The Physikalisch-Technische Bundesanstalt (PTB) Braunschweig and Berlin, represented by its president Prof. Dr. Cornelia Denz, Bundesallee 100, 38116 Braunschweig, Germany, Phone: +49 (0) 531 592-0, E-Mail: info@ptb.de, is responsible for the processing of your personal data when using this website.

Therefore, PTB would like to inform you about the personal data processed during the use of this website and the rights granted to you in this context.

I. Data Processing

1. Using this Website

When you visit this website, PTB processes the following data by means of automatic logging:

• IP address
• Date and Time
• retrieved page/name of retrieved file
• message whether the access/retrieval was successful
• volume of data transmitted

The processing is based on Article 6(1) f) of the General Data Protection Regulation (GDPR) due to the legitimate interest of PTB in the maintenance of the permanent availability and integrity of its information technology systems and website. These data are stored temporarily, for a maximum of seven (7) days, and are used for statistical purposes, to improve our website and to ensure data protection and information security at PTB. PTB reserves the right to further scrutinize this data should there be evidence of criminal acts or cyber-attacks and forward such protocol data to the responsible law enforcement authorities. There will be no further use or disclosure to third parties.

2. Cookies

When accessing this website, so-called temporary session cookies will be stored on your device to facilitate navigational features. These cookies do not contain personal data and expire after your session has ended. Techniques such as Java applets or Active X controls that enable PTB to track its websites’ users access behavior are not used.

3. When contacting PTB by E-Mail

If you contact PTB by e-mail, PTB will process the personal data you have used in doing so for the purpose of processing your request and contacting you.

The legal basis on which your data will be processed depends largely on the nature of your request. If PTB acts by exercising official authority or within the scope of its statutory tasks, processing will be based on Article 6(1) e), (3) GDPR in conjunction with § 3 Federal Data Protection Act (BDSG).

Your data will be deleted once your request has been processed, notwithstanding statutory retention periods. The nature of your request will determine which periods will be applicable. Retention periods of inquiries from the general public will be determined in accordance with the statutory periods of the Registry Directive (Registraturrichtlinie), which supplements the Joint Rules of Procedure of the Federal Ministries (Gemeinsame Geschäftsordnung GGO). Further information can be requested informally or by way of a request of information pursuant to Article 15 GDPR (see below).

Any further use or disclosure to third parties, except in cases provided for by law and for the prosecution of criminal offenses or for the purpose of countering threats and dangers, will only be made if you have given your consent.

II. Your Rights as a Data Subject

Data subjects may exercise certain statutory rights wherever their personal data are processed. These are in particular:

Right of Access: According to Article 15 GDPR, you have the right to obtain, free of charge, confirmation as to whether PTB processes personal data concerning you, access to this data by means of a copy of such personal data undergoing processing and in particular information concerning:

• the purposes of processing,
• the categories of personal data concerned,
• the recipients or categories of recipient to whom the personal data have been or will be disclosed,
• the envisaged period for which the personal data will be stored, or the criteria used to determine that period,
• where the personal data are not collected from you, any available information as to their source.

When responding to a request for information, PTB will also provide you with any other information stipulated by Article 15(1) and (3) not expressly mentioned in this statement on data protection.

Right to Rectification: According to Article 16 GDPR, you have the right to obtain from PTB with undue delay the rectification of personal data concerning you or, if applicable, the right to have incomplete personal data completed.

Right to Erasure: According to Article 17 GDPR, you have the right to obtain erasure of your personal data processed by PTB if the conditions of Article 17(1) are met. This right will - according to Article 17(3) - not apply to processing necessary e.g. for exercising right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

Right to Restriction of Processing: According to Article 18 GDPR, you have the right to obtain from PTB restriction of processing:

• for a period enabling PTB to verify the accuracy of your personal data contested by you, and/or
• in case the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, and/or
• when you require the personal data for the establishment, exercise or defence of legal claims, but PTB no longer needs them for the purposes of the processing and hence would need to delete them, and/or
• when you objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of PTB override yours.

Personal data whose processing has been restricted will, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

PTB will inform you before any restriction of processing in the above sense is lifted.

Right to Data Portability: According to Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to PTB, in a structured, commonly used and machine-readable format when and insofar processing of this data is based on your consent or on a contract and when this processing is carried out by automated means.

Right to Lodge a Complaint with a Supervisory Authority: According to Article 77 GDPR, you - without prejudice to any other remedy - have the right to lodge a complaint with a supervisory authority if you consider that PTB’s processing of your personal data infringes data protection law. This complaint may be lodged with a single supervisory authority within the territorial scope of the GDPR.

III. Right to Object

YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO PTB’S PROCESSING OF YOUR PERSONAL DATA IF AND TO THE EXTENT THAT THIS DATA IS PROCESSED BY PTB ON THE BASIS OF LEGITIMATE INTERESTS.

IN CASE OF OBJECTION, PTB WILL CEASE TO PROCESS SUCH DATA UNLESS PTB CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

Data Protection Officer:

Ms. Lena-Maximiliane Kreßmann

Phone: +49 (0)531 592-8463

Mail: datenschutz@ptb.de