In our Internet publications, it is important to us to process data in a data-saving, citizen-friendly manner. This data protection declaration relates to the processing of personal data within the context of this Internet presence, including the services offered there. For more detailed information on the processing of your personal data, you can contact us using the contact details below. Data collection on this website Consent with Complianz Our website uses Consent technology provided by Complianz to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in a privacy-compliant manner. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, The Netherlands (hereinafter “Complianz”). Complianz is hosted on our servers, so no connection is made to the servers of Complianz’s provider. Complianz stores a cookie in your browser in order to assign the consents given to you or their revocation. The data collected this way will be stored until you request us to delete it, delete the Complianz cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected. Complianz is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO. GENERAL INFORMATION Name and contact details of the responsible party Government of Upper Bavaria Maximilianstraße 39 80538 Munich Telefon +49 89 2176-0 Telefax +49 89 2176-2914 poststelle@reg-ob.bayern.de Authorized representative: District President Dr. Konrad Schober Contact details of the data protection officer You can reach our data protection officer at: Roland Weingut Government of Upper Bavaria Maximilianstraße 39 80538 Munich Telefon +49 89 2176-2910 Telefax +49 89 2176-402910 datenschutzbeauftragte@reg-ob.bayern.de Purposes and legal framework for the processing of personal data The purpose of the processing is the fulfillment of the public tasks assigned to us by the legislator. Unless otherwise stated, the legal basis for the processing of your data results from Article 4 (1) of the Bavarian Data Protection Act (BayDSG) in combination with Article 6 (1) (1) (e) of the General Data Protection Regulation (DSGVO). Accordingly, we are permitted to process the data required to fulfill a task entrusted to us. If you have consented to processing, the data processing is based on Art. 6 para. 1 letter a DSGVO. Recipients of personal data If your data is processed electronically, the technical operation of our data processing systems is carried out by InterNetX GmbH Johanna-Dachs-Str. 55 93055 Regensburg Email: info@internetx.com Job processing We have concluded a contract on order processing (AVV) for the use of the service mentioned above. This is a contract required by data protection law, which ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. Duration of the storage of personal data Your data will only be stored for as long as is necessary for the fulfillment of the task, taking into account statutory retention periods. Rights of the data subject If we process your personal data, you have the following rights as a data subject:

• If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 DSGVO).
• If incorrect personal data is processed, you have the right to rectification (Art. 16 DSGVO).
• If the legal requirements are met, you may request erasure or restriction of processing, as well as object to processing (Art. 17, 18 and 21 DSGVO).
• If you have consented to the processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 DSGVO).
• If you have consented to the processing and the processing is based on this consent, you can revoke the consent at any time for the future. The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by it.

More detailed information on these rights can also be obtained from our data protection officer. Right of complaint to the supervisory authority Furthermore, you have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection. You can contact the Bavarian State Commissioner for Data Protection at the following address: Postal address: P.O. Box 22 12 19, 80502 Munich, Germany Address:  Wagmüllerstraße 18, 80538 Munich, Germany Telephone +49 89 212672-0 Fax +49 89 212672-50 poststelle@datenschutz-bayern.de www.datenschutz-bayern.de SPECIAL NOTES ON THE INTERNET SERVICE Technical implementation Our web server is operated by InterNetX Gmbh. The personal data you provide when visiting our website is therefore processed on our behalf by InterNetX GmbH: InterNetX GmbH Johanna-Dachs-Str. 55 93055 Regensburg Email: info@internetx.com Logging When accessing this or other websites, you transmit data to our web server via your internet browser. The following data is recorded during an ongoing connection between your Internet browser and our web server:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• access status (file transferred, file not found, etc.)
• web browser and operating system used
• complete IP address of the requesting computer
• amount of data transferred

This data is not merged with other sources of data.The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected. Active Components Active components such as Javascript, Java applets or Active-X controls are used in the information offered by the Government of Upper Bavaria. This function can be switched off in your internet browser settings. Cookies When you access this website, we store cookies (small files) on your hard drive with a validity period of up to two years. We use these exclusively to identify you during this and further visits to our website. Most browsers are set to accept the use of cookies, but this function can be turned off by you for the current session or permanently by setting the Internet browser. YouTube video integration When visiting our website, additional services from YouTube are offered via a so-called two-click solution. When the website is called up for the first time, no data is transmitted to the operators. Only after users have consented to the opt-in procedure by clicking on (name internet address), data (including the URL of the current page and the IP address of the user) will be transmitted to the respective operator from now on and for each subsequent visit. As a user, you can decide for yourself whether to consent to the activation of these offers and the transfer of data. The user can revoke this consent at any time and prevent further data transmission to the operators by clicking on the corresponding link on the homepage (opt-in procedure). Videos from the external video platform YouTube are embedded on our website. By default, only deactivated images of the YouTube channel are embedded, which do not establish an automated connection with the servers of YouTube. Thus, the operator does not receive any data from the user when the web pages are called up. You can decide for yourself whether the YouTube videos should be activated. Only when you enable the playing of the videos by clicking on “Permanent activation” do you give your consent for the data required for this (including the Internet address of the current page and the IP address of the user) to be transmitted to the operator. In order to save the setting requested by the user, we set a cookie that saves the parameters. When setting these cookies, we do not store any personal data, they only contain anonymized data for browser customization. Afterwards, the videos are active and can be played by the user. If you would like to deactivate the automatic loading of YouTube videos again, you can remove the consent checkmark under the privacy icon. This will also update the cookie settings. Evaluation of user behavior (web tracking systems; reach measurement) Programs for evaluating user behavior are only used by us in anonymized form. Your IP address is first anonymized and only then evaluated by us or transmitted to third parties for evaluation. This function can be switched off by you by setting your internet browser. Newsletter Newsletter data If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter we use newsletter service providers, which are described below. CleverReach This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter “CleverReach”). CleverReach is a service with which the newsletter distribution can be organized and analyzed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on CleverReach’s servers in Germany or Ireland. Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on this website) has taken place after clicking on the link in the newsletter. For more information on data analysis by CleverReach newsletter, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/. The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a link in each newsletter message. The data you have provided to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored by us for other purposes remains unaffected. After you unsubscribe from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest. For more details, please refer to the data protection provisions of CleverReach at: https://www.cleverreach.com/de/datenschutz/. Job processing We have signed a contract on order processing (AVV) for the use of the service mentioned above. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR. Data that is stored by us when you subscribe to the newsletter

• Gender (voluntary)
• Name (voluntary)
• E-mail address (mandatory when subscribing to the newsletter)

Google Fonts (local hosting) This site uses Google Fonts for the uniform display of fonts. These fonts are provided by Google and installed locally. A connection to Google servers does not take place. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de. Electronic mail (E-mail) Information that you send to us unencrypted by electronic mail (e-mail) can possibly be read by third parties during transmission. We are also unable to verify your identity and do not know who is hiding behind an e-mail address. Legally secure communication by simple e-mail is therefore not ensured. Like many e-mail providers, we use filters against unwanted advertising (“SPAM filters”), which in rare cases automatically classify even normal e-mails as unwanted advertising by mistake and delete them. E-mails containing harmful programs (“viruses”) are automatically deleted. Wenn Sie schutzwürdige Nachrichten an uns senden wollen, empfehlen wir, diese zu verschlüsseln und zu signieren, um eine unbefugte Kenntnisnahme und Verfälschung auf dem Übertragungsweg zu verhindern oder die Nachricht auf konventionellem Postwege an uns zu senden. If you wish to send messages to us that are worthy of protection, we recommend that you encrypt and sign them to prevent unauthorized reading and falsification during transmission, or that you send the message to us via conventional mail. We support the e-mail encryption standard S/MIME at Postfach info@brbgl.de. Please also let us know if and how we can send you encrypted e-mails in order to reply to your mailings. If you do not have the option of receiving encrypted e-mails, please provide us with your postal address in order to reply to your messages.. Electronic communication with the Government of Upper Bavaria according to Art. 3a Bavarian Administrative Procedure Act (BayVwVfG) General The transmission of electronic documents via e-mail to the Government of Upper Bavaria is possible for simple and informal correspondence. Provided that only legal written form is required for the submission of documents and other legal provisions do not conflict with this, transmission by e-mail as a substitute for written form can only be made with a qualified electronic signature to the address poststelle@reg-ob.bayern.de. Unfortunately, it is currently not possible to use any other method of transmission in accordance with Art. 3a (2) sentence 4 BayVwVfG. Any other method of transmission by electronic means therefore does not fulfill the legally requirements for written form. Photographs As part of our press and public relations work, photos are taken at events and appointments, on which you may be recognizable. You can object to the recording and / or publication. Please use the contact details above for your objection.