Privacy information

Responsible pursuant to Art. 4 (7) DS-GVO is the Ministry of Economic Affairs, Industry, Climate Protection and Energy (MWIKE) Berger Allee 25 40213 Düsseldorf, Germany.

Phone: +49 (0) 211-61772-0

E-mail: poststelle@mwike.nrw.de

You can reach our data protection officer at our postal address with the addition: "To the official data protection officer", as well as by e-mail at datenschutzbeauftragter@mwike.nrw.de.

a) Browser data

When you visit our website for informational purposes, we automatically record the following data and information that your browser transmits to us:

• Date and time of the retrieval,
• Name of the Internet service called up, the resource called up and the action used,
• query made by the client
• amount of data transferred,
• message whether the retrieval was successful,
• IP address of the calling computer,
• Client information (including browser, operating system).

This data from the log files is used to prevent and analyze attacks and is stored directly and only accessible to administrators for up to 48 hours. After that, they are only indirectly available via the reconstruction of backup tapes and are finally deleted after six weeks. The collection of data for the provision of the website is mandatory for the operation of the website. The legal basis for this is Art. 6 para. 1 p. 1 lit. e DS-GVO in conjunction with. § 3 para. 1 DSG NRW.

b) Cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your computer associated with the browser you are using. This allows certain information to flow to the body that sets the cookie (in this case by us).

The most common types of cookies are explained below for your understanding:

• Session cookies: while you are active on a website, a session cookie is temporarily placed on your computer, in which a session identifier is stored, for example, to prevent you from having to log in again each time you change pages. Session cookies are deleted when you log out or lose their validity as soon as their session has automatically expired. We proceed similarly with so-called function cookies: while you are active on the website, certain functions, such as language options, are controlled and stored via cookies.
• Permanent or protocol cookies: A permanent or protocol cookie stores a file on your computer for the period of time specified in the expiration date. These cookies allow websites to remember your information and settings the next time you visit. This results in faster and more convenient access. When the expiration date passes, the cookie is automatically deleted when you visit the website that created it. Cookies are technically necessary and enhance the user-friendliness of a website.
• Tracking, targeting and analysis tools: The monitoring of user behavior often, but not exclusively, takes place with the help of so-called third-party cookies. These come from providers other than the operator of the website. They can be used to collect information for advertising, custom content and web statistics. These are cookies that are not technically necessary for the functions of a website.

Some elements of our website require that the calling server can be identified even after the page is changed. The cookies are deleted when the browser is closed. The cookie that stores the user's consent status for cookies or similar functions of the current domain remains in your terminal device for 30 days to remember the settings. Otherwise, the banner would escape smooth use of the website by repeated demand.

The legal basis for the processing of personal data using these technically necessary cookies is Art. 6 para. 1 p. 1 lit. e DS-GVO in conjunction with. § Section 3 (1) DSG NRW.

c) Use of "Matomo" for web analysis

This website uses "Matomo", a free web analysis software available at https://matomo.org/ under the GPL (GNU General Public License), which allows us to analyze the use of the website. Information generated by log files is transferred to a dedicated server of our hosting service provider, the Kommunales Rechenzentrum Minden-Ravensberg/Lippe (krz), and evaluated exclusively in-house. This information cannot be linked to individuals. We only use the data obtained to analyze and improve our web presence. The information is not used for advertising purposes or sold.

Your IP address is anonymized before it is stored. If you have set your browser so that your visit is generally not recorded by statistical software, "Matomo" respects this default setting. The legal basis for processing your data to analyze your user behavior is your voluntary and informed consent in accordance with Art. 6 (1) p. 1 lit. a DS-GVO.

d) Project clarification with the help of cookies

For the project clarification, which is also available to you on the business portal, we use a cookie to save your information in the mask and to determine the correct administrative procedures and responsibilities for your project. Stored are

• Nationality,
• location,
• postal code,
• content of the request,
• legal form and
• Number of employees of the planned project.

The data temporarily stored with the help of the cookie are deleted after seven days by the cookie losing its validity.

e) Chat Bot "Guido

With the help of the chat bot "Guido", a text-based dialog system available as a virtual assistant, you can ask your questions about business-related administrative services and receive an automated answer. You can enter a question in the dialog box and then click "send". To process and answer the received queries, the chatbot uses our knowledge bases and recognition patterns. To connect to you and your terminal, the chat bot uses functional cookies to save the conversation with you. This allows you to connect to it at a later time if necessary. After 24h the cookie loses its validity and the chat history is no longer available.

The chat bot "Guido" is based on the offer "GovBot" of publicplan GmbH and is hosted in the own data center of our IT service provider. The user data is thus protected against unauthorized access at all times.

The business-related administrative services that can be processed via the Business Service Portal are made available as a software solution in public authorities in North Rhine-Westphalia and self-governing bodies by the Ministry of Economic Affairs, Industry, Climate Protection and Energy of the State of North Rhine-Westphalia. The online services support the authorities using them in offering electronic application processes for citizens and companies. The online services process master data, procedural and communication data, and the other data requested from you. The data required is derived from the relevant laws.

The processing of your personal data within the portal is carried out for the implementation of the respective administrative service based on Art. 6 para. 1 p. 1 lit. e DS-GVO in conjunction with. § 14 para. 4 WiPG.

1. Intermediate storage
   

   After successful identification using a service account, the data entered in the application wizard is temporarily stored until it is sent to the competent authority. This allows the application to be continued at a later point in time. The data is also still available if there is an involuntary termination due to technical malfunctions or connection problems. The intermediate storage is based on Art. 6 para. 1 p. 1 lit. e DS-GVO in conjunction with. § 14 para. 4. p. 1 WiPG NRW. After four weeks, cached applications are automatically deleted.

2. Disclosure of data
   

   The processing of data within the framework of the online services to be handled via the portal is carried out with the corresponding agreed security requirements within the framework of commissioned processing by the service providers of the Minden-Ravensberg/Lippe Municipal Computer Center. The MWIDE remains responsible for the data processing.

The data collected by us will be transmitted to the respective competent authorities, such as regulatory agencies and other authorities, for the execution of the administrative service within the framework of the legal provisions. In trade notification procedures, the data required in each case will also be forwarded to the receiving authorities according to § 14 para 8 GewO (tax offices, DGUV, IHK, HWK, foreigners authority, customs, etc.), Art. 6 para 1 p. 1 lit. e DS-GVO in conjunction with. § 14 para. 4 p. 1 WiPG NRW. The data is automatically deleted from the portal if the data subjects do not use it for six months. If there is a declaration concluding the administrative procedure, the data will be deleted from the portal no later than three months thereafter. This does not affect the possibility of deleting the data yourself.

Data is stored by the responsible authorities for an unlimited period of time within the legally permissible framework. The responsibility of the respective authority for the specific implementation of the administrative procedure depends on the specialist law. For example, the trade office is the competent authority for registering a trade. The competent authority in terms of data protection law is responsible for the processing of personal data within the meaning of Art. 4 No. 7 in conjunction with Art. 13 and Art. 14 of the GDPR.

For your contact with the Ministry, we offer you - in addition to the already mentioned chat bot "Guido" -- further access options via contact forms or the use of e-mail addresses. If you use these contacts, personal data is entered on a voluntary basis. This applies, for example, to inquiries via e-mail or contact forms. Here, in addition to the data entered by you, a time stamp, user name and your IP address are stored. We use the personal data you enter only for the purpose you have requested and only within the state government or the authorities, departments and institutions entrusted with the respective service.

Persons under the age of 16 should not transmit any personal data to us unless the consent of their parents or guardians (holders of parental responsibility) has been given (Art. 8 (1) DS-GVO). The consent must then be explicitly noted in the message (Art. 8 (2) DS-GVO). We do not request personal data from children and young people. Knowingly, we do not collect such data.

We delete the personal data we receive by e-mail or contact form as soon as the storage is no longer required for the purpose you pursued or in connection with administrative processes triggered by it and the retention obligations applicable to them (Annex to the File Regulations for the Division of the Ministry of Economic Affairs, Industry, Climate Protection and Energy of the State of North Rhine-Westphalia (AktO); Circular of the Ministry of the Interior and Local Government - 51 - 17.05 -of July 25, 2016).

All e-mails sent from this website will only be sent to the address you provide. The address will not be published and will only be used for the purpose(s), service(s) or function(s) requested by you.

The legal basis for this processing of your personal data is Art. 6 para. 1 p. 1 lit. b DS-GVO.

The security of your personal data is an important concern for us. Comprehensive data protection agreements have been concluded with the service providers used for the website. For security reasons and to protect the transmission of confidential content, such as via our contact form, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Personal data is treated confidentially by us. We do not make your personal data available to third parties unless you have given your consent to do so or we are legally obliged to disclose the data. Data that has been logged when accessing the website of the Ministry of Economic Affairs or that has been collected for a special service will only be transmitted to third parties outside the state government if we are required to do so by law or by order of a court or public prosecutor, or if the transmission is necessary for legal or criminal prosecution in the event of attacks on the internet infrastructure of the state government.

Certain third party services are accessible through links on our site. We refer to the privacy statements and privacy policies on those websites. We do not assume any liability or responsibility for these statements and policies not related to our website.

You have the following rights under the GDPR regarding personal data concerning you:

• Right of access,
• Right to rectification,
• right to erasure,
• Right to data portability,
• Right to restriction of processing,
• Right to object to processing,
• Right to revoke consent given. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You also have the right to complain to a supervisory authority about the processing of your personal data.