General data protection information

1.) Responsible for processing your data:

Bamberg Citizens' Hospital Foundation

Administered by the City of Bamberg
Mayor Andreas Starke
Maximiliansplatz 3
96047 Bamberg
Tel.: +49 (0) 951 87 - 0
Fax: +49 (0) 951 87 - 1964
Email: stiftungen@stadt.bamberg.de

Responsible official data protection officer:

City of Bamberg
Department 6A
Untere Sandstraße 34
96049 Bamberg
Tel.: 0951 87-1130
Fax: 0951 87-1139
Email: datenschutz@stadt.bamberg.de
 

Your data will be processed and stored by the Bamberg Citizens' Hospital Foundation, which is administered by the City of Bamberg, for a variety of purposes. The legal basis for the processing of your data is either a specific provision in a special law or Art. 6 (1) sentence 1 letters b-f of the General Data Protection Regulation (GDPR) or Art. 4 (1) of the Bavarian Data Protection Act (BayDSG), which states that the processing of personal data by a public authority is permissible, notwithstanding other provisions, if it is necessary for the fulfillment of a task incumbent upon it. In addition, there are also cases in which we process your data on the basis of your consent (Art. 6 (1) sentence 1 letter a GDPR).

This general notice serves to inform you that you can obtain further and detailed information from the respective specialist departments that process your data.

With this general notice, we would like to draw your attention to the fact that you have the following rights:

• to be informed about the purposes of data processing and the legal basis
• to be informed of the legal basis (see Art. 6 GDPR) on which the controller bases the data processing,
• to be informed of the legitimate interest in data processing (see Art. 6 GDPR),
• to be informed of the recipients or categories of recipients to whom your data is disclosed,
• to be informed of the transfer of your data to third countries.

Furthermore, you may have the right to:

• Information (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to further processing (Art. 21 GDPR).

The data protection officer of the city of Bamberg, Mr. Bernd Bauer-Banzhaf, Untere Sandstraße 34, 96049 Bamberg, tel.: 0951 87-1130, fax: 0951 87-1139, e-mail: datenschutz@stadt.bamberg.de, will also be happy to inform you about these rights.

We are also happy to inform you about:

• the duration of the storage of your personal data,
• the revocability of consent,
• your right to lodge a complaint with the supervisory authority,
• the obligation to provide your personal data,
• the scope and impact of an automated decision or profiling measure (if such a measure is taken).

If you have any questions, please do not hesitate to contact us.
The supervisory authority responsible for us is the Bavarian State Commissioner for Data Protection. You can contact them at the following address:

Bavarian State Commissioner
for Data Protection (BayLfD)
Wagmüllerstraße 18
80538 Munich
Postal address: P.O. Box 22 12 19, 80502 Munich
Phone: 089 212672-0
Fax: 089 212672-50
Email: poststelle@datenschutz-bayern.de
Website: www.datenschutz-bayern.de

Please note that proof of identification is required for any information relating to personal data. This means that information cannot be provided over the phone or by email.

To find out more about your rights and read the individual provisions, you can find the current text of the GDPR at the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:02016R0679-20160504&from=DE

Tracking

In order to protect your privacy as far as possible, the Bürgerspitalstiftung Bamberg has decided to generally refrain from using software for the statistical evaluation of visitor access (so-called tracking software) and the cookies used in this analysis process.

2.) Information about the website

2.1) Technical implementation

The web server of the Bürgerspitalstiftung Bamberg is operated by DSCHOY GmbH. The personal data you transmit when visiting our website is therefore processed on our behalf by

DSCHOY GmbH
Augustusburger Straße 95
09126 Chemnitz
Phone: 0371 / 53984-0 | www.dschoy.de

Provision of the website / creation of log files (logging)

When you visit our website, your internet browser transmits data to our web server. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• Name of the server
• Amount of data transferred
• Abbreviated Internet Protocol address (anonymized IP address)
• Date and time of access
• Target of the request
• Status of the request
• Website from which the user accessed the server
• Access program used (client / web browser)

This data is not used for statistical purposes or passed on to third parties. It is used exclusively for administrative purposes, e.g. error analysis and prosecution in the event of misuse.

2.2) Active components

We do not use any active components such as JavaScript, Java applets, or ActiveX controls.

2.3) Use of cookies

When you access this website, only small cookie files that are technically necessary are stored on your device. These are only valid for the duration of your visit to the website (so-called “session cookies”). We use these exclusively during your visit to our website.

Most browsers are set to accept the use of our cookies. However, you can disable this function by adjusting your Internet browser settings for the current session or permanently.

Please note: If you also deactivate our technical cookies, our site may no longer function at all or at least not properly.

Your browser will automatically delete these cookies at the end of your visit.

Cookies used:

2.3.1) Necessary cookies

These technical and functional settings ensure that the website remains functional and usable with all content.

2.3.2) Personalization

These settings are used to enable website functions that allow you to use the website as conveniently as possible and in a way that is tailored to your interests.

2.3.3) Third-party integrations

We use third-party integrations on this website to improve user experience.

2.4) Integration of social plugins

Social plugins are not directly integrated into the website; there is only a link to the corresponding services (Facebook, Instagram) via the icons in the header.

When you use the respective services, you will be redirected to their pages and leave the website of the Bürgerspitalstiftung Bamberg. These services are mostly outside the scope of the GDPR and usually use a large number of cookies (including for statistics, analysis of user behavior, marketing, and advertising). Unlike under the GDPR, cookies are not used there only after you have given your consent. In addition, the US CLOUD Act requires that data be made available to government authorities.

The following social networks are used for the “Bamberger Stiftsgaten” brand:

Facebook
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
 

Instagram
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
 

2.4.1.) Purpose and legal basis

The Bamberg Citizens' Hospital Foundation operates social media accounts in order to present itself, provide information to users and interested parties, and communicate with them using modern methods.

The legal basis for the use of social media is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in effective and modern information and communication with citizens.

2.5) Integration of YouTube and Vimeo videos

Our website incorporates videos from the external video platforms Vimeo and YouTube. By default, only deactivated images from the YouTube and Vimeo channels are embedded, which do not establish an automated connection to the YouTube and Vimeo servers. This means that the operator does not receive any data from the user when the website is accessed.

With this so-called “two-click solution,” you alone decide whether the YouTube and Vimeo videos should be activated. Only when you approve the playback of the videos by clicking “OK” do you give your consent for the necessary data (including the Internet address of the current page and the user's IP address) to be transmitted to the operator.
To save the settings desired by the user, a cookie is set that stores the parameters. However, when setting these cookies, we do not store any personal data; they only contain anonymized data for customizing the browser. The videos are then active and can be played by the user. Please note that when you click on this link, the processing of your data is outside the area of responsibility of the Bürgerspitalstiftung, which is administered by the City of Bamberg, and is subject exclusively to the data protection regulations of the companies listed below:
 

2.5.1) Vimeo

Vimeo is a service provided by Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA, mailto:legal@vimeo.com, telephone: 1-212-314-7457. Vimeo is based in the USA. Vimeo offers its services worldwide and uses computer systems, servers, and databases in the USA and other countries for this purpose. If you use Vimeo's services from outside the USA, your data may be transferred to the USA and processed there. Please note that US data and privacy laws may not be as comprehensive as those in Germany or your home country. For individuals residing in the European Economic Area or the United Kingdom, Vimeo is committed to complying with the EEA's General Data Protection Regulation (GDPR). In accordance with the GDPR, the transfer of your personal data from your home country to the United States (or other countries) is permitted on the following legal bases:

• Legitimate business interests: Vimeo would not be able to provide its services or comply with its legal obligations if we did not transfer your personal data to the US.
• The use of standard contractual clauses (also known as “model clauses”) where appropriate.

You have the right to refuse unnecessary cookies (see Vimeo's cookie policy), to access, correct, delete, restrict, or object to the use of your personal data, to be forgotten, to transfer your data, and to withdraw your consent. Vimeo primarily enables the exercise of these rights through its services (which Vimeo reserves the right to change). For example, Vimeo allows its users to change their details, download their videos, and close their accounts. The provider also fulfills its obligations in response to direct requests. It endeavors to process requests within one month. Please note that Vimeo may not be able to comply with requests if they would cause Vimeo to violate a law or infringe on the rights of another person. Vimeo reserves the right to request appropriate identification. The provider processes requests free of charge, unless they would impose disproportionately high costs on it.

If you have a request, complaint, or inquiry, please contact Vimeo's Data Protection Officer. Vimeo.com, Inc., Attention: Data Protection Officer, 555 West 18th Street, New York, New York 10011, USA, privacy@vimeo.com Vimeo states that it is committed to working with you to find a fair solution to any issue. You also have the right to file a complaint with the data protection supervisory authority in your country.

Further information on the purpose and scope of data processing (including outside the European Union, in the USA and outside the USA) and information on settings options for protecting your privacy can be found in their privacy policy: https://vimeo.com/privacy

2.5.2) YouTube
YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA. Unlike under the GDPR, cookies are not only used after you have given your consent. In addition, under the US CLOUD Act, data may be disclosed to government authorities. For more information on the purpose and scope of data processing (including outside the European Union, in the US, and outside the US) and information on settings to protect your privacy, please refer to their privacy policy: https://policies.google.com/privacy?hl=de&gl=d

2.6) Evaluation of user behavior (web tracking systems; reach measurement)

We do not use programs to evaluate user behavior.

3) Information on individual processing operations

3.1) Photographs

As part of our press and public relations work, photographs are taken at events and appointments in which you may be recognizable.
We usually point this out again in the entrance area by means of notices. By participating, you consent to publication.

3.2) Form for entering a message

Our website uses contact forms that collect personal data, among other things. It is necessary for us to process the above-mentioned personal data in order for you to communicate with us. Without this information, we cannot respond to your contact request.
When you send a contact form, the following data is stored:

• Recipient's email address
• Email address provided by the sender
• Sender's IP address

The data entered in the form is therefore processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time for the future. To do so, simply send us an informal email. The legality of the data processing operations carried out until revocation remains unaffected by the revocation.
The data you enter in the form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed and archived). Mandatory legal provisions—in particular retention periods—remain unaffected. The data will not be passed on to third parties.