The Federal Ministry for Economic Affairs and Climate Action (BMWK) attaches great importance to the responsible handling of personal data. We want users to be aware of when which data is collected and used by the BMWK.

The BMWK, as a non-legally-capable authority of the Federal Republic of Germany, operates a website under the domain www.bmwk.de. The website is used to inform the public about the ministry's activities and to provide the public with information in an easily accessible way.

We only process personal data to the extent necessary. Which data is required and processed for which purpose and on which basis depends largely on the type of service you use and for which purpose it is required.

We have taken technical and organisational measures to ensure that both we and our external service providers comply with data protection regulations.

Personal data is processed at the BMWK in accordance with the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

1. Controller and data protection officer

Responsible for the processing of personal data is the

Federal Ministry for Economic Affairs and Climate Action
Scharnhorststr. 34-37
10115 Berlin
Postal address: 11019 Berlin
Email: info@bmwk.bund.de
Internet: www.bmwk.de
Telephone: +49 (0)30 18615 0

If you have specific questions about the protection of your data at the BMWK, please contact the data protection officer at the BMWK:

Data protection officer at the BMWK
Scharnhorststr. 34-37
10115 Berlin
Email: datenschutzbeauftragte@bmwk.bund.de

2. Data processing resulting from visits to this website

This website is maintained on behalf of the BMWK by Projektträger Jülich, Forschungszentrum Jülich GmbH and hosted on the servers of the Forschungszentrum Jülich.

Every time a website is visited, data that is necessary for providing the service is being collected and exchanged. This data includes:

• IP address
• type and version of your internet browser
• operating system used
• the page accessed
• the previously visited page (referrer URL)
• time of the server request
  
  

This data is stored in log files on an external server, at our service provider Projektträger Jülich, Forschungszentrum Jülich GmbH, beyond the time of the visit.

When using this general data and information, Projektträger Jülich, Forschungszentrum Jülich GmbH does not draw any conclusions about the data subject. Rather, this information is required to (1) deliver the content of our website correctly, (2) optimise the content of our website for you, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. These anonymously collected data and information are therefore evaluated by Projektträger Jülich, Forschungszentrum Jülich GmbH both statistically and with the aim of increasing data protection and data security, in order to ultimately ensure an optimal level of protection for the personal data processed by Projektträger Jülich, Forschungszentrum Jülich GmbH. The data in the server log files is stored separately from all personal data provided by a data subject. The legal basis for the processing is Art. 6 para. 1 lit. e GDPR in conjunction with § 3 BDSG and § 5 BSIG.

2.1 Statistics

PtJ uses the web analysis service Matomo to analyse the use of the Klimaschutzvertrage.info portal.

For the web analysis, the portal only sets cookies if you as a user explicitly agree to this. Without your explicit consent, the use of the portal is therefore analysed without cookies and to a limited extent. This web analysis without cookies corresponds to the portal's standard setting.

Web analysis without cookies

Without cookies, web analysis is carried out using random factors. These factors are automated by Matomo and newly and randomly selected every 24 hours. Random factors can include, for example, the browser and operating system used by the user and the anonymised IP address. In this case, anonymised means that two bytes of the IP address are masked (example: 192.168.xxx.xxx). The shortened IP address can no longer be assigned to the accessing computer.

The user is identified in the web analysis without cookies by the individual combination of the (non-personal) random factors. In this way, you as a user remain anonymous.

The following data is stored in the web analysis without cookies:

• anonymised IP address of the user
• date and time
• URL of the page accessed
• sub-pages that are accessed from the accessed website
• website from which the user accessed the accessed website (referrer)
• screen resolution
• time in the local time zone
• files that were clicked on and downloaded
• clicks on an external reference
• generation time of the pages
• country, region, city
• main language of the browser
• user agent of the browser
• length of stay on the website

This data allows the portal's editorial team to see, among other things, how many people have visited the website and which content is particularly relevant to users. These insights can be used to better tailor the website to the needs of users.

Web analysis with cookies

The first time you visit the portal, you will be asked whether you agree to the setting of cookies in addition to the standard analysis without cookies. These analysis and optimisation cookies are optional and are only set with your explicit consent (consent according to Art. 6 para. 1 lit. a GDPR).

If you consent to the web analysis with cookies, Matomo sets a permanent cookie (_pk_id.) and a session cookie (_pk_ses.).

The permanent cookie is used to recognise visitors to the portal even after a long time. This information is stored as a text file on your computer's hard drive. Overall, the permanent cookie is valid for 13 months. After 13 months, the cookie deletes itself.

The session cookie is a small piece of information that Matomo stores in your computer's main memory. A randomly generated, unique identification number, a so-called session ID, is stored in a session cookie. The cookie also contains information about its origin and the storage period. The software uses session cookies to enable unique identification of visitors. The session cookie is automatically deleted after 30 minutes.

In the case of web analysis with cookies, the user is therefore identified by the cookies. In this way, you as a user remain anonymous.

The cookies enable an extended web analysis for the portal: in addition to the data that is registered and stored without cookies (see above), the frequency with which a user accesses the website is now also stored.

The advanced web analysis allows the portal's editorial team to see, among other things, whether users visit the portal repeatedly (returning users) and at what intervals they return. These insights can be used to tailor the website even better to the needs of users.

If you wish to adjust an existing decision for or against cookies for web analysis (e.g. to agree to cookies after all or to revoke consent already given), you can make this adjustment in the settings. The change will then apply for your further visits to the portal.

The following applies to both types of analysis (with and without cookies):

As a user of the portal, you remain anonymous.

The analysis software runs exclusively on PtJ servers. The information on the use of the energy research portal is only stored there. The data will not be passed on to third parties.

2.2. Cookies

Please note that the providers Twitter, YouTube and Google are based in a so-called third country, in this case the USA, within the meaning of the GDPR. In its decision of 16 July 2020, Case C-311/18 (‘Schrems II’), the European Court of Justice (ECJ) declared the European Commission's adequacy decision on the EU-US data protection agreement (Privacy Shield Decision 2016/1250) invalid. It stated that the USA does not have a level of data protection that is essentially comparable to European data protection standards.

Consequently, a valid adequacy decision by the European Commission regarding the transfer of personal data to the USA within the meaning of Article 45(1) and (3) of the GDPR does not exist. Furthermore, there are no so-called appropriate safeguards within the meaning of Article 46 (2) and (3) GDPR that would enable an adequate level of protection without further measures. It cannot therefore be ruled out that a company based in the USA may grant state agencies access to the personal data being processed. Personal data could therefore be passed on to third parties under certain circumstances. It may not be possible to enforce the rights of data subjects.

Therefore, the transmission of data (IP address) in the context of the use of Twitter, YouTube or Google is only possible with your express consent in accordance with Article 49 (1) (a) of the GDPR.

3. Collection of personal data in the context of establishing contact

This website contains information that enables a quick electronic contact to us as well as direct communication with us, which also includes a general address of the so-called electronic mail (email address). If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller are stored for the purposes of processing or contacting the data subject. The legal basis for this is Art. 6 Para. 1 lit a) GDPR or Art. 6 Para. 1 lit e) GDPR in conjunction with § 3 BDSG.

The data you provide will only be stored for the purpose of processing your request and in accordance with legal and contractual requirements. If your request cannot be processed by the employees of our service provider ‘Projektträger Jülich, Forschungszentrum Jülich’, it will be forwarded to the BMWK.

The employees of the BMWK process the transmitted data only in connection with the processing of your request. In these cases, the storage of the transmitted data is governed by the retention periods for written records set out in the Registry Directive, which supplements the Joint Rules of Procedure of the Federal Ministries (GGO).

If the matter concerns or can only be answered by another service provider or aid beneficiary of the BMWK, your request and the personal data required for processing will be forwarded to them. They will only process your data to answer your request and in accordance with legal and contractual requirements.

In the aforementioned cases, the data is passed on on the basis of Article 6(1)(e) GDPR in conjunction with § 3 of the Federal Data Protection Act (BDSG) in the context of the BMWK fulfilling its tasks.

Furthermore, it may be necessary in the context of exercising technical and legal supervision to forward your existing personal data to the authorities we supervise in connection with your request. In these cases, the data is forwarded on the basis of § 25 (1) BDSG in conjunction with § 23 (1) Number 6 BDSG.

Pursuant to § 1 of the Act on the Powers of the Petitions Committee of the German Bundestag, the BMWK is obliged to provide the Petitions Committee of the German Bundestag with your personal data, if applicable, for the purpose of preparing resolutions on complaints under Article 17 of the German Basic Law.

4. Your rights

You have the following rights with respect to the data controller with regard to personal data concerning you:

• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure, Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to object to collection, processing and/or use, Art. 21 GDPR
• Right to data portability, Art. 20 GDPR
  
  

If the processing of personal data is based on your consent (Article 6 (1) (a) GDPR), you can revoke this consent at any time for the corresponding purpose. The lawfulness of the processing based on your consent remains unaffected until we receive your revocation.

You can assert the aforementioned rights at PTJ-KSV@fz-juelich.de.

You also have the right to appeal to the data protection supervisory authority (Federal Commissioner for Data Protection and Freedom of Information).

You can also contact the data protection officer of the BMWK
datenschutzbeauftragte@bmwk.de with questions and complaints.