limits applicable to the storage of written material in the Registry guidelinethat the Joint Rules of Procedure of the Federal Ministries (GGO) supplemented.
We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG. Processing of the personal data transmitted by you is necessary for the purpose of processing your request.

If you do not agree with the processing of your data, you can cancel the contact process at any time before sending. Your data will then not be stored. Consent can be revoked at any time. The legality of the processing based on your consent remains unaffected until receipt of your revocation.

3.5 Contact by letter

If you write a letter to the BMWE, the data you provide (for example: surname, first name, address) and the information contained in the letter (any personal data you may have provided) will be processed.
for the purpose of contacting you and processing your request. This is done in accordance with the time limits applicable to the storage of documents in the Registry guidelinethat the Joint Rules of Procedure of the Federal Ministries (GGO) supplemented.
We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG. Processing of the personal data transmitted by you is necessary for the purpose of processing your request.

3.6 Contact by fax

If you send a fax to the BMWE, the data transmitted by you (for example: surname, first name, address) and the information contained in the fax (any personal data transmitted by you) will be stored for the purpose of contacting you and processing your request, in accordance with the time limits applicable to the storage of written documents of the Registry guidelinethat the Joint Rules of Procedure of the Federal Ministries (GGO) supplemented.
We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG. Processing of the personal data transmitted by you is necessary for the purpose of processing your request.

3.7 Contact by telephone

If you contact an employee by telephone, your personal data will be processed to the extent necessary to process your request. We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG.

3.8 Contacting the Citizens' Dialogue Unit

If you contact the Citizens' Dialogue team via the telephone number 030-18615-0 or 030-18615 6187, the Citizens' Dialogue team will record your surname, first name if applicable, telephone number and the day of the call. The postal address and e-mail address are only recorded if they are necessary for further communication and processing of the request.

The data you provide will be stored for the purpose of contacting you and processing your request. This is done in accordance with the time limits applicable to the storage of documents in the Registry guidelinethat the Joint Rules of Procedure of the Federal Ministries (GGO) supplemented. We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG.

3.9 Passing on concerns if the BMWE is not responsible

If the Federal Ministry for Economic Affairs and Energy is not responsible for your request, it may be passed on to other state and federal authorities without consent, subject to data protection, if it can be assumed that the transfer for the purpose of responding to the request is in the interest of the person concerned and no sensitive personal data is involved (Article 6(1)(e) GDPR in conjunction with Section 3 BDSG, Section 25(1) in conjunction with Section 23(1)(1) BDSG).

3.10 Other visitors

The BMWE receives individuals on an ad hoc basis. In order to be able to grant them access to the BMWE premises, the BMWE must collect the first and last names and dates of birth of the participants in advance of the appointment for security reasons in order to fulfill its tasks (public relations or specialist work) in accordance with Article 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG.

Further data, such as institution, type of school, grade level, club or mobility restrictions are optional and serve to better prepare the visit to the BMWE. The processing of this data for the purpose of the specialist or information visit is based on your consent in accordance with Article 6(1)(a) GDPR. You can withdraw this consent at any time. The lawfulness of the processing based on your consent remains unaffected until receipt of your revocation.

Due to its tasks and functions, the Federal Ministry for Economic Affairs and Energy is generally exposed to a high level of abstract threat according to the security authorities. There is therefore a correspondingly high need for protection for all persons visiting the Ministry. The surname, first name and date of birth of visitors are stored in an IT-supported system for business process reasons and checked on site by means of ID checks.

By providing personal data, visitors consent to the processing for the above-mentioned purpose.

The personal data provided by visitors to the BMWE and stored in the IT-supported system (surname, first name, date of birth) will be deleted after one year, as will any additional data provided by them.

4. processing of personal data in the context of the use of social networks

As part of its press and public relations work, the BMWE has its own accounts on the social networks Facebook, YouTube, X (formerly Twitter), Instagram, LinkedIn, Threads and Mastodon. The BMWE also runs campaigns on TiKTok to provide information on its topics.

The data processing associated with the social media platforms enables a direct and rapid exchange with users. By commenting on and sharing posts, users can participate directly in the public, democratic discourse on the Federal Government's policies. The BMWE restricts the use of its accounts - also to protect personal data - to content relating to the BMWE's press and public relations work. Administrative services or communication beyond the aforementioned purpose of use are not offered, processed or answered via these services.

Please do not actively share any personal data via our social media channels, e.g. in posts, comments or retweets, and always use our direct communication channels to contact us. All interactions with the social media accounts (sharing, retweeting, liking, commenting on or quoting posts) are displayed publicly. This applies both to actions by third parties in relation to posts by BMWE accounts and to actions by BMWE accounts in relation to posts by third parties.

Further information on social networks and how you can protect your data can be found on the websites of the Federal Office for Information Security (BSI).

4.1 Technical information: Forwarding via hyperlinks

From our website, you can access the networks mentioned via icons behind which there are so-called hyperlinks. A hyperlink activated by clicking on it opens the external destination in a new window of your browser. No data is transferred to third parties before this activation.

4.2 General note: Responsible use of social networks

We expressly draw your attention to the fact that these services store their users' data (e.g. personal information, IP address, etc.) in accordance with their own data usage guidelines and - with the exception of Mastodon - also use it for business purposes. The BMWE has no influence on the collection of data and its further use by the social networks. For example, there is no reliable information about the extent to which, where and for how long the data is stored, the extent to which the respective networks comply with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on.

We would like to point out that the vast majority of the platforms mentioned carry out their data processing worldwide and in particular in the USA. This so-called third country transfer outside the EU entails risks with regard to the possible assertion of your data protection rights. Please do not contact us via social networks if you wish to avoid this. You use these services and their functions on your own responsibility. This applies in particular to the public use of interactive functions (e.g. commenting, sharing, rating) of the US platforms.

4.3 Our activities in social networks

In order to perform editorial tasks in social networks, in particular the live management of comments and inquiries, the BMWE necessarily processes data of the persons who interact with the Ministry there. Publicly accessible data such as profile and account name, profile picture, content of the request, number of followers and profiles followed by the profile, as well as the latest posts can be viewed by BMWE employees.

We would like to point out that the data is processed on the basis of Article 6(1)(e) GDPR in conjunction with Section 3 BDSG. Processing of the personal data transmitted by you is necessary for the purpose of processing your communication.

In the following, we would like to inform you about the social networks we use.

4.4 Facebook

The BMWE operates a Facebook fan page and uses the services of Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5 Ireland.

When you visit our fan page website, Facebook collects your IP address and other information that can be read with the help of cookies without any action on our part. These cookies are stored by Facebook in the memory of your end device, or they are already there if you have not deleted them beforehand. Facebook provides information about the use of cookies in its Cookie policy.

The data collected about you in this context is processed by Facebook and may be transferred to countries outside the European Union. The data transfer to the USA is based on the standard contractual clauses of the EU Commission, see the 'META EU-Data Transfer Addendum' and the 'META Standard ClausesThe company behind Facebook, Meta, is certified in accordance with the "EU–US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards.

Facebook describes what information Facebook receives and how it is used in its data usage policy at this link. There you will also find information on how to contact Facebook and the settings options for advertisements.

We would like to point out that Facebook, or Meta, is able to track your user behavior (for registered users across devices) beyond the service on other websites by means of the cookies used. This applies both to those registered with Facebook and to those not registered there. If you want to avoid this, proceed as follows: Log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device, close your browser and restart it. This will delete Facebook information that can be used to directly identify you. This allows you to use the Facebook fan page without revealing your Facebook ID.

According to its own information, Facebook stores data until it is no longer needed to provide the services and Facebook products or until the user's account is deleted. This depends on the circumstances of the individual case, in particular the type of data, why it is collected and processed and the relevant legal or operational storage requirements. You can also find more information on the storage of data at: https://de-de.facebook.com/about/privacy

As the operator of the fan page, the BMWE only receives anonymized and summarized statistical information about the use of its Facebook page.

4.5 YouTube

To distribute its video content, the BMWE operates an account on the video portal "YouTube" operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our presence on YouTube, Google processes your personal data and places cookies on your device. You can find more information on this here. At this address, Google also informs you that the company transfers its data to the parent company Google Inc. based in the USA, to other Google companies and to external partners of Google, each of which may be located outside the European Union. Google is certified with the "EU-US Data Privacy Framework" (DPF).

If you are logged in to Google at the same time, the information stored there will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. You can find more information about the data protection settings on YouTube here.

4.6 X (formerly Twitter)

The BMWE uses the technical platform and services of Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland for the short message service X offered here.

The data collected about you when you use the service is processed by Twitter Inc. and may be transferred to countries outside the European Union. This includes your IP address, the application you are using, information about the device you are using (including device ID and application ID), information about websites you have visited, your location and your mobile phone provider. This data is assigned to the data of your existing Twitter account or your Twitter profile. You can prevent this by logging out of your member account before visiting our website.

We have no influence on the type and scope of the data processed by Twitter, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by Twitter and for what purposes it is used can be found in X's privacy policy. Here you have the opportunity to view the personal data collected by X and to make settings regarding the use of your data. In addition, on mobile devices (smartphones, tablets) you can restrict Twitter's access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used. Further information on these points is available on the following Twitter support page.

You also have the option of requesting information via the Twitter data protection form or the archive requests.

4.7 Instagram

Instagram is an online service for sharing photos and videos that belongs to the Meta Group, formerly Facebook. The BMWE uses the technical platform and services of Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5 Ireland.

When you visit this Instagram page, Instagram collects, among other things, your IP address and other information that can be read with the help of cookies without any action on our part. These cookies are stored by Instagram in the memory of your end device, or they are already there if you have not deleted them beforehand. Instagram provides information about the use of cookies in its Cookie policy. We would like to point out that Meta is able to track your user behavior (across devices for registered users) beyond the Instagram service on other websites by means of the cookies used. This applies both to those registered with the Instagram service and to those not registered there.

The data collected about you in this context is processed by Facebook Ltd. or Meta and may be transferred to countries outside the European Union. The company behind Facebook, Meta, is certified in accordance with the "EU–US Data Privacy Framework" (DPF). What information the company receives and how it is used is described by the provider in its Privacy policy. There you will also find information about contact options and the settings options for advertisements.

Meta states that it stores data until it is no longer needed to provide the Services and Meta Products or until the User's account is deleted, whichever comes first. This depends on the circumstances of the individual case, in particular the type of data, why it is collected and processed and the relevant legal or operational storage requirements. You can find more information on the storage of data here.

In its so-called Page Insights, Meta processes a range of personal data of page visitors for its own purposes. The processing takes place regardless of whether page visitors are logged in to Instagram or not and whether page visitors are members of the Instagram network. Users who access the Instagram pages without being registered or logged in to Instagram also have the option of influencing the scope of data processing by means of a cookie banner set by Facebook. More information on this here.

Site operators such as the BMWE themselves have no access to the personal data that is processed in this context, but only to the summarized page insights. This is anonymized statistical information about the use of the Instagram page. You can find more information here.

4.8 LinkedIn

On the LinkedIn platform of the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"), the BMWE operates a company page in joint responsibility with LinkedIn, on which we provide information about the BMWE.

As the provider of an online presence on the LinkedIn social media platform, we process personal data when you write to us directly via the platform (in a personal message or via the public comment function). Which data is collected depends on the information you provide and the contact details you provide or share. If possible, please refrain from sending personal data when using LinkedIn.

LinkedIn also collects information via cookies and similar technologies (e.g. web beacons, pixels, ad tags and device identifiers) that enable LinkedIn to recognize users and comprehensively analyze user behavior. LinkedIn provides us with corresponding information to analyze user behavior on our online presence in anonymized form. This enables us to statistically evaluate the use of our LinkedIn page and thus to manage our activities in a targeted manner.

The operator of the social media platform can also use the data collected in this way to create user profiles. This enables them to display interest-based advertising to the user within and outside the respective social media presence. If you are logged into your social media account when you visit our LinkedIn page, LinkedIn can also assign this visit to your account. The processing of personal data collected by us via the platform is based on Art. 6 para. 1 lit. e GDPR. If you are asked by LinkedIn for consent to the data processing described above, the legal basis for this processing is Art. 6 para. 1 lit. a; Art. 7 GDPR.

We have concluded an agreement with LinkedIn in accordance with Art. 26 GDPR, in which the data protection obligations arising from the operation of our company page are divided between us and LinkedIn. LinkedIn has assumed a large part of the data protection obligations, such as the fulfillment of the rights of data subjects pursuant to Art. 12 et seq. GDPR, the obligation to provide suitable technical and organizational measures to protect the security of personal data and the reporting and notification obligations in the event of a data breach. If you contact us regarding your rights as a data subject, we will forward your request to LinkedIn immediately.

Further information on the agreement between us and LinkedIn can be found at: https://www.linkedin.com/help/linkedin/answer/124838?lang=de and https://legal.linkedin.com/pages-joint-controller-addendum

4.9 Threads

The BMWE uses the technical platform and services of Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5 Ireland for the Threads short message service offered here. Threads is closely linked to Instagram, and shares with this platform the Cookie policy and the Privacy policy. The Meta Group behind Threads is certified in accordance with the "EU–US Data Privacy Framework" (DPF).

We have no influence on the type and scope of the data processed by Threads, or the disclosure of this data by Threads to third parties. In its "Supplementary privacy policy", the operator describes which profile and activity data is collected from registered or non-registered users and their end devices, and how it is linked with each other. You can only avoid cross-platform profiling by Meta by logging out of each Meta product before using it and deleting the respective cookies from your end device.

How long and on what grounds Threads stores personal data is consistent with Meta's and Instagram's Privacy policy match. As there, the BMWE only receives anonymized statistical information about the use of its Threads page.

4.10 Mastodon

For its Mastodon account, the BMWE uses the Mastodon instance of the Federal Commissioner for Data Protection and Freedom of Information. Their privacy policy, information and rules of conduct for the use of the Mastodon instance can be found here: https://social.bund.de/terms.

An encrypted connection to the web server on which the instance is operated is established when the website is accessed, registered or used. In order to display the content correctly on your device, the following data is processed in accordance with the HTTP and TCP/IP protocol:

• the IP address of your Internet connection,
• the operating system and operating system version of your end device, the display resolution of your device,
• the Internet browser and browser version you are using and
• the time you accessed the website.

This is necessary for access, processing, display and control. After each page visit, some of the data is stored in log files and processed for the purposes of server maintenance and security. The IP address is deleted after 14 days at the latest.

The Mastodon instance of the BfDI collects the IP address from which you access the instance. All logged-in sessions are available for your review and revocation in the settings.

The Mastodon instance of the BfDI uses cookies for its functionality. These are text files that allow users to be recognized. This makes it possible, for example, for registered users to navigate to different subpages of the instance without having to log in again each time. None of the cookies used serve to analyze and/or track the usage behavior of the data subjects. All cookies used are exclusively so-called session cookies that are deleted at the latest when the browser is closed.

4.11 TikTok

The BMWE uses the services of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, for its public relations work. The platform's privacy policy can be found here.

TikTok collects a range of technical data (IP address, Mac address, operating system, system language, keystroke patterns, etc.), your location and, depending on your settings, information about your apps and chats, creates pseudonymous user IDs and analyzes your usage data extensively in order to create a profile of you. According to its own policy, the provider obtains most of this information via cookies. The platform links this data with data from third-party sources and makes it available to numerous third parties for commercial purposes.

We have no influence on the type and scope of the data processed and forwarded by TikTok. The platform stores this data on servers distributed around the world. According to its own privacy policy, TikTok stores your data for at least as long as you have an account on the platform. We do not know when the company actually deletes your data.

5. processing of personal data through the use of our audiovisual offers

5.1 Information about our video offerings

As part of its public relations work, the BMWE also presents its work on this website in the form of videos. These are provided by the German provider TV1. They are displayed in your browser using the JW Player, a cloud-based application. The company behind the JW-Player is based in the United States.

According to the General Data Protection Regulation (GDPR), we require your consent to the transmission of your IP address and other data to TV1 and the JW Player in order to be able to show you our video offer. According to the Act on Data Protection and Privacy in Telecommunications and Telemedia (TTDSG), we need your consent to allow the JW Player to store a cookie on your device.

You can give us your consent via the window that appears when you click on it. Alternatively, we offer you a slider at the top right to give or withdraw your consent at any time. Your consent to the use of both services serves as the legal basis for their provision in accordance with Article 6(1)(a) GDPR.

Data processing by TV1 GmbH

We have commissioned TV1 GmbH, Beta-Straße 9a, 85774 Unterföhring, Germany, to host our videos. When you start a video playback, the following of your data is automatically transferred to TV1's ISO2007-certified servers located in Germany:

• Your IP address;
• Your access and usage data.

The purpose of this data collection is solely to provide, manage and deliver our videos to you. Third parties do not gain any knowledge of your data. Unless there are special legal reasons to the contrary, the log files are deleted after 30 days.

Data processing by the JW Player

To play our videos, we have integrated the JW Player as a plugin on our website. The operator of this service is LongTail Ad Solutions, Inc, 530 7th Avenue, Ste. 1906, New York, NY 10018, United States.

Subject to your consent, the JW Player transmits the following data to its US servers:

• Your IP address;
• Mainly technical data (browser type and version, operating system, hardware type, pseudonymized device ID, IP address of the hardware, diagnostic data);
• Data on usage behavior (date and time of access, identification of the video accessed, duration of use of each video, your interactions with the plugin), collected through tracking technologies such as pixel tags, web beacons and scripts;
• other aggregated information.

JW Player generates and stores pseudonymous IDs on its servers in order to identify and link the JW Player plug-in used, end users and individual sessions.

JW Player stores a pseudonymous ID in a cookie on your device to identify the JW Player plugin you are using. Cookies remain on your device until you delete them. After the end of the session, you always have the option of managing cookies in your browser according to your wishes. For example, if you do not want the JW Player to be able to analyze the information of its cookies concerning you beyond the session, you can delete or deactivate cookies in your browser settings at any time. Please note that various functions may no longer be fully available after deactivating/deleting cookies.

The purpose of this data processing is to deliver the video to you without disruption. In addition, the provider would like to improve its products and be able to provide statistics to business customers.

If you as a European or as a person located in Europe have activated the "Do not track" function in your browser, the JW Player promises not to create a pseudonymous ID and not to be able to identify you through it.

We have no influence on data processing by the JW Player. Please inform yourself here about the company's data protection.

5.2 Information on our press conferences

For live broadcasts of our press conferences, the BMWE uses the video platform Vimeo, a company from the United States.

In accordance with Article 6(1)(a) GDPR, we require your consent to the transmission of your IP address to Vimeo in order to enable you to broadcast our press conferences.

If you activate the live transmission by Vimeo by clicking, you will first be asked for your consent to the data transmission. You can give your consent by clicking in the corresponding box. The transmission will then start. You can revoke your consent at any time using a slider; the transmission will then be stopped automatically.

Data collection by Vimeo

The Vimeo platform is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011. Subject to your consent, the following data will be transmitted to Vimeo servers in the USA when you access a live stream

• Your IP address;
• Your access and usage data.

At the same time, Vimeo places one or more technically necessary cookies on your end device. The cookies remain on your device until you delete them. You can use the cookie management function of your internet browser to do this. Please note that various functions may no longer be available to their full extent after deactivating/deleting cookies.

We have activated the "Do Not Track" function at Vimeo on our website. According to Vimeo, this means that Vimeo does not store any information about visitors to this website before they watch the live broadcast.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

We have no influence on data processing by Vimeo. Please inform yourself on the Vimeo website about the data protection of the company behind it.

5.3 Information about our podcasts

As part of its public relations work, the BMWE offers you audio contributions on our topics on individual subpages. These so-called podcasts are available on various platforms.

We provide this service via external links to the providers Spotify, Apple Podcast, Google Podcast, Deezer and Podigee.

External links are marked with this symbol:

After activating such a link, a window opens in which you can access your preferred website in a new tab of your browser. This activation immediately transfers data to the providers. In particular, this includes your IP address, the time of activation and other technical data that is only partially personal. This transfer is technically necessary.

The Ministry is not responsible for the data processing of these providers. In particular, we have no influence on when connection and usage data is deleted. We would like to point out that these websites have their own privacy policies. Please use the following links to find out about the data protection provisions of the respective providers.

Spotify:
https://www.spotify.com/de/privacy and
https://www.spotify.com/de/legal/privacy-policy/

Apple Podcast:
https://www.apple.com/de/privacy/ and
https://www.apple.com/de/legal/privacy/

Google Podcast:
https://policies.google.com/privacy?hl=de

Deezer:
https://www.deezer.com/legal/personal-datas

Podigee:
https://www.podigee.com/de/ueber-uns/datenschutz

We would like to point out that it is very likely that each of these providers processes your data in third countries. If you do not want this, please do not click on the links.

6. processing of personal data in the context of providing information

The processing of personal data depends on the type of information provided. Here we distinguish between the provision of our newsletter or printed material and information visits to the BMWE.

6.1 Data for sending the newsletter

If you subscribe to one of the BMWE's newsletter distribution lists, your e-mail address, the date and time of registration and the type of newsletter you have selected will be stored by us on a server. The data is processed on the basis of your consent in accordance with Article 6(1)(a) GDPR (consent). We use this data exclusively for sending the newsletter and for statistical evaluations to analyze system performance. We do not pass on your data to third parties who do not act exclusively for these purposes on our behalf, nor do we use it for any other purposes of our own.

The registration system with an additional confirmation message containing a link to the final registration (double opt-in) ensures that you explicitly wish to receive the newsletter.

When you register, your data will be stored on our server and a confirmation message with a link to the final registration will be generated and sent to the e-mail address provided. If you do not confirm the registration by clicking on the link in this e-mail, the data will be deleted after 48 hours.

Only when you confirm the link in the e-mail will your data for sending the newsletter be stored for the duration of your use of our newsletter service.

If you no longer agree to the storage of your data for this purpose and therefore no longer wish to use our services, you can unsubscribe from our newsletter at any time. The data you provide will be deleted unless there is an obligation to store it for a longer period. Please follow this link to unsubscribe. To do this, you will need the e-mail address you provided when you registered.

6.2 Ordering printed products

If you order brochures, leaflets and other printed products via this website, it is necessary to process your personal data to carry out pre-contractual measures and to fulfill the contract (provision of the products) in accordance with Article 6 (1) (b) GDPR.

The following personal data must be provided in order to process the order:

• Name
• Street, house number
• Zip code and city
• e-mail

This data is processed as part of the order. If the order cannot be finally processed by us, the data provided by you will be passed on to third parties (shipping company, possibly other authorities or institutions, if these send the ordered material). If the aforementioned data is not available, the order cannot be processed. The additional information, such as title, first name, company and country are not required for processing, but serve to improve the processing of the order.

The data transmitted by you will be anonymized 90 days after the order has been completed.

7. processing of personal data in the context of an application procedure

The BMWE is responsible for processing your personal data as part of the application process. In order to be able to make selection decisions in the application process, the BMWE collects information from applicants about themselves, their professional background, their education, their professional and personal qualifications and, if applicable, information about a severe disability or equality.

The certificates, CVs, cover letters and other documents to be submitted by you as part of the application process (usually via Interamt) contain personal data within the meaning of Art. 4 No. 1 GDPR. This personal data is processed by us exclusively and only to the extent necessary for the purpose of establishing an employment relationship (Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 and 3 BDSG).

Within the BMWE, only those employees who are entrusted with carrying out the selection procedure will have access to your personal data. The interest groups (Staff Council, Equal Opportunities Officer and Representative Body for Severely Disabled Employees) receive the data so that they can fulfill their duties in accordance with the BPersVG, the BGleiG or the SGB IX. The budget and organization departments are also involved in filling positions in the senior civil service. Your personal data will not be disclosed to persons or bodies outside the BMWE. Furthermore, no data will be transferred to a country outside the European Union.

We do not use any automated decision-making procedures as part of the application process. If the application process leads to your recruitment, your documents will become part of your personnel file insofar as they are necessary for the performance of the employment relationship. Transmitted data that is not required for the employment relationship will be deleted five months after completion of the application process. If no employment relationship is established with you, the data you have submitted will also be deleted five months after the application process has been completed. Your application documents sent by post will be returned to you.

If you withdraw your application, we will delete your data immediately and return your documents to you.

If we process your personal data, you have the following rights vis-à-vis the BMWE: right of access, right to rectification, right to restriction of processing, right to erasure, right to lodge a complaint with a supervisory authority.

8. processing of personal data in the context of telephone and video conferences via Cisco WebEx Cloud

Telephone and video conferences are regularly held by the BMWE via the Cisco WebEx Cloud service over the Internet.

With this service, the transmission is temporarily stored by the service provider for technical reasons. At the end of the meeting, an automatic deletion takes place, unless the meeting organizer has previously activated a recording. The BMWE generally does not use this function in the default settings and announces a recording in advance in individual cases.

Data provided by you in advance (e.g. telephone number, e-mail address) will be processed and stored for the purpose of inviting you to the telephone or video conference and for the traceability of the administrative process. We would like to point out that personal data is processed on the basis of Article 6 (1) (e) GDPR in conjunction with Section 3 BDSG. There is a corresponding order processing agreement with the service provider Cisco in accordance with Art. 28 GDPR. Further information on the handling of personal data there can be found in the Privacy policy of the processor Cisco for the WebEx cloud take.

9. video surveillance

The properties of the BMWE are monitored by a video surveillance system to safeguard domiciliary rights and for the purposes of averting danger and prosecution in the outdoor area. The video surveillance system is in operation 24/7. Recording only takes place in the event of an alarm, without sound. Video data is only stored temporarily on data storage devices located centrally in the secure area. Processing is carried out on the basis of Article 6(1)(e) GDPR in conjunction with Section 4 BDSG.

Each video file is split and distributed across several hard disks. These files can only be merged again using special algorithms in the higher-level video management system. The intermediate storage of the video data is seven days. The recording time (date and time) can be recognized in the video sequence. They are stored accordingly.

If there is an initial suspicion (e.g. burglary), authorized persons can prevent overwriting. The data is exported by specially authorized persons in accordance with the dual control principle. The collected data is only transferred to criminal investigation authorities if this is requested as part of a justified police measure or by court order for the above-mentioned purposes. The transfer is documented. As a rule, data is transferred to the investigating authority to the Berlin or North Rhine-Westphalia state police on the basis of Section 32 BPOLG in conjunction with Section 33 (II) BPOLG. Data is not forwarded in other cases or automatically compared with other police information sources.

Right of access: Any person who claims to have been within a monitored area for a certain period of time may request access to the recording in accordance with Art. 15 GDPR, provided it is still available (observe the deletion cycle). To do so, they can contact the BMWE via the above-mentioned channels.

10. event registration via the event form

Which data is requested as part of an event registration depends on the respective date. When using the registration form, the content of the data fields is transmitted to the BMWE. The IP address of the sender is not recorded.

If you register for an event via our event form, your personal data will be collected, stored, processed and deleted by the BMWE no later than 30 days after your visit in order to organize the event in question and for the purpose of averting danger. Should an incident make it necessary, the data may also be stored for longer and, if necessary, forwarded to investigating authorities. You declare your consent to this by sending the registration form.

The applicant assures that he/she has informed the persons named under "Other participants" that their personal data will be collected, stored, processed and deleted by the BMWE no later than 30 days after the visit for the purpose of organizing the above-mentioned event and for the purpose of averting danger. The person(s) named has/have given their consent to the applicant.

The data collected as part of an event registration will be collected and processed for the organization and implementation of the event. We would like to point out that the processing of the data transmitted with the form and the content (which may also contain personal data transmitted by you) is carried out on the basis of Article 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG for the purpose of processing your request.

Accreditation is processed by the responsible employees of the BMWE. The BMWE stores your data to process your request and in accordance with legal and contractual requirements. The data will be deleted no later than 30 days after the end of the event. The content of the BMWE accreditation form is transmitted via an encrypted https connection.

11. press accreditation

The data collected as part of a press accreditation is collected and processed for the accreditation procedure. Which data is requested as part of an accreditation depends on the respective event. When using the registration form, the content of the data fields is transmitted to the BMWE. The IP address of the sender is not recorded.

We would like to point out that the processing of the data transmitted with the form and the content (which may also contain personal data transmitted by you) is carried out on the basis of Article 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG for the purpose of processing your request.

Accreditation is processed by the staff of the BMWE Press Office. The Press Office stores your data in order to process your request and in accordance with legal and contractual requirements.

As part of the accreditation procedure, the data is sent to the Federal Criminal Police Office (BKA) for the purpose of checking security-relevant circumstances. After the review, the BKA deletes the data transmitted to it if it sees no further cause for action. If the applicant does not consent to this processing of their data, accreditation cannot be granted.

The content of the BMWE accreditation form is transmitted via an encrypted https connection. The Federal Ministry for Economic Affairs and Energy collects, stores and uses your personal data (name, contact details) on the basis of Article 6(1)(e) in conjunction with Section 3 BDSG in order to send press releases to representatives of the press for editorial use or for their information and to invite them to press events organized by the Ministry.

12. your rights

You have the following rights vis-à-vis the BMWE with regard to your personal data:

• Right of access, Art. 15 GDPR The right of access gives the data subject comprehensive insight into the data concerning them and some other important criteria, such as the purposes of processing or the duration of storage. The exceptions to this right set out in Section 34 BDSG apply.
• Right to rectification, Art. 16 GDPR The right to rectification includes the possibility for the data subject to have inaccurate personal data concerning them corrected.
• Right to erasure, Art. 17 GDPR The right to erasure includes the possibility for the data subject to have data erased by the controller. However, this is only possible if the personal data in question is no longer necessary, is being processed unlawfully or consent has been withdrawn. The exceptions to this right set out in Section 35 BDSG apply.
• Right to restriction of processing, Art. 18 GDPR The right to restriction of processing includes the possibility for the data subject to prevent further processing of the personal data concerning them for the time being. A restriction occurs above all in the examination phase of other rights exercised by the data subject.
• Right to object to the collection, processing and/or use, Art. 21 GDPR The right to object includes the possibility for data subjects to object to the further processing of their personal data in a particular situation, insofar as this is justified by the performance of public tasks or public and private interests. The exceptions to this right set out in Section 36 BDSG apply.
• Right to data portability, Art. 20 GDPR The right to data portability includes the possibility for the data subject to receive the personal data concerning him/her from the controller in a commonly used, machine-readable format in order to have it forwarded to another controller if necessary. According to Art. 20 para. 3 sentence 2 GDPR, however, this right is not available if the data processing serves the performance of public tasks.
• Right to withdraw consent, Art. 13 and 14 GDPR If personal data is processed on the basis of consent, the data subject can withdraw this consent at any time for the relevant purpose with effect for the future. The lawfulness of the processing based on the consent given remains unaffected until receipt of the revocation.

You can assert the aforementioned rights in writing using the contact details provided in section 1.1.

In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the data protection supervisory authority, the Federal Commissioner for Data Protection and Freedom of Information, to.

You can also contact the data protection officer at the BMWE named in section 1.1 with questions and complaints.