In order to guarantee that we and our external service providers comply with data protection provisions, we have taken the required technical and organisational measures.

We are constantly aiming to improve the service we provide to you by further developing our website and implementing new technologies. Adjustments to this privacy statement may therefore be necessary. This is why we advise you to re-read this Privacy Statement every once in a while.

Access to BAuA's website

It is generally possible to use this website without disclosing personal data. Complete IP addresses will never be stored permanently. With every access to this website, data associated with this action will be stored in a log file. This data will be stored by us for the sole purpose of providing technical security, to safeguard against and identify attacks on our web servers in particular, and for statistical purposes. During its statistical analysis, the data will be anonymised, which means it cannot be associated with you. The data will not be matched with other data bases, or transmitted to third parties, not even in part.

The following data will be saved on our servers in Germany for 14 days:

• Full IP address of the computer making the request
• Date and time of access
• Name of the accessed resource
• Page from which the file was requested
• Access status (file transmitted, file not found etc.)
• The used web browser and operating system
• Size of accessed resource

Personal data

If you send us an email or contact us via one of our contact forms, and provide us with personal or business data, this data will only be used for communication with you. It is for you to decide whether or not you wish to disclose this data to us. We shall store your information on highly protected servers in Germany. Only specially authorised personnel who are responsible for the technical, commercial or editorial operation of the servers are granted access to this data.

Your personal data will be processed for the following purposes:

On the basis of Art. 6, (1)

point (f) GDPR, we shall also use your personal data to ensure the technical functionality, security and operational capability of our IT systems.

Your rights

You have the right to information, free of charge and at any time, on the personal data concerning you that is stored and processed by us, on their origin and on their recipients, and on the purpose for which it is processed.

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

You also have the right to rectification free of any charge, to the restriction of processing and to the erasure of your personal data.

Your individual situation may also justify an objection to the processing of your personal data, an additional right of yours.

Should you have provided us with specific consent to the processing of your personal data, you may withdraw that consent at any time. An objection shall not affect the lawfulness of the processing of your data up until the time of the objection.

Should you believe that we are not processing your data in accordance with the applicable data protection provisions, you have the right to contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) at Husarenstraße 30, D-53117 Bonn.

For further questions regarding the processing of your personal data, you may send your query either directly to us or to our body's data protection officer. You will find the relevant contact details at the end of this Privacy Statement.

Disclosure of personal data to third parties

We shall not disclose personal data that is saved following access to BAuA's website to third parties unless we are required to do so by law or by a court order, or disclosure is necessary for the purposes of investigation or criminal prosecution in the event of attacks on our internet infrastructure. Data shall not be disclosed for any other non-commercial purposes or for commercial ends.

Use of cookies

Our website uses what are commonly known as cookies. Cookies do not harm your computer and do not contain viruses. They are small text files that are placed on your computer and saved by your browser. Therefore, as the user, you have full control over the use of cookies. They have the purpose of making our content more user-friendly and effective. You can delete cookies that are already saved in your browser at any time.

The following cookie is technically necessary and is automatically deleted after your visit:

• session cookie, e.g. for search and login functions

The following cookie is permanently stored and enables us to recognize your browser the next time you visit and to continuously improve your user experience on our website:

• cookie for managing the display of windows (so-called lightboxes, formerly popups) or banners

You can make further data protection settings in your browser. You can set up that you

• are informed about the setting of cookies and only allow cookies in individual cases,
• exclude the acceptance of cookies for certain cases or in general and
• activate the automatic deletion of cookies when the browser is closed.

Web Analysis with Matomo Software

On our website, we use the open source software tool Matomo (formerly PIWIK) in order to analyse the surfing behaviour of our users. Through analysing the data that we gain, we are able to compile information concerning the use of the individual components of our website. This helps us to improve our internet site and its user-friendliness on a continuous basis.

Your IP address will be shortened by two bytes immediately after processing and before it is saved and thus anonymized. No personal data is stored for web analysis. The data collected by Matomo is never transferred to other servers or passed on to third parties.

Protection of minors

Without the consent of their parents or legal guardians, persons of less than 18 years of age should not provide us with their personal data. We do not request personal data of children or adolescents. We do not intentionally collect such data and do not disclose them to third parties.

Links to other providers' websites

Our website contains links to websites of other providers. We have no influence on whether or not these operators comply with European or national data protection provisions.

Controllers as specified in Art. 4 (7) of the EU General Data Protection Regulation

Federal Institute for Occupational Safety and Health
Friedrich-Henkel-Weg 1-25
D-44149 Dortmund
Email: info-zentrum@baua.bund.de

Contact details of the authority's data protection officer

Mathias Thielen
Federal Institute for Occupational Safety and Health
Friedrich-Henkel-Weg 1-25
D-44149 Dortmund
Email: bds@baua.bund.de