Information in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) when collecting personal data
| Person responsible (Department/division/department, title, name, function, telephone, e-mail) | City of Bonn The Mayor of Bonn Health Department Infection Protection and Environmental Hygiene Telephone: 0228 77 3983 E-mail: amtsleitung.amt53bonnde |
| Data Protection Officer (Title, name, telephone, e-mail; postal address for external DPOs) | City of Bonn |
| Purpose(s) of data processing (Specification of the main tasks; e.g. issuing and withdrawing driving licenses) | Implementation of measures for the prevention and control of communicable diseases (§ 9 ÖGDG NRW), hygiene monitoring (§ 17 ÖGDG NRW) and environmental medicine (§ 10 ÖGDG NRW), in particular - Contacting, recording and tracing cases, contacts and event participants in the context of notifiable diseases, in particular in the context of measles; recording cases of non-compliance with the measles vaccination obligation in facilities, - Carrying out instructions in accordance with Section 43 of the Infection Protection Act (handling food) and issuing corresponding certificates, - Contacting, recording and inspecting practices and facilities to be monitored by the public health department, - Carrying out monitoring tasks in accordance with the Drinking Water Ordinance. |
| Essential legal basis/s (both in terms of substantive law and procedural and data protection law) | Art. 6 para. 1 lit. c, e) and Art. 9 para. 2 lit. b, h) GDPR in conjunction with Sections 6, 9, 10, 17 of the Public Health Service Act of the State of North Rhine-Westphalia (ÖGDG NRW), Infection Protection Act, Measles Protection Act, Drinking Water Ordinance and other laws and ordinances. |
| Recipients and categories of recipients of the data (as a rule) | Employees of the public health department and, if applicable, the public order office; externally: clients according to legal basis, if applicable other public health departments in the event of transfer of responsibility. |
| Duration of storage and retention periods (from legal provisions such as cash register, commercial and tax law or KGSt recommendations) | The public health department processes and stores the personal data to the extent necessary for the duration of the processing. After processing has been completed, the data collected by the public health department will be stored as required in accordance with the statutory retention and documentation obligations. Certificates of instruction in accordance with the Infection Protection Act must be kept for 10 years. Records of practice inspections must be kept for the duration of the practice's existence and for a period of 10 years after its closure. The data on the tracing of infectious diseases will be deleted for positive cases on January 1st of the 10th year following the last processing of the case, and for contact persons on January 1st of the 2nd year following closure. |
| Rights of the person concerned (general list, requirements) | Data subjects have the following rights if the legal and personal requirements are met:
|
| Competent supervisory authority (Name, postal address, telephone, e-mail, homepage) | State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Telephone 0211 - 384 24-0 Internet www.ldi.nrw.de (opens in a new tab) |