Privacy policy for the discovery system of the Lower Saxonian Ministry of Food, Agriculture, and Customer Protection

Privacy policy for the discovery system of the Lower Saxonian Ministry of Food, Agriculture, and Customer Protection

General

This privacy policy concerns Lukida, the discovery system of the library of the Lower Saxonian Ministry of Food, Agriculture, and Customer Protection (hereinafter: ML) (i.e. https://bibml-nds.gbv.de).

In case of in Lukida listed external websites (e.g., DBIS, EZB, interlibrary loan) as well as links to electronic resources on websites of external publishers the privacy policies of the responsible publishers apply.

Name and address of the responsible

With regard to the General Data Protection Regulation and other national data protection laws of member states as well as other data protection regulation the following party is responsible:

Lower Saxonian Ministry of Food, Agriculture, and Customer Protection
Calenberger Straße 2
30169 Hannover
Germany

poststelle@ml.niedersachsen.de

Name and address of the data privacy official

Data privacy official
Calenberger Straße 2
30169 Hannover

datenschutz@ml.niedersachsen.de

Amount of processed personal data

Personal data of users is generally only processed if it is necessary for supplying a functioning website as well as our contents and services.

Personal data is only processed anonymously or at the device of the user.

Legal basis for data processing

The legal basis for temporary storage of data during anonymous usage and saving of log files is Art. 6 paragraph 1 lit. f GDPR (processing for purposes of legitimate interests of the controller or a third party).

Deletion of data and duration of storage

Personal data of the data subject will be deleted or locked when the reason for saving does not apply anymore.

Stored information

The Head Office of the Common Library Network collects and saves information in their log files automatically, which your browser transfers when calling Lukida, in context of an agreement about a request of processing of personal data according to 28 EU-GDPR. This information consists of:

· Type / version of browser

· used operating system

· website from which the access occurs (referrer)

· Hostname of the requesting computer (IP-address)

· date and time of the server request

· name and URL of retrieved data

· transferred data volume

· message if the access was successful (http-status code)

These data are not relatable to specific persons. They are used for analysis of system security and system stability, reconnaissance of misuse and warranty of a comfortable usage of our website. There is no combination of these data with other data sources; additionally, these data are deleted regularly after statistical review. No forwarding to third parties occurs.

Encryption

Because of safety reasons tis website uses SSL-encryption to protect all transferred data.

You can recognise an encrypted connection by the lock symbol and the text “https://” in the URL row.

Usage of cookies

Cookies are small text files which are created by the webserver and then are sent to your browser and saved there. Cookies improve functionality and comfort for you.

During the usage of our websites a session-cookie is created. It contains setting (e.g., language or layout setting) or saved titles on the reminder list and will be deleted, if the browser is closed. Alternatively, users can delete these cookies themselves by using their browser.

Contact by e-mail

The imprint of Lukida lists e-mail-addresses for contact. If used, the personal data transferred by the e-mail of the user is stored.

No forwarding of the data to third parties occurs in this context. Processing of personal data only serves for handling the approach.

Data will be deleted if they are not necessary to achieve the goal of their collection anymore. For personal data sent by e-mail, this is the case if the specific conservation with the user is finished. A conversation is finished if it is obvious from the circumstances that the specific topic is resolved finally.

Rights of the affected person

Right for information:
Responsible people have to give information about collected personal data or correct wrong data if they are informed by the affected person. Deletion of data can be requested within the scope of Art. 17 GDPR, e.g., if data is not necessary anymore for the pursued purpose. Additionally, there is a right of restriction of processing if one of the requirements in Art. 18 GDPR exists. In cases of Art. 20 GDPR a right for transfer of data exists.

Right to file a complaint at a supervisory authority:
If the processing of the specific data, in your opinion, is in conflict with some data protection regulation, there is a right to file a complaint at a regulatory authority. The right to file a complaint can be pleaded at the Lower Saxonian data security official which is responsible for the federal state Lower Saxony.

Commitment of provision:
Provision of personal data is neither prescribed legally nor contractual. But it is necessary for the proper processing of your input. If you do not provide it, it may be that the processing is terminated.

Objection:
Because of reasons which result of your special situation, you can object informally to further processing of your data anytime, according to Art. 21 GDPR. The corresponding e-mail is stated in the imprint. The objection leads to deletion of the collected user data.

Sources:

under usage of the sample privacy policy of Thomas Hoeren