CSR basics

Privacy Notice

With this privacy notice, the Federal Ministry of Labour and Social Affairs (BMAS), as the data controller responsible for privacy, is fulfilling its obligations to provide information set out in Articles 13, 14, 7 (3), third sentence, and Article 21 (4) of the General Data Protection Regulation (GDPR) and also the obligations arising from Section 25 (1) of the Telecommunications Telemedia Data Protection Act (TDTSG).

Data protection concerns personal data. Personal data means any information relating to an identified or identifiable natural person (the so-called “data subject”). Personal data thus includes all information which uniquely identifies a person, or makes it is possible to uniquely identify a person by combining information of one’s own and third-party information, such as a name, address, telephone number or email address. Personal data also includes information necessarily generated from the use of the website, such as the beginning time, end time and extent of use and IP address.

At the Federal Ministry of Labour and Social Affairs, personal data is processed only to the extent necessary, and it is processed primarily for the purpose of enabling the Ministry to fulfil its duties to the public and comply with legal obligations. The processing of this personal data takes place primarily on the basis of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

This privacy notice explains what personal data this concerns, for what purpose it is used and on what basis it is required and processed. It contains instructions on how to contact the responsible body and the data protection officer of the Federal Ministry of Labour and Social Affairs. In addition, this privacy notice includes information about the rights of data subjects and its aims include enabling them to make informed decisions on how their personal data is handled.

In general, please refer to the Federal Ministry of Labour and Social Affairs’ privacy notice: BMAS - Privacy Notice.

The following additional information is provided for the use of this website and special processing in connection with the subject area of Corporate Social Responsibility (CSR) in the Federal Ministry of Labour and Social Affairs.

1. Responsible data controller and data protection officer

The body responsible for the processing of personal data is:

Federal Ministry of Labour and Social Affairs
Wilhelmstrasse 49
10117 Berlin
Germany

Telephone Berlin:
+49 30 18 5270
Telephone Bonn:
+49 228 99 5270
E-Mail:
poststelle@bmas.bund.de
DE-Mail
poststelle@bmas.de-mail.de

If you have specific questions about the protection of your data, please contact the official data protection officer of the Federal Ministry of Labour and Social Affairs:

Data Protection Officer of the Federal Ministry of Labour and Social Affairs
53107 Bonn

Telephone:
+49 30 18 5270
E-Mail:
bds@bmas.bund.de

2. Data processing when visiting this website

2.1 Visiting the website

1) Purpose

Every time a user visits the website of the Federal Ministry of Labour and Social Affairs, data required to provide this service is processed. On the basis of Section 5 of the Act on the Federal Office for Information Security (Gesetz über das Bundesamt für Sicherheit in der Informationstechnik), the Federal Ministry of Labour and Social Affairs is required to store data for the purpose of protecting the Ministry’s internet infrastructure and federal communications technology from attack. This data is analysed and, in the event of attacks on communications technology, is needed to initiate legal and criminal proceedings.

2) Nature and source of the data

These are:

  • internet browser type and version
  • operating system used
  • IP address of the user
  • IP address and name of the server
  • the date and time of the server request
  • HTTP protocol and status
  • data volume transferred
  • file path

The Federal Ministry of Labour and Social Affairs obtains the personal data directly from the data subjects and their electronic devices.

3) Legal basis

This personal data is processed on the basis of Article 6 (1) (c) of the GDPR in conjunction with Section 5 of the Act on the Federal Office for Information Security.

4) Recipients

This data is also stored in log files on a server run by the web provider Digitas Pixelpark GmbH beyond the time of the visit to the website.
Data logged during access to the Federal Ministry of Labour and Social Affairs' website will only be transmitted to third parties if there is a legal obligation to do so, or if the transmission is necessary for legal or criminal prosecution in the event of an attack on the communication technology of the Federation. In other cases, no data is transmitted.

5) Duration of storage

The data is deleted as soon as the purpose of the data processing ceases to apply, unless the Federal Ministry of Labour and Social Affairs has legitimate interests under Article 17 (3) of the GDPR or retention obligations exist on IT security grounds (in which case the retention period is three months, under Section 5 (2) of the Act on the Federal Office for Information Security).

6) The obligation to provide data and the consequences of not providing data

The website cannot be used, for functional or IT security reasons, without providing the technical connection data specified above.

2.2 Session cookies

1) Purpose

Session cookies are set when you visit the website. Session cookies are small pieces of data, which a provider stores, in the temporary memory of the visitor’s device. They are functionally necessary to ensure a stable connection to the website www.csr-in-deutschland.de.

The visitor's use of the website can be tracked with the session ID.

2) Nature and source of the data

A session cookie contains a randomly generated unique identifier, known as a session ID. A cookie also includes information about its origin and the length of time for which it is saved. These cookies cannot store any other data. No personal data is collected in this context.

3) Legal basis

This is done on the basis of Section 25 (2) 2 of the Telecommunications Telemedia Data Protection Act (TTDSG)).

4) Duration of storage

The session cookies used by the Federal Ministry of Labour and Social Affairs on the CSR website are deleted when the session is ended, the browser window is closed or another page is accessed.

Note: Persistent cookies also exist, which enable visitors to be recognised even if they return to a site much later. This information is stored as a text file on the visitor’s hard drive. The Federal Ministry of Labour and Social Affairs does not use this kind of cookie on its website.

2.3 Web analysis

1) Purpose

In order to provide information geared towards demand, usage information is evaluated for statistical purposes in the framework of public relations work and to fulfil the tasks of the Federal Ministry of Labour and Social Affairs.

2) Nature and source of the data

With the web analytics service etracker, cookies are stored on the visitor's computer. If individual pages of this website are accessed, the following data is stored:

  • two bytes of the IP address of the user's system accessing the page (the last 6 characters are anonymised),
  • the web page accessed,
  • the website from which the user has reached the accessed website (referrer)
  • recognition of recurring visitors and visitor history
  • the subpages that are accessed from the accessed web page,
  • the time spent on the website and
  • the frequency with which the website is accessed.

The Federal Ministry of Labour and Social Affairs does generate personal data when the website is accessed. Rather, the IP address is immediately anonymised during this process so that persons using the website remain anonymous to the Federal Ministry of Labour and Social Affairs.

The software is set up in such a way that the IP addresses are not stored completely. Two bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the device accessing the website.

3) Legal basis

This anonymisation of personal data is based on Article 6 (1) c of the GDPR in conjunction with its Article 5 (1) c (principle of data minimisation).

The short-term collection of the IP address before anonymisation is carried out on the basis of Article 6 (1) a and Article 7 of the GDPR and otherwise in accordance with Section 25 (1) TTDSG. The decision about collecting the data is possible in advance. This is accomplished by the choices made by users at the beginning of their visit in the cookie notification. If users wish to change the choice subsequently, this can be done by clicking on the link below. The cookie dialogue will then open again and the settings can be changed accordingly.

to the Cookie-Dialogue

4) Recipients

The software runs exclusively on the service provider etracker on behalf of the Federal Ministry of Labour and Social Affairs. The usage information is only stored there. The data will not be passed on to third parties.

5) Duration of storage

The IP address of the user is immediately made anonymous during this process, so that the user remains anonymous to the Federal Ministry of Labour and Social Affairs.

6) The obligation to provide data and the consequences of not providing data

If users do no consent to the storage and analysis of this data resulting from the visit, a so-called opt-out cookie is stored in the browser, meaning that etracker does not collect any session data.

Users can decide here whether to give consent for a unique web analytics cookie to be set in their browser to enable the website’s operator to collect and analyse various types of statistical data.

If you wish to opt out, please click the following link to set the etracker opt-out cookie in your browser.

No data collection

Note: Deleting cookies will also remove the opt-out cookie and it may then need to be activated again by the user.

3. Newsletters

1) Purpose

In this context, the Federal Ministry of Labour Affairs uses personal data solely to send the Federal Government's newsletters on all CSR-related topics and for statistical analysis of the system’s performance.

2) Nature and source of the data

Anyone who wishes to sign up for one of the Federal Government's newsletters on CSR-related topics must provide their email address and specify the newsletter(s). The Federal Ministry of Labour and Social Affairs receives the personal data directly from the data subjects.

3) Legal basis

The data is processed on the basis of consent under Article 6 (1) (a) of the GDPR.

The sign-up system uses a double opt-in approach, sending an additional confirmation email containing a link for final registration, ensuring that the person signing up for the newsletter explicitly wishes to receive it.

Upon registration, the data is stored on the Federal Ministry of Labour and Social Affairs’ server and a confirmation email containing a link for final registration is sent to the email address provided. If the registration is not confirmed via the link in this email, the data is deleted after 24 hours.

Only after confirming the link in the e-mail will the data for sending the newsletter be stored for the use of the newsletter service.

4) Recipients

This personal data is stored on a Federal Ministry of Labour and Social Affairs server.

Newsletter sign-ups are managed by the service provider Digitas Pixelpark GmbH. Beyond that, the data is not transferred to third parties.

5) Duration of storage

Subscribers who no longer agree to their data being stored for this purpose, and thus no longer want to use the newsletter service of the Federal Ministry of Labour and Social Affairs, can withdraw their consent to data processing for the purpose of sending the newsletter at any time.

They will then be unsubscribed from the newsletter and the data provided deleted.

You can unsubscribe by clicking on the link for the newsletter unsubscription. You will need to provide the email address you gave when signing up for the newsletter.

6) The obligation to provide data and the consequences of not providing data

Without the e-mail address of the subscriber, delivery of the chosen newsletter is not possible.

4. Contacting us via the contact form on this website

1) Purpose

The personal data provided when an individual contacts the Federal Ministry of Labour and Social Affairs is processed for the purpose of handling, responding to and documenting the communication. The channels to contact the Federal Ministry of Labour and Social Affairs in the context of the website www.csr-in-deutschland.de are:

2) Nature and source of the data

In the context of communications submitted to the Federal Ministry of Labour and Social Affairs, the data provided – usually surname, given name, postal address, and telephone number if applicable – is processed. When individuals contact the Federal Ministry of Labour and Social Affairs, they must provide their postal address, as the Ministry is required by the Joint Rules of Procedure of the Federal Ministries (Gemeinsame Geschäftsordnung der Bundesministerien) to respond to communications from members of the public by post, and sending the reply by post is often the only way to guarantee it is confidential.

The Federal Ministry of Labour and Social Affairs usually receives the personal data directly from the data subjects when they contact the Ministry; it may also receive personal data from agencies in its area of responsibility in cases where they are involved in examining and responding to the communication.

3) Legal basis

The processing of the identification data and address data and the personal data necessary for handling the communication takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 3 of the Federal Data Protection Act. Any further information is processed on the basis of consent under Article 6 (1) (a) in conjunction with section 7 of the GDPR.

If the communication or documents contain special categories of personal data (such as data concerning health or trade union membership), this information is provided voluntarily and the Federal Ministry of Labour and Social Affairs regards the provision of this data as consent for it to be processed under Article 9 (2) (a) of the GDPR. Where the processing of this particularly sensitive data takes place on the basis of consent, the data subject’s attention is explicitly drawn to the right to withdraw consent under Article 7 (3) of the GDPR.

4) Recipients

Contacting us via the contact form

Communications sent via the contact form on the website of the Federal Ministry of Labour and Social Affairs are processed by the service provider it has commissioned, Scholz & Friends Reputation GmbH. If the concerns cannot be dealt with by the employees of Scholz & Friends Reputation GmbH, they will be forwarded to the Federal Ministry of Labour and Social Affairs.

5) Duration of storage

The data retention periods are determined in compliance with the Administrative Regulation for Payments, Bookkeeping and Accounting (VV-ZBR BHO 4.7 and no. 6 of Annex 1), the General Administrative Regulation on Physical Security issued by the Federal Ministry of the Interior (VS-Anweisung), and the guidance issued by the Federal Archives on records management regarding the setting of retention periods for the records of supreme federal authorities in accordance with Section 19 of the Directive on the Processing and Management of Records in Federal Ministries (Registraturrichtlinie).

Where the communication is received in the context of a submission from an individual, for example, the retention period is one year from the end of the calendar year in which the processing was completed; the retention period is up to 20 years in the case of technical subjects or opinions, and up to 30 years for opinions submitted in the framework of the legislative process; in each case, this period begins at the end of the calendar year in which the processing was completed.

Note: The Federal Ministry of Labour and Social Affairs may destroy documents that are not required.

6) The obligation to provide data and the consequences of not providing data

It is not possible to process and reply to the enquiry without address data and personal data relevant to the issue.