The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is generally the department or specialist office of the City of Wiesbaden acting in the individual case. You will find the relevant contact details in letters or orders that you receive from us, in application forms, in email signatures, in software programs through which we communicate with you (e.g. digital mailbox, appointment booking portals, bidder cockpit in award procedures), on wiesbaden.de and in many other places as well as in special data protection information.

If you cannot find a specific contact person for your request, you can contact the city administration switchboard on 0611 310. The citizens' department is also available as a central point of contact on 0611 313301 and buergerreferatwiesbadende.

You can contact the municipal data protection officer with any data protection concerns. You can reach him as follows:

The data protection officer of the state capital Wiesbaden
Wilhelmstraße 32
65183 Wiesbaden
Telephone: 0611 313083
E-mail: datenschutzwiesbadende

We process your data to fulfill our legal and voluntary tasks. In individual cases, the purposes of processing depend on your relationship with us.

Examples:

If you apply to us for an administrative permit, a social benefit or a grant, we process your data as part of the administrative procedure following the application in order to decide on the application and to be able to grant approved benefits.

If you book an appointment online, we process this data in order to allocate an appointment to you.

If we contact you with an order, decision, notification or warning, we will process your data to carry out the administrative procedure on which the decision is based and, if necessary, in enforcement proceedings.

If you contact the fire department control center with an emergency call or if an emergency call concerning you is received there, we process your data in particular for the preparation, execution and follow-up of rescue operations.
If you have a contractual relationship with us, we process your data for the performance of the contract.

If you are an employee of the state capital of Wiesbaden, we process data for the purpose of implementing, terminating or handling the employment relationship and for the implementation of internal planning, organizational, social and personnel measures

Please note that the above list is only exemplary and not exhaustive. The State Capital of Wiesbaden has numerous other mandatory or voluntary tasks for the fulfillment of which we may process your data. The specific processing purposes can be found in the more specific data protection information of the municipal offices, which you will receive when your personal data is collected (e.g. in application forms or when using certain software).

We base the data processing - depending on the legal relationship you have with us - on the following legal bases:

• Art. 6 para. 1 subpara. 1 a) GDPR, insofar as the processing is based on your voluntary consent;
• Art. 6 para. 1 subpara. 1 b) GDPR, insofar as the processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request;
• Art. 6 para. 1 subpara. 1 c) GDPR in conjunction with a provision of Community or national law, insofar as the processing is necessary for compliance with a legal obligation;
• Art. 6 para. 1 subpara. 1 d) GDPR, insofar as the processing is necessary to protect your vital interests or the vital interests of another person;
• Art. 6 para. 1 subpara. 1 e GDPR in conjunction with a legal basis under Community or national law, if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. The majority of our data processing is carried out on this legal basis.

We also process specially protected data as part of the fulfillment of our tasks. In addition to social data, this also includes tax data and data in accordance with Art. 9 GDPR. For example, we process health data in the area of the public health department or data on ethnic origin in the Office for Immigration and Integration.

We process specially protected data in accordance with Art. 9 GDPR on the basis of Art. 9 para. 2 GDPR in conjunction with a legal basis from EU or national law that permits processing or on the basis of your voluntary consent.

We also process personal data outside the scope of the GDPR. This is particularly the case in the context of administrative offense proceedings. In these cases, too, we process data on the basis of a legal basis from EU or national law that permits this.

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. However, data may be stored beyond this in the event of an (impending) legal dispute with you or other legal proceedings or if storage is provided for by regulations to which we as the controller are subject. In practice, there are regular retention periods, so that storage beyond the original storage purpose is the rule.

The data is blocked or deleted after the expiry of existing retention periods, unless further storage by us is necessary and there is a legal basis for this. After expiry of storage periods, documents may be handed over to the Wiesbaden City Archive in accordance with archive law.

Depending on the legal relationship you have with us, we may pass on data within the state capital of Wiesbaden or to third parties.

Possible data recipients include, among others:

• Offices, departments and in-house operations of the state capital Wiesbaden
• the Wiesbaden City Archive
• Municipal companies
• Service providers and other agents of the City of Wiesbaden
• Processors pursuant to Art. 28 GDPR
• Lawyers, tax consultants, auditors
• Doctors and physicians
• Other authorities, such as other municipalities, the regional councils, ministries or the Hessian Commissioner for Data Protection and Freedom of Information
• Law enforcement authorities
• Courts and public procurement tribunals
• Health insurance companies and other social service providers
• Private individuals and private companies of all kinds
• Political parties and elected representatives
• Associations and initiatives

Please note that your data will not always be passed on. Whether this happens and to what extent depends on the individual case. Further details can be found in the more specific data protection information from the municipal offices, which you will receive when your personal data is collected (for example in application forms or when using certain software).

Data will only be passed on if there is a legal basis for doing so.

In most cases, your data will be processed in Germany. Data transfers to EU countries or other third countries are possible. Data will only be transferred to third countries or international organizations if this is permitted under data protection regulations (in particular Art. 44 GDPR).

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

You can request information about your personal data processed by us in accordance with Art. 15 GDPR. In your request for information, you should specify your request in order to make it easier for us to compile the necessary data. Please note that your right to information is restricted by the provisions of Sections 24 (2), 25 (2), 26 (2) and 33 HDSIG.

If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

You can request the erasure of your personal data under the conditions of Art. 17 GDPR and Section 34 HDSIG. Your right to erasure depends, among other things, on whether the data concerning you is still required by us to fulfill our legal duties.

Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.

In accordance with Art. 21 GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation. However, we cannot always comply with this, e.g. if a legal provision obliges us to process data within the meaning of Section 35 HDSIG as part of our official duties.

If the data processing is based on your consent (Art. 6 para. 1 subpara. 1 a GDPR, Art. 9 para. 2 a GDPR), you have the right to revoke this consent at any time for the future. Please note that the revocation does not affect the legality of the data processing carried out on the basis of the consent until the revocation, so this does not subsequently become unlawful as a result of the revocation.

If you are of the opinion that we have not complied with data protection regulations when processing your data, you can lodge a complaint with the data protection supervisory authority in accordance with Art. 77 GDPR.

The data protection supervisory authority responsible for us is
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Telephone: 0611 14080
E-mail: poststelledatenschutz.hessende