Data protection information (Art. 13 GDPR) on the family portal “Guter Start NRW” of the city of Herdecke
Responsible
City of Herdecke - Mayor Goethestraße 14, 58313 Herdecke Phone: 02330 611-0, E-mail: stadt@herdecke.de
The city of Herdecke is responsible for the design, content and publication of the information in the family portal. The professional responsibility lies with the Youth Office.
External Data Protection Officer
TÜV Süd Akadamie André Weinert Email: andre.weinert@partner.tuvsud.com
Short description
In the family portal “Guter Start NRW” the city of Herdecke publishes information about local offers for families and children. These include basic data from carriers/providers as well as – after consent – supplementary descriptions and media. Larger carriers can optionally get access to pre-care for their own entries; the release is made by the city.
Purposes of processing
Publication and findability of local offers for families on the Internet. Management and quality assurance of the entries. Communication with providers and contact persons. Provision and administration of optional user accesses for providers. Ensuring technical operation, including logging of server accesses for troubleshooting and IT security.
Legal basis of processing
- Publication of basic data (e.g. name, address, homepage, e-mail, opening hours), if already publicly known or required for performance of tasks: Art. 6 para. 1 lit. e GDPR in conjunction with the relevant communal legal tasks of the city of Herdecke.
- Publication of supplementary content such as quote description, logo or photo: Art. 6 para. 1 lit. a GDPR.
- Communication with contact persons of the provider and management of optional accesses: Art. 6 para. 1 lit. e GDPR.
- Technical operation, safety and error analysis (log data): Art. 6 para. 1 lit. e GDPR.
Deadline for deletion
Publicly published entries are deleted or updated as soon as they are no longer necessary for the stated purpose, upon revocation of consent or after an effective objection. Additional contents based on consent will be removed without delay. Access data and account information for providers are deleted 24 months after the last use or after deactivation. Communication data will be deleted routinely after the completion of the communication and any detection obligations. Technical protocol data are usually kept for 7 to 14 days and then deleted if no safety-relevant evaluation is required. Legal retention periods remain unaffected.
Required provision/ consequences of non-compliance
The provision of the basic data is necessary for a pure basic entry so that the offer can be displayed in the portal. For the use of an optional provider access, contact data and the technical minimum information for the account management are required. No entry in the portal can take place without basic data. No provider access can be set up without contact data. Additional content such as description, logos or photos are voluntary; without this, only a reduced representation takes place.
Automated decision-making and profiling
No automated decision-making including profiling takes place.
recipients or categories of recipients of personal data
- Public recipients by publication on the Internet
- Interne Stellen der Stadt Herdecke, who are concerned with the care of the portal
- Contracted IT service providers and hosting providers as part of order processing
Intent of transmission to a third country or an international organisation
Transmission to third countries is not intended. If a technical service provider based outside the EU is to be used in individual cases, the transmission takes place exclusively if the legal requirements are met.
Rights of the data subject
- Right to revoke consent (Art. 7 para. 3 GDPR). You can revoke given consent at any time with effect for the future. The legality of the processing carried out until the revocation remains unaffected.
- Right to access (Art. 15 GDPR). You will receive information about whether and what data we process.
- Right to rectification (Art. 16 GDPR). Incorrect data are corrected, incomplete data completed.
- Right to erasure (Art. 17 GDPR). Data will be deleted if the legal requirements are met.
- Right to restriction of processing (Art. 18 GDPR). Under the legal conditions, you can restrict the processing.
- Right to object to processing (Art. 21 GDPR). For reasons arising from your particular situation, you may object to the processing according to Art. 6 para. 1 lit. e GDPR object; we no longer process the data unless there are compelling legitimate reasons.
- Right to data portability (Art. 20 GDPR). As far as applicable, we provide you with data in a structured, common and machine-readable format.
- Right to appeal to a supervisory authority (Art. 77 GDPR). You can complain to a Data Protection Supervisor, for example, at the State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia.
Additional information on consent
For additional content such as offer descriptions, logos and photos, we support the publication on your voluntary consent. You can revoke them at any time with effect for the future. Please revoke or object to the contacts referred to in paragraph 1 or 5.
Specific data categories
Basic data of providers and carriers such as name, address, contact e-mail, telephone number, homepage, opening hours. Free text offer description, logo, photos by consent. Contact details for internal communication and access data for optional provider accounts. Technical usage data for portal access such as IP address, date and time of access, requested resources and possibly error codes.
Transparency for global accessibility
Please note that published data is available worldwide and can be stored or processed by third parties. After deletion in the portal, copies may remain in web caches or archive services until the update.
Links and downloads