Data protection – an integral part of our company

Data protection forms an integral part of Bundesdruckerei’s corporate philosophy. It applies to all customers, suppliers and staff as well as to all work areas and processes.

Privacy Policy

1Data protection – an integral part of our company

Protecting personal data is a top priority for Bundesdruckerei GmbH, Kommandantenstraße 18, 10969 Berlin, Germany, and its subsidiary Maurer Electronics GmbH (together ‘Bundesdruckerei’ ). That’s why Bundesdruckerei processes personal data in accordance with the applicable legal provisions regarding the protection of personal data and data security.

Data protection forms an integral part of the corporate philosophy of Bundesdruckerei. It applies to all customers, suppliers and staff as well as to all work areas and processes.

Bundesdruckerei is aware of its special obligation to protect each and every citizen's right to informational self-determination. The company’s data protection officer continuously check that Bundesdruckerei complies with the requirements of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and other statutory data protection requirements.

This means that the personal data, which Bundesdruckerei needs on a temporary basis, for instance, to produce ID documents, is handled strictly in line with data protection laws. It goes without saying that Bundesdruckerei also protects the data of its customers, suppliers and employees to the same extent.

Accreditation of the company according to DIN EN ISO 9001, especially ISO/IEC 27001 and CWA 14641, also warrants outstanding quality.

2Processing of personal data when you visit our website

Data categories, purpose of processing and legal basis

Every time you use Bundesdruckerei’s websites, applications or online tools ( ‘Bundesdruckerei’s online offer’ ), Bundesdruckerei processes the following personal data:

Personal data that you voluntarily enter in the context of a Bundesdruckerei online offer (e.g. when registering, making contact or participating in surveys, etc.), such as your first and last name, email address, telephone number, information provided in the context of a support enquiry, comments or forum contributions and information that is automatically sent to us by your web browser or device, such as your IP address, device type, browser type, previously visited websites, pages visited or date and time of the respective visitor enquiry.

We process your personal data for the following purposes:

  • to enable you to make use of the services and functions of Bundesdruckerei’s online offer,
  • to verify your identity and enable user authentication,
  • to process your enquiry and
  • to enforce our Terms of Use, to assert or defend against legal claims and to defend and prevent fraudulent and similar acts, including attacks on our IT infrastructure.

The processing of personal data is necessary in order to achieve the aforementioned purposes. Unless expressly stated otherwise when personal data is collected, the legal basis for data processing is as follows:

  • the performance and fulfilment of a contract with you (Art. 6 (1) (b) of the General Data Protection Regulation),
  • the fulfilment of legal obligations to which Bundesdruckerei is subject (Art. 6 (1) (c) of the General Data Protection Regulation), or
  • the protection of legitimate interests of Bundesdruckerei (Art. 6 (1) (f) of the General Data Protection Regulation). Bundesdruckerei has a legitimate interest in processing your personal data for the purpose of offering and operating Bundesdruckerei’s online offer.

In some cases, we expressly ask you to consent to the processing of personal data. In this case, your consent forms the legal basis for processing personal data (Art. 6 (1) (a) of the General Data Protection Regulation).

We ensure that we only process your personal data if you have previously provided us with your consent as required by the GDPR and the German Act Against Unfair Competition (UWG) in individual cases and have not revoked this consent.

2.1 Use of cookies

We use so-called ‘session cookies’ which are temporarily stored only for the duration of your visit to one of our web pages.

2.2 External links

This privacy policy applies to the website www.bundesdruckerei-gmbh.de. The website also contains links to third-party websites. Liability for these websites lies with the respective operators. Bundesdruckerei is not responsible for the content nor for the data protection provisions of third-party websites.

If you leave the website www.bundesdruckerei-gmbh.de, we recommend that you carefully read the privacy policy of each website that collects personal data.

2.3 Whistleblower system

Bundesdruckerei operates a whistleblower management system in order to meet its special responsibility as a federal government security company. This system can be used at any time to report a situation that violates the values or policies of the Group or its business ethics or that has a negative impact on the life or health of individuals (‘whistleblowing’). In addition to regular information and reporting channels, suspected cases can also be reported anonymously if necessary. This reporting channel is therefore provided by an external partner, WhistleB Whistleblowing Centre AB, Stockholm, Sweden. The reporting procedure is encrypted and password-protected, providing a secure, bidirectional communication channel. Personal data (e.g. contact details) do not have to be provided and are entirely optional. For more information, please refer to the Terms of Use.

2.4 Statistical evaluation

Bundesdruckerei’s website uses technologies from etracker GmbH for analysis and statistical evaluation of website use. The information collected about your use of this website is used exclusively to analyze and optimize the quality of our website. Website visit data is anonymized. Neither etracker nor Bundesdruckerei can identify you personally.

etracker uses cookies to record visit data. Cookies are small text files that are stored locally in the cache of your Internet browser and allow your use of the website to be analyzed. The information generated by the cookie about your use of this website is sent to an etracker server located in Germany for storage. For more information about data protection at etracker, go to:
etracker.com/en/data-privacy. You can revoke the collection and storage of data at any time. To do this, click the following link:

Activate etracker Deactivate etracker

3Processing personal data from business partners

Purpose of processing, data categories and legal basis

As part of its collaboration with business partners, Bundesdruckerei processes personal data for the following purposes:

  • Communication with business partners regarding products, services and projects, for example, to process enquiries from business partners
  • Planning, implementation and management of the (contractual) business relationship between Bundesdruckerei and the business partner, e.g. to handle orders for products and services, collect payments, for accounting, billing and debt collection purposes and to carry out deliveries, maintenance or repairs
  • Order processing, e.g. in the context of producing identity documents
  • Conducting customer surveys, marketing campaigns, market analyses, competitions or similar events
  • Maintaining and protecting the security of our products, services and websites, avoiding and detecting security risks, fraud or other criminal or malicious activities
  • Compliance with:
    • legal requirements (e.g. storage obligations under tax and commercial law),
    • existing obligations to conduct compliance screenings (to prevent whitecollar crime or money laundering or terrorist financing), and
    • Bundesdruckerei's guidelines and industry standards
  • Settling legal disputes, enforcing existing contracts as well as asserting, exercising and defending legal claims

Bundesdruckerei may process the following categories of personal data for the aforementioned purposes:

  • Contact information, such as first and last name, address, telephone number, mobile phone number, fax number and email address
  • Payment information, such as information required to process payment transactions or prevent fraud, including credit card information and card verification numbers
  • Other information which must be processed within the scope of a project or is needed to conclude a contractual relationship with Bundesdruckerei, or which is voluntarily provided by our contact persons, such as orders placed, inquiries made or project details
  • Information collected from publicly available sources, information databases or credit agencies
  • In as far as required as part of compliance screenings: information on relevant legal proceedings and other legal disputes involving business partners.

Personal data must be processed in order to achieve the above-mentioned purposes, including the execution of the (contractual) business relationship with the business partner. Unless expressly stated otherwise, the legal basis for data processing is Art. 6 (1) (b) and (f) of the EU’s General Data Protection Regulation or the express consent given by our contact person (Art. 6 (1) (a) of the EU’s General Data Protection Regulation).

If the personal data mentioned is not made available or Bundesdruckerei is unable to collect such data, the individual purposes described may not be achieved and in case of doubt it will not be possible to establish or continue business relations.

4Security

Bundesdruckerei takes all the necessary technical and organizational precautions to protect personal data against loss or misuse. Your data is stored in a secure operating environment which cannot be accessed by the public.

If you wish to communicate with Bundesdruckerei by email, we would like to point out that the confidentiality of the information sent is not guaranteed. Third parties may be able to see the contents of emails. We hence recommend that you send confidential information by post only.

5Transmission and forwarding of personal data

Bundesdruckerei may transfer personal data to other Bundesdruckerei Group companies for the above- mentioned purposes, but only if this is necessary to fulfil the above-mentioned purposes.

Bundesdruckerei may transfer personal data to courts, supervisory authorities or law firms if this is legally permissible and necessary in order to comply with applicable law or to assert, exercise or defend legal claims.

Bundesdruckerei works together with service providers (socalled commissioned data processors), such as service providers for IT maintenance services. These service providers only act on the instructions of Bundesdruckerei and are contractually obliged to comply with the applicable data protection requirements.

The data recipients described in this section 5 may be located in countries outside the European Economic Area (‘third countries’) where applicable law does not guarantee the same level of data protection as in your home country.

In this case, Bundesdruckerei will take measures to secure other appropriate and reasonable guarantees for the protection of personal data.

Personal data will only be transmitted to recipients outside the Group in third countries if they

6Storage periods

If no explicit storage period is specified during collection (e.g. within the scope of a declaration of consent), personal data will be deleted as soon as it is no longer required for the business relationship, unless statutory storage obligations (e.g. storage obligations under commercial and tax law) prevent deletion.

7Revocability of given declarations of consent (see Art. 7 (3) GDPR)

If you have consented to the processing of your personal data, you have the right to revoke your consent at any time with effect for the future, i.e. revocation does not affect the legality of the processing carried out on the basis of the consent prior to revocation. Once revoked, Bundesdruckerei may only process the personal data to the extent to which it can base such continued processing on another legal basis. If you wish to do so, please contact: datenschutz-request@bdr.de.

8Right to information, correction, deletion or restriction of personal data, right of objection and right to data portability

Under applicable data protection law, you may have the right:

  • to request confirmation as to whether Bundesdruckerei processes personal data about you and to receive information about the personal data processed by Bundesdruckerei as well as further information (see Art. 15 GDPR),
  • to request the correction of inaccurate personal data (see Art. 16 GDPR),
  • to request the deletion of personal data processed by Bundesdruckerei (see Art. 17 GDPR),
  • to request that Bundesdruckerei restrict the processing of personal data (see Art. 18 GDPR),
  • to receive personal data, which you have provided to Bundesdruckerei, in a structured, customary and machine-readable format or to request that the personal data be transmitted to a third party (see Art. 20 GDPR), or
  • to object to Bundesdruckerei processing your personal data (see Art. 21 GDPR).

If you have exerted your right in relation to Bundesdruckerei to have processing restricted or data rectified or erased, Bundesdruckerei is then obliged to notify each recipient to whom the personal data has been disclosed of this unless this proves impossible involves disproportionate effort.

You are entitled to request information regarding these recipients (see Art. 19 GDPR).

9Contacts

Bundesdruckerei will assist you in all matters relating to data protection. Complaints may also be made and the rights referred to in section 8 may be asserted.

You can contact Bundesdruckerei at datenschutz@bdr.de for this purpose.

The data protection officer responsible for Bundesdruckerei GmbH and Maurer Electronics GmbH:

Dirk Clemens

Bundesdruckerei GmbH

Internal Audit, Compliance & Data Privacy Protection

Kommandantenstraße 18

10969 Berlin, Germany

Phone: +49 (0) 30 2598-0

E-mail: datenschutz@bdr.de

Bundesdruckerei always endeavors to address enquiries and remedy complaints received via the abovementioned channels. In addition to the above-mentioned contacts at Bundesdruckerei, it is also possible to contact the relevant data protection supervisory authorities at any time.

The data protection authorities responsible for Bundesdruckerei GmbH:

for operating as a non-public body:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstraße 219

10969 Berlin, Germany

Tel.: +49 (0) 30 13889-0

Fax: +49 (0)30 2155050

E-mail: mailbox@datenschutz-berlin.de

and

for operating as a public body:

Federal Commissioner for Data Protection and Freedom of Information

Graurheindorfer Str. 153

53117 Bonn, Germany

Tel.: +49 (0) 228 997799-0

Fax: +49 (0) 228 997799-5550

E-mail: poststelle@bfdi.bund.de

Liason office:

Friedrichstraße 50

10117 Berlin, Germany

The following data protection authority is responsible for Maurer Electronics GmbH as non-public body:

The Bavarian Data Protection Commissioner

Wagmüllerstraße 18,

80538 Munich, Germany

Tel.: +49 (0) 89 212672-0

Fax: +49 (0) 89 212672-50

E-mail: poststelle@datenschutz-bayern.de

Bundesdruckerei GmbH