Data Protection Information

The information about data protection given below gives an overview of how your data is acquired and processed.

1. General Information
2. Responsibility
3. Data protection information, in accordance with Art. 13 and Art. 14 EU GDPR
4. Acquisition of general data and information
5. Cookies
6. Map services
7. Matomo analysis tool
8. Social networks
9. YouTube
10. Contact options via the Internet website
11. Access-protected area of the "Förderbar" funding portal
12. Newsletter
13. Data protection for applications and in the application process
14. Retention, deletion and blocking of personal data
15. Job processing
16. Making personal data available
17. Automated decision-making process
18. Rights of affected persons

1. General Information to the top

We're delighted that you are interested in our company. Data protection is an extremely important matter for the management of Bremer Aufbau-Bank GmbH (Bremen Development Bank). You don't need to enter any personal data to use Bremer Aufbau-Bank GmbH's website. However, if you do want to use some of our company's services and access them from our website, we might need to process some of your personal data. If we do need to process your personal data, and there isn't a specific legal reason governing this, we will usually ask for your consent.

The way we process personal data such as your name, address, e-mail address or telephone number always complies with the data protection regulations (GDPR) and will be subject to the German Federal State-specific data protection requirements which apply to Bremer Aufbau-Bank GmbH. By issuing this data protection statement, our company aims to make public what kind of personal data we acquire, use and process. It details how much data we acquire, use and process, and for what purpose. This data protection statement also clarifies the rights of people affected by our data gathering, processing and use.

Bremer Aufbau-Bank GmbH has implemented as a controller a host of technical and organisational measures that govern how our Internet website is operated – measures with which those members of staff responsible for doing so must comply. These measures ensure that any personal data processed via this website is given the highest possible levels of all-round protection. However, the processes by which data is transferred over the Internet can never be fully protected, so it is not possible to guarantee absolute protection. For this reason, we always offer alternative options if you need to provide us with your personal data, such as by telephone.

2. Controller to the top

The controller, as detailed in the General Data Protection Regulation, other data protection legislation that applies in the Member States of the European Union and other regulations involving issues of data protection, is:
Bremer Aufbau-Bank GmbH, represented by these management board members: Ralf Stapp, Michael Lücken
Domshof 14/15
28195 Bremen
Tel.:  +49 (0) 421 9600-40

E-mail: mail@bab-bremen.de
Website: www.bab-bremen.de

Data Protection Officer contact details
Bremer Aufbau-Bank GmbH
Postal address:
Domshof 14/15
28195 Bremen
Tel.: +49 (0) 421 9600 368
E-mail: datenschutz@bab-bremen.de

If you have any questions or issues about data protection, do not hesitate to contact our Data Protection Officer at any time.

3. Data protection information, in accordance with Art. 13 and Art. 14 EU GDPR to the top

As the data controller, we have taken suitable measures to provide the data subject with all the processing-related information in accordance with Articles 13 and 14 and all processing-related notifications in accordance with Articles 15 to 22 and Article 34, in a precise, transparent, comprehensible and easily accessible manner, using simple, clear language.

You can either request this information directly from your contact in our company by sending an e-mail to datenschutz@bab-bremen.de or download it from our website.

4. Collecting of general data and information to the top

Every time the Bremer Aufbau-Bank GmbH website is accessed, either by a person or by an automatic system, it processes a range of general data and information. This general data and information is stored in logfiles on the server. The type of data processed might include:

1. the type and versions of browser used,
2. the operating system used by the system accessing our website,
3. the Internet site from which the system accessing our website starts (the "referrer"),
4. die Unterwebseiten, welche über ein zugreifendes System auf unserer Internetseite angesteuert werden,
5. das Datum und die Uhrzeit eines Zugriffs auf die Internetseite,
6. eine Internet-Protokoll-Adresse (IP-Adresse),
7. Gerätedaten,
8. the Internet service provider of the system accessing our website, and
9. other similar data and information which we can use in an emergency response if our IT systems are attacked.

We need this information to:

1. supply our website content correctly,
2. optimise our website content,
3. ensure the on-going ability of our IT systems to function correctly and ensure our website technology operates effectively,
4. be able to provide law enforcement agencies with the information they need to initiate criminal proceedings if we suffer a cyber attack.

We process this data in accordance with point (f) of Art. 6(1) GDPR, both for statistical purposes and to improve levels of data protection and data security within our company so that we can provide the best-possible levels of security for the personal data we process. The IP address is anonymised after 7 days so it cannot be used to identify the person who provided the data listed above.

5. Cookies to the top

When you access the Starthaus Bremen und Bremerhaven website of Bremer Aufbau-Bank GmbH (Bremen Development Bank), we implement the cookies that are technically necessary. The legal basis for this is point (f) of Art. 6(1) GDPR. These cookies enable us to display our website as effectively and completely as possible, with all its functionality.

Cookies are small text files that are stored on your computer or other end device when you visit a website. Every time you visit that website again, the cookies are sent back to it.
The benefit of cookies is that they make it easier for you to use our website and also increase its security.

5.1 Cookies and how Bremer Aufbau-Bank GmbH uses them

Bremer Aufbau-Bank GmbH uses two different types of cookie:

Session-Cookies:
These cookies are temporary. They are only stored on your hard drive for the duration of your visit to the website and are deleted automatically when you close the browser.
Bremer Aufbau-Bank GmbH uses session cookies for uninterrupted identification purposes when you visit its website. This ensures that the website works properly.

Cookies with a longer lifetime:
Cookies with a longer lifetime are only used to analyse use of the website, to enable us to continuously improve our service.

These are the cookies we use:

Most browsers store cookies automatically.
You can, of course, also access the website without accepting cookies. To do this, simply modify your browser settings.
The way in which you disable the acceptance of cookies, for example by enabling the DoNotTrack function, differs from one Internet browser to another. You will usually find instructions about how to do this in your browser's help.

6. Map services to the top

We work with map material provided by OpenStreetMap, which is hosted on the Wirtschaftsförderung Bremen GmbH (WFB) servers.

We use OpenStreetMap to ensure our online offerings are displayed correctly. This is a legitimate interest as defined in point (f) of Art. 6(1) GDPR.

7. Matomo analysis tool to the top

We use the Matomo tool for web analytics. The legal basis for this is point (f) of Art. 6(1) GDPR. Matomo does not use cookies for this purpose. Your IP address is immediately anonymised during this process so that you as the user remain anonymous to us. Information on your use of this website is not passed on to third parties. We have no way of associating this data with a specific person. This data is not collated with other data sources.

8. Social networks to the top

Our website only has links to our own social networks. You will find our separate data protection information about our social networks here.

9. YouTube to the top

We have integrated YouTube videos on our website in "no-cookie mode". YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

When you click on the enable button, the relevant YouTube components are downloaded from YouTube and the Youtube_enabled cookie is enabled for the duration of the session for the purposes of agreeing to this service.

As part of this technical process, YouTube and Google know what actual subpage of our website a particular person is visiting.

If that person is also logged into YouTube and Google at the same time, this information is assigned to their particular YouTube account.

If you do not want any data to be transferred, simply click on the enable button. However, this means you will not be able to play the video.

If you have enabled YouTube, but do not want any data to be transferred, click the "Disable YouTube" button under the video. This then disables YouTube again.

The data guidelines published by YouTube, which can be found at https://www.google.de/intl/de/policies/privacy/, provide clarification on the collection, processing, and utilisation of personal data by YouTube and Google.

We do not have any further influence on how Google processes data. This is because the service provider is based in the USA. The USA does not have adequate levels of data protection. The legal basis for playing the video is point (a) of Art. 6(1) GDPR. The legal basis governing the possibility that data is transferred to an insecure third country is point (a) of Art. 49(1) GDPR. If you do not want your data to be transferred, do not click on the enable button.

10. Contact options via the Internet website to the top

As specified in the relevant legal regulations, the Bremer Aufbau-Bank GmbH Starthaus Bremen und Bremerhaven website contains data which enables visitors to contact our company quickly, via electronic means, and also to communicate with us directly. This data includes a general electronic postal address (e-mail address).

10.1 Contact form

If you use e-mail or the contact form to get in touch with the controller, the personal data you transfer will be stored automatically.

This personal data, which you send to the controller voluntarily, will stored exclusively for the purpose of processing the approach to that specific person. This personal data will not be passed on to third parties.

Required data is marked with an asterisk:
Name, first name
E-mail address or telephone

The legal basis for processing this data is point (f) of Art. 6(1) GDPR. It is used to process your contact query. Our legitimate interest in this case is responding to your query as part of our offering.

Gender

We collect data about your gender because we are obliged to pass this information on to the funding agency as part of our project development process. This requirement results from our obligations as part of implementing the Starthaus Bremen und Bremerhaven project, as stated in point (e) of Art. 6(1) GDPR, together with Art. 39 of the State Constitution of Bremen, which requires us to fund and support business.

At the time of sending the message, the following data will also be stored:
Date and time

10.2 Registration for events

When you register for an event, you voluntarily enter the following data:
Last name, first name
E-mail address

The legal basis for entering your data voluntarily is point (a) of Art. 6(1) GDPR. You can withdraw your consent at any time here, with future effect.

However, if you withdraw your consent before taking part in the event, you will no longer be able to participate in that event.

We collect data about your gender when you register for an event because we are obliged to pass this information on to the funding agency as part of our project development process. This requirement results from our obligations as part of implementing the Starthaus Bremen und Bremerhaven project, as stated in point (e) of Art. 6(1) GDPR, together with Art. 39 of the State Constitution of Bremen, which requires us to fund and support business.

10.3 Request for advice

We will need the following data if you use our advice request form to make a request:
First name, last name,
E-mail or telephone,
Start-up location: Bremen or Bremerhaven,
Information in the text field and about the sector

The legal basis for processing this data is point (f) of Art. 6(1) GDPR. It is used to process your request. Our legitimate interest in this case is responding to your query as part of our offering.

Gender

We collect data about your gender because we are obliged to pass this information on to the funding agency as part of our project development process. This requirement results from our obligations as part of implementing the Starthaus Bremen und Bremerhaven project, as stated in point (e) of Art. 6(1) GDPR, together with Art. 39 of the State Constitution of Bremen, which requires us to fund and support business.

All other data is voluntary information. The legal basis for this is point (a) of Art. 6(1) GDPR. You can withdraw consent at any time here, with future effect.

10.4 Booking request BAB LAB

When you contact us for a reservation request regarding our event location BAB LAB, we process the following personal data from you to confirm, plan and process the booking and forward invoices if necessary:

First name, name of contact person(s), E-mail address, telephone.

The telephone number is used to contact you at short notice, which may become necessary in the course of the event.

The legal basis for processing this data is point (f) of Art. 6(1) GDPR. To process the booking, we require the first and last name of the contact person who manages the booking and at least an e-mail address for confirmation and further planning of the booking for exact assignment within a government agency/company. A telephone number should be provided for last-minute arrangements, such as late arrivals or arrangements during the event. Should insurance claims come into effect during use, the data will be processed for insurance law requirements. In addition, we may use your data to forward invoices for drinks or special cleaning costs.

We do not pass on your data to third parties unless we are legally obliged to do so or it is necessary in the context of asserting or fulfilling claims (e.g. damage claims).

Your personal data will be deleted at the latest after the purpose ceases to exist, unless there are longer retention periods required by law/legal regulations.

10.5 Mentoring by Starthaus

If you would like to participate in the program Mentoring by Starthaus, we require the following information from you in order to achieve a matching between mentor and mentee.

The following data will be stored and processed by us:

As Mentor: First name, name, E-mail address, name of company, current position, industry, size of company, contact details. In addition, the other information you entered in the questionnaire.

As a mentee: First name, name, E-mail address, place of incorporation, gender and additionally, the other details you entered in the questionnaire.

In order to carry out the matching process, we’ll go through the information submitted and check whether the program is suitable to your needs and who can be considered. We then use our network to find suitable mentors. Personal data will not be passed on during the search. Your data will remain with us and will then be deleted, provided that there are no longer any legal retention periods.

The legal basis for the processing of your data is point (a) of Art. 6(1) GDPR. You can revoke your consent in writing here at any time with effect for the future.

If you revoke your consent, your data will no longer be used for the mentoring program and will also be deleted.

11. Access-protected area (the "Förderbar" funding portal) to the top

The BAB "Förderbar" funding portal is operated by an external service provider with which we have signed the required data protection agreement. You must register before you can use our "Förderbar" funding portal.

When you register, the following data will be collected:

Customer type: Company/private individual, e-mail, name and type of business

You will then be sent an activation link to your e-mail address.

The legal basis for processing this data as part of the registration process for using the "Förderbar" funding portal is point (b) of Art. 6(1) GDPR.

If you no longer want to use the "Förderbar" funding portal, select "Verwaltung" (administration) -> "Sicherheit" (security) -> "Zugang sperren" (block access). In the "Zugang sperren" (block access) tab screen, disable and delete your access.

Then click on "Sperren" (block). You will receive an e-mail in which you confirm that your account has been disabled. Your account will then be disabled and deleted immediately. 

You can also delete the data you entered in the "Förderbar" funding portal yourself. If you want to be deleted as a user, simply send a request to mail@bab-bremen.de and your user profile in the "Förderbar" funding portal will be deleted. Any requests you have made will still be processed, but without using the "Förderbar" funding portal.

The "Förderbar" funding portal and your data are protected by a host of security measures. These include, for example, encrypted access to the website, blocked access to protected data and other technical and organisational measures.

12. Newsletter to the top

When you visit the Bremer Aufbau-Bank GmbH Starthaus Bremen und Bremerhaven website, you have the option of subscribing to the Starthaus Bremen und Bremerhaven newsletter. To enable this, we will process the e-mail address you enter, on the legal basis of point (a) of Art. 6(1) GDPR. No other information is needed to register to receive the newsletter.

Starthaus Bremen und Bremerhaven will send out regular newsletters to inform their customers and business partners about everything the Starthaus Bremen und Bremerhaven project has to offer. This newsletter can only be sent to people who

1. have a valid e-mail address
2. have registered for the newsletter.

The first time the newsletter is sent to the e-mail address you entered, we will send you a confirmation e-mail as part of the legally required double opt-in procedure. This confirmation e-mail is used to check that the owner of the e-mail address has given their permission to be sent the newsletter.

We will store your e-mail address, the time at which confirmation was granted and the data and time. The purpose of this is to prove your registration. The legal basis for this is point (f) of Art. 6(1) GDPR.

The personal data we collect as part of your registration for the newsletter will be used exclusively to send out the newsletter. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time.

You can withdraw your consent to receive the newsletter at any time. Every newsletter has a link that you can use to withdraw your consent. You can also inform the controller about your decision at any time, using a different method to contact them.

13. Data protection for applications and in the application process to the top

The controller will solely gather and process personal data provided by applicants for the purpose of processing their application. The legal basis for this is point (b) of Art. 6(1) GDPR. This data can also be processed electronically. This is the case if an applicant sends their application documents to the controller electronically, for example, by e-mail. If the controller concludes an employment contract with the applicant, the data transferred for the purpose of handling the employment relationship will be stored in accordance with the current legal regulations. If the controller does not conclude an employment contract with the applicant, the application documents will be deleted automatically, six months after the rejection notice has been sent. However, these documents will only be deleted if they are not of any legitimate interest to the Controller. Other legitimate interest in this respect is, for example, the documents being required as proof in a process involving the General Equality of Treatment Act (AGG).

Every connection on this website is encrypted.

14. Retention, deletion and blocking of personal data to the top

The legally applicable data retention period is the criterion that governs how long personal data is stored. This data is deleted routinely after this time period has expired, unless it is needed for fulfilling or initiating a contract.

The controller only processes and stores personal data for as long as necessary to achieve the purpose for which that data is being stored or if it is necessary for purposes specified by European Guidelines or Regulations, or by the laws and regulations of a different legislative body, to which the controller is subject.

If the purpose for which personal data is being stored or the prescribed retention period are no longer applicable, this data will be either blocked or deleted routinely, in accordance with legal requirements.

15. Data processor to the top

Service providers help us design and operate our website, manage personnel and provide telephone support. We have signed data processing contracts with these service providers, as set out in Art. 28 GDPR, to ensure your data is processed strictly according to regulation.

16. Making personal data available to the top

We will inform you when your personal data is being made available for the purpose of establishing contact with us or for the purpose of registering for an event. You cannot take part in events that require registration unless you provide us with the minimum amount of personal information required. Failure to provide this information will also make it much harder for us to process your request and might even mean we are unable to do so.

17. Automated decision-making process to the top

As a responsible company, we do not use automated decision-making processes or use profiling.

18. Rights of the data subject to the top

Under the provisions of the GDPR, if your personal data is processed, you are entitled to exercise a number of rights under the applicable conditions.

18.1 Right of access (Art. 15 GDPR)

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information set out in Art. 15 GDPR.

18.2 Right to rectification (Art. 16 GDPR)

If your personal data is processed, you have the right to request that inaccurate personal data concerning you is rectified without undue delay. Taking into account the purposes for which your data is being processed, you also have the right to request that incomplete personal data is completed, even if this involves a supplementary declaration.

18.3 Right to erasure (Art. 17 GDPR)

If your personal data is processed, you have the right to ask the controller to delete the personal data involved without undue delay, for one of the reasons set out in Art. 17 GDPR, provided this data is not necessary for further processing.

18.4 Right to restriction (Art. 18 GDPR)

The data subject has the right to obtain from the controller restriction of processing where one of the conditions specified in Art. 18 GDPR is met.

18.5 Right to data portability (Art. 20 GDPR)

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, if the conditions detailed in Art. 20 GDPR are present.

18.6 Right to object (Art. 21 GDPR)

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.

If you make an objection, Bremer Aufbau-Bank GmbH will no longer process your personal data unless we can prove compelling data protection-related reasons that require its processing. These reasons override the interests, rights and liberties of the data subject. Other compelling reasons include the need to process your data to enforce, implement or defend legal claims.

18.7 Right to withdraw data protection consent (Art. 7 (3) GDPR)

The data subject shall have the right to withdraw his or her consent at any time with future effect.

If you want to exercise your right to withdraw consent, you can contact our Data Protection Officer or any of their colleagues at any time.

In order to exercise the aforementioned rights as a data subject, the data subject may directly contact the Data Protection Officer.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
The data protection authority responsible for Bremer Aufbau-Bank GmbH is:

Landesbeauftragte für den Datenschutz Bremen
Arndtstraße 1
27570 Bremerhaven
Tel: +49 471 5962010
E-mail: office@datenschutz.bremen.de