Data Protection

Data controller

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-0

E-mail: info@sk.sachsen.de

Data protection officer

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-11310

E-mail: datenschutz@sk.sachsen.de

The www.sachsen.de website uses essential cookies to ensure the functionality of the site. With your consent, additional cookies are used for convenience features and for services provided by social media platforms. Essential cookies are stored and accessed without your consent based on Section 25 (2) sentence 2 of the German Telecommunications-Telemedia Data Protection Act (TDDDG).

Technically essential cookies

The www.sachsen.de website uses its own cookies (required cookies) to ensure the proper function of the site. These required cookies and scripts are technically necessary to maintain the core functionalities of the website. For this reason, required cookies are executed even without your
consent.

This includes the following cookies and scripts:

Required cookies

Cookie/script	Description
JSESSIONID	Ensures proper function of the Sachsen.de web server, such as displaying the weather widget
privacy_modal	Displays the data protection notice and stores consent preferences

Functional cookies

In addition to technically necessary cookies, cookies are also used for certain user-friendly features on www.sachsen.de. This includes the following cookies and scripts:

• increasing contrast
• adjusting font size

Social media usage

Usage information is transmitted to these services and may be processed there when using content on our pages provided by social networks (Facebook, Instagram, X, YouTube). These services may also store their own cookies on your device.

Storage duration

Cookies remain stored for up to three months. Cookies are deleted automatically from the servers after this period. If consent is withdrawn, cookies will be deleted immediately.

Certain data is processed to ensure website functionality and to investigate unauthorised access attempts, in accordance with Article 6(1)(f) of the GDPR. This includes:

• IP address of the requesting host,
• date and time of the request,
• client software of the requesting device, i. e. usually the browser type and the desired 
• access method/function,
• transmitted input values, such as target files,
• web server response, (e. g. file transferred, file not found, command not executed) and the name of the requested file.

Our legitimate interest is to provide a fully functional and seamless online service.

Data is stored in log files and deleted as soon as any technical issues are resolved or unauthorised access / access attempts are investigated.

The data will only be transferred to third parties if there is a legal obligation to do so or if it is necessary for legal or criminal prosecution in the event of attacks on the Internet infrastructure of the Free State of Saxony. Data will not be passed on in other cases.

If the legal requirements are met, you are entitled to the following rights under the General Data Protection Regulation:

• Right of access to personal data concerning you (Article 15 of the General Data Protection Regulation)
• Right to rectification of inaccurate personal data concerning you (Article 16 General Data Protection Regulation)
• Right to erasure of personal data (Article 17 General Data Protection Regulation)
• Right to restriction of processing of personal data (Article 18 General Data Protection Regulation)
• Right to object to the processing of personal data (Article 21 General Data Protection Regulation)

Additionally, under Article 77 of the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

Postal address:
Der Sächsische Datenschutzbeauftragte
Kontor am Landtag
Devrientstraße 1
01067 Dresden

We maintain an active presence on Facebook, X, Instagram, YouTube, and LinkedIn.

We process data from individuals who interact with us on these platforms to fulfil editorial and communication tasks. This requires temporary data storage. The data is stored on a server located within the European Union and includes the following: a profile and account name, profile picture, content of the inquiry, number of followers and followed profiles, and most recent posts or tweets. The data is retained for six months.

Data is processed based on Article 6(1)(e) of the General Data Protection Regulation in conjunction with Section 3 of the Saxon Data Protection Implementation Act. We process the personal data you provide in order to handle your request.

Please note that social network operators store user data, such as personal information and IP addresses, according to their own data usage policies and use it for business purposes. We have no influence over their data collection practices or how they use the data. In particular, we do not have insight into the scope, location, or duration of data storage, whether deletion obligations are fulfilled, what analyses or connections are made, or with whom the data is shared.

Information about data processing by Facebook can be found in Facebook’s privacy policy.

Information about data processing by X can be found in X’s privacy policy.

Information about data processing by Instagram can be found in Instagram’s privacy policy.

Information about data processing by YouTube can be found in Google’s privacy policy.

Information about data processing by LinkedIn can be found in LinkedIn’s privacy policy.

The contact details of the data protection officers for the individual state ministries and subordinate authorities can be found on the respective website.

Organisation of the Saxon State Administration

The sachsen.de website publishes image and sound recordings from public and private events in which the authorities of the Free State of Saxony have played a significant role.

At these events, participants are regularly informed that image and sound recordings may be made and used for public relations purposes. This applies in particular to publications on sachsen.de, so-geht-sächsisch.de, medienservice.sachsen.de, the social media channels of the Saxon State Government (Facebook, X, Instagram, YouTube), and in print media such as brochures, press releases, and presentations. Every participant has the right to object at any time, on grounds relating to their particular situation, to the recording of images or sound concerning them personally. Objections must be communicated to the person making the recording either on-site or afterwards.

Data controller

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-0

E-mail: post@sk.sachsen.de

Data Protection Officer

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-11330

E-mail: datenschutz@sk.sachsen.de

To organise and manage events, the administrative office of the »Day of the Saxons« uses various invitation mailing lists that include personal data in order to invite people to participate in the events.

By registering for an event, you consent to your personal data being stored in the invitation distribution list of the »Day of the Saxons« administrative office and used for organising and managing events as part of the »Day of the Saxons«. Information in accordance with Articles 13 and 14 of the General Data Protection Regulation on the processing of your personal data at events as part of the »Day of the Saxons« can be found in the »Data Protection Information« document. The above information on film and photo recordings also applies to the »Day of the Saxons«.

To organise and manage events, the administrative office of the »State Prevention Council« uses various invitation mailing lists that include personal data in order to invite people to participate in the events.

By registering for an event, you consent to your personal data being stored in the administrative office of the State Prevention Council and used for organising and managing events. Information in accordance with Articles 13 and 14 of the General Data Protection Regulation on the processing of your personal data at events of the State Prevention Council can be found in the »Data Protection Information« document. The above information on film and photo recordings also applies to these events.

The personal data processed within the scope of the online application only with your consent, includes your email address, a freely selectable login name and a password. This information is required for your registration if you wish to set up a user account. Depending on the legal basis for conducting a specific participation procedure, your address may be required. This is then stored solely for the specific procedure. You also have the option to store your address in your user profile to make it easier to reuse in future procedures. Depending on the type of participation procedure offered, you may be able to participate anonymously or after registering and logging in.

By registering, you consent to the described processing of your data. Consent is granted by ticking the box in the designated field.

The data mentioned is processed based on Article 6(1)(a) GDPR, according to your granted consent, as well as on the basis of Article 6(1)(e) GDPR, for the performance of tasks in the public interest by the Free State of Saxony.

After registering, you will receive an additional confirmation message. This registration system with an additional confirmation message ensures that no third party can register under your email address and that the registration is explicitly requested by you. If you forget your password, a new password will be sent to your email address upon request. Only the user name you choose will be visible in the Participation Portal. You are responsible for keeping the password required for registration confidential.

In addition to the publication of your user name and the contributions, comments, images, and video messages you post under your user name, your activity will also be displayed in the Participation Portal. This includes information about when you registered, the last time you were active, and the number of your posts and comments.

The Free State of Saxony automatically collects and stores data (log file information) that your browser transmits to the server. Please see Section 2 of the »General Privacy Policy« for more information.

Data logged during access to the Participation Portal will only be transmitted to third parties if there is a legal obligation to do so or an obligation justified by a court decision, or if disclosure is necessary for legal or criminal prosecution in the event of attacks on the Internet infrastructure of the Free State of Saxony. No further disclosure will take place except in the cases described above.

If the legal requirements are met, you are entitled to exercise the rights referred to in para. 4 of the »General Privacy Policy«. Moreover, because you have granted consent to the processing of your personal data, you have the right to data portability in accordance with Article 21 of the General Data Protection Regulation and the right to revoke your consent in accordance with Article 7 of the General Data Protection Regulation. You can also delete your profile at any time. In this case, all your personal data will be deleted.

However, please note: Posts and comments published under your username will not be deleted. These remain permanently accessible, as they are required for legal and procedural documentation. These posts and comments are stored solely in connection with the specific procedure and statement.

Children and individuals under the age of 18 should not transmit any personal data through the Participation Portal without the consent of their parents or legal guardians.

The Participation Portal may include content from external sources, such as video messages from YouTube or geospatial data from external geospatial information systems. Please be aware that the Free State of Saxony has no control over whether the providers of these external websites comply with applicable data protection regulations. The same applies to the social media plug-ins currently in use. Facebook, X.

• YouTube’s privacy policy
• Facebook’s privacy policy
• X’s privacy policy

Each user can create a personal user account. When you place an order via the central publication database of the Free State of Saxony at the email address publikationen@sachsen.de, we request: your name, address or email address. We process this data solely to correspond with you and for the specific purpose for which you provided it. If you place frequent orders via the webshop, you can also enter your delivery and billing address to facilitate the ordering process. By registering, you consent to the processing of your data as described. Many publications can be downloaded for free as PDF files from the article detail pages without requiring a user account.

We only share your data with the shipping company commissioned with delivery, the Central Brochure Dispatch Centre of the Saxon State Government, where required for shipping. We also transmit your payment details to the financial institution processing the payment. If applicable to your order, we process additional personal data in accordance with Section 8 of the Saxon E-Government Implementation Ordinance.  This may include your: company name, VAT number, business registration number, address (street, house number, postcode, city), county, country, and any alternative delivery address if different from your own. We also process order-related data such as the order date, status, item description, quantity, unit price, total price, payment method, and customer number. If relevant, we process payment details, including the SEPA mandate reference, checkout reference, IBAN, and BIC.

This data is processed based on Article 6(1)(a) General Data Protection Regulation, according to your granted consent, as well as based on Article 6(1)(e) of the General Data Protection Regulation, for the performance of tasks in the public interest by the Free State of Saxony.

The Free State of Saxony automatically collects and stores data (log file information) that your browser transmits to the server. Please see Section 2 of the »General Privacy Policy« for more information.

Your data will only be transmitted to third parties for purposes other than those mentioned above if there is a legal obligation to do so or if it is necessary for legal or criminal prosecution in the event of attacks on the Internet infrastructure of the Free State of Saxony. Data will not be passed on in other cases.

If the legal requirements are met, you are entitled to exercise the rights referred to in para. 4 of the »General Privacy Policy«. If you have created a personal user account, you can delete it yourself at any time under the »User account/logout« section. All user account data provided by you in advance will then be removed from the system.

Moreover, because you have granted consent to the processing of your personal data, you have the right to data portability in accordance with Article 21 of the General Data Protection Regulation and the right to withdraw your consent in accordance with Article 7 of the General Data Protection Regulation.

Note: Data for billing and accounting purposes are not affected by cancellation or deletion. Where retention periods under commercial and tax law apply, certain data may be retained for up to 10 years.

The website may contain links to external sources. Please be aware that the Free State of Saxony has no control over whether the providers of these external websites comply with applicable data protection regulations. The same applies to the social media plug-ins currently in use: Facebook, X.

• Facebook’s privacy policy
• X’s privacy policy

The personal data processed within the scope of the online application only with your consent includes your email address, a freely selectable login name and a password. This information is required for your registration if you wish to set up a user account. If you apply to deregister or re-register your vehicle, the personal data from your electronic identity card or electronic residence permit will be processed for this purpose.

Additional data may be collected during the registration process, depending on the administrative requirements. This includes: your first name, surname, street, house number, postcode, and city. This data is automatically pre-filled in the relevant fields of the electronic administrative system used for online applications. Providing this additional data is optional. It is not required to create a user account.

If you choose not to save this data, you will need to enter it manually into the data entry fields each time you submit an electronic application (e.g. in the Online Trade Notification and ELBA.Sax systems). You can view and update your saved data at any time under »My Profile«. In the »My Applications« section, you can access all saved (unsubmitted) and submitted applications. They may contain personal data.

By registering, you consent to the described processing of your data. Consent is granted by ticking the box in the designated field.

The data mentioned is processed based on Article 6(1)(a) GDPR, according to your granted consent, as well as on the basis of Article 6(1)(e) GDPR, for the performance of tasks in the public interest by the Free State of Saxony.

After creating the user account, you will receive an additional confirmation message with an activation link, except in the specialised iKfZ procedure. This registration system with an additional confirmation message ensures that no third party can register under your email address and that the registration is explicitly requested by you. If you forget your password, a new password will be sent to your email address upon request. You are responsible for keeping the password required for registration confidential.

Your personal data will only be processed and used if this is necessary and you have granted your consent. Your data will not be used for any other purpose.

The Free State of Saxony automatically collects and stores data (log file information) that your browser transmits to the server. Please see Section 2 of the »General Privacy Policy« for more information.

Data that is logged when accessing and using the procedures implemented through the online application for application management will only be transmitted to third parties if there is a legal obligation or court order to do so, or if the transfer is necessary for legal or criminal prosecution in the event of attacks on the internet infrastructure of the Free State of Saxony. Data will not be passed on in other cases.

If the legal requirements are met, you are entitled to exercise the rights referred to in para. 4 of the »General Privacy Policy«. Moreover, because you have granted consent to the processing of your personal data, you have the right to data portability in accordance with Article 21 of the General Data Protection Regulation and the right to withdraw your consent in accordance with Article 7 of the General Data Protection Regulation.

All data that you transmit as part of the online application management is protected by a secure encryption process. The servers are also protected against unauthorised use. To protect the data to be processed, the online application works with the measures for securing data processing systems in accordance with the IT baseline protection standards of the Federal Office for Information Security.

Cookies help to improve your experience on this website by making it easier to use and more personalised. Cookies are small text files stored in your browser’s memory on your device. Cookies cannot run programs or transmit viruses to your computer. Their purpose is to enhance the website’s usability and efficiency. They allow your browser to be recognised – provided cookies are enabled in your browser settings. You can find instructions on how to delete cookies in your browser’s help menu.

Session cookies are used to ensure the functionality of the application and to check whether cookies are allowed. These cookies are automatically deleted at the end of your session. No individual profiling of your usage behaviour takes place.

YouTube services have been integrated into the online application. Please note that the Free State of Saxony has no influence on whether this website or the operators of other websites comply with the applicable data protection regulations.

YouTube’s privacy policy

Enabling automated access to media information and use of the services offered under »My Media Service“.

Data controller

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-0

E-mail: info@sk.sachsen.de

Data protection officer

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-11310

E-mail: datenschutz@sk.sachsen.de

Article 6(1)(a) GDPR

State Chancellery of Saxony

From registration until access is cancelled

• Article 15 GDPR: Right of access
• Article 16 GDPR: Right to rectification
• Article 17(1) GDPR: Right to erasure
• Article 18 GDPR: Right to restriction of processing
• Article 20 GDPR: Right to data portability
• Article 21 GDPR: Right to object
• Article 77 GDPR: Right to lodge a complaint with a supervisory authority

Under Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the legality of any processing that took place before the withdrawal.

Data controller

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-0

E-mail: info@sk.sachsen.de

Data protection officer

Postal address:
Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

Phone: +49 351 564-11310

E-mail: datenschutz@sk.sachsen.de

We only send newsletters, as outlined under »Newsletter Overview« on sachsen.de, with the recipient's consent.

To subscribe to the newsletter, simply enter your email address. Providing your surname, first name, and title is optional and serves only to personalise the newsletter.

Once you submit the form, you will receive an email with a confirmation link (double opt-in). Clicking this link confirms your consent and completes the registration. This confirmation ensures that no one can register with a third-party email address.

If you do not confirm your consent via the link within 14 days of submitting the form, all data entered during the registration process will be deleted.

To verify valid consent, the following data will be stored after successful registration:

• email address,
• URL from which the registration form was submitted,
• IP address from which the registration form was submitted,
• IP address from which the confirmation link was clicked,
• time of registration,
• time of confirmation,
• fields and lists queried in the form and
• subscriber ID once registration is confirmed.

This data is stored in a user profile for the duration of your consent, so we can demonstrate consent in compliance with data protection regulations. If you withdraw your consent, this data will be deleted immediately.

We also monitor the server-side response from your email provider to prevent incorrect mailings. This applies when a newsletter fails to be sent due to temporary reasons (soft bounce, e.g., full mailbox) or permanent reasons (hard bounce, e.g., email address does not exist).

The data processing described above is carried out on behalf of the State Chancellery of Saxony by mailingwork GmbH, located at Schönherrstraße 8, 09113 Chemnitz. This is governed by an order data processing contract between the parties in accordance with Articles 28 and 29 of the EU General Data Protection Regulation. Under this contract, mailingwork GmbH commits to protecting user data and processing it in line with data protection regulations on behalf of the State Chancellery of Saxony, and in particular, not to disclose it to third parties. All data is stored exclusively on servers within the Federal Republic of Germany, which are protected against unauthorised access. ISO 27001 certifications are available and can be viewed at mailingwork.de/datenschutzmanagement.

You can withdraw your consent to receive newsletters at any time by clicking the »Unsubscribe« link in the newsletter. Once you unsubscribe, you will no longer receive newsletters, and all your personal data will be immediately deleted from the system. Your email address will be kept on an unsubscribe list as proof of successful cancellation and for any necessary restoration of your user profile, and will be removed from the system after 14 days. The legality of any processing carried out based on your consent prior to cancellation remains unaffected.

You are entitled to the following rights if the legal requirements are met:

• Right of access to personal data concerning you (Article 15 General Data Protection Regulation)
• Right to rectification of inaccurate personal data concerning you (Article 16 General Data Protection Regulation)
• Right to erasure of personal data (Article 17 General Data Protection Regulation)
• Right to restriction of processing of personal data (Article 18 General Data Protection Regulation)
• Right to object to the processing of personal data (Article 21 General Data Protection Regulation)

In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

Postal address:
Der Sächsische Datenschutzbeauftragte
Kontor am Landtag
Devrientstraße 1
01067 Dresden

Sächsische Staatskanzlei
Archivstraße 1
01097 Dresden

E-Mail: Personalreferat@sk.sachsen.de
Telefon: 0351/564 - 11001

Behördliche Datenschutzbeauftragte der Sächsischen Staatskanzlei

E-Mail: datenschutz@sk.sachsen.de
Telefon: 0351/564 - 11310
 

Ensuring the protection of whistleblowers who have obtained information about violations in connection with their professional activities and report these to the SC's internal reporting office, as well as the protection of the persons who are the subject of the report and other persons affected by a report. The tasks of the internal reporting office consist of operating the reporting channels in accordance with Section 16 HinSchG, conducting the procedure in accordance with Section 17 HinSchG and taking follow-up measures in accordance with Section 18 HinSchG.

An internal reporting office has been set up in the SC on the basis of Section 12(1) HinSchG, which is responsible for the SC at the Dresden and Berlin locations and for the subordinate state-owned company, Sächsische Informatikdienste.  Pursuant to Section 10 HinSchG, the internal reporting office is authorised to process personal data as necessary to fulfil the tasks specified in Section 13 HinSchG.  The same applies to the processing of special categories of personal data in accordance with Art. 9 GDPR.

The data will be transmitted to:

• SC Unit 13 (internal reporting office) and, if applicable, SC Unit 11
• law enforcement authorities, administrative authorities, and the courts, if necessary
• external federal government reporting centres, where applicable
• Data is not transferred to third countries or international organisations.

Documentation is deleted three years after completion of the procedure in accordance with Section 11(5) HinSchG. However, retention may be extended if necessary and proportionate to meet the requirements of the HinSchG or other applicable legal provisions.

You are entitled to the following rights if the legal requirements are met:

• Right of access to personal data concerning you (Article 15 of the GDPR)
• Right to rectification of inaccurate personal data concerning you (Article 16 GDPR)
• Right to erasure of personal data (Article 17 GDPR)
• Right to restriction of processing of personal data (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to the processing of personal data (Article 21 GDPR)

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

Supervisory authority:

The Saxon Data Protection and Transparency Officer
Devrientstraße 5
01067 Dresden

The provision of personal data is neither legally required nor contractually agreed.