Privacy Policy


This Privacy Policy clarifies the nature, scope and purpose of the Processing of personal data (hereinafter referred to as “Data“) within our online offer Citizen and Business Service Lower Saxony and its associated websites, functions and content (hereinafter collectively referred to as the “Online Offer“). With regard to: the terms used, such as “processing“ or “processing“ “Responsible“ refers to the definitions in Article 4 of the General Data Protection Regulation (EU GDPR).

Identity of the Person Responsible

Lower Saxony Ministry of the Interior and Sport
Data Protection Officer
Schiffgraben 12
30159 Hannover
E-Mail:datenschutzbeauftragter@mi.niedersachsen.de
The Land of Lower Saxony is a body governed by public law. It is represented by the Prime Minister Stephan Weil.

Types of Data Processed

  • Contact details (e.g. names, e-mail, telephone numbers)

  • Content data (e.g. text input)

  • Usage data (e.g. websites visited, interest in content, access times)

  • Meta/communication data (e.g. device information, IP addresses)

categories of affected persons

Visitors and users of the online offer (hereinafter we describe the data subjects as “users“).

Purpose of Processing

  • Provision of the online offer, its functions and content

  • Responding to contact requests and communicating with users

  • Security measures

  • Range measurement

  • Optimization of the online offer

Relevant Legal Bases

We process personal data via our website on the basis of Article 6 (1) (a) and (e) EU GDPR. If you are able to Requests that you submit via contact form, form correspondence, the storage time of the data is based on the provisions of the Directive on the retention of records in the management of the State of Lower Saxony.

Cooperation with Processors and Third Parties

Insofar as we provide data to other persons within the scope of our processing, companies (processors or third parties) to make them available to transmit them or otherwise grant them access to the data, the this only on the basis of a legal permission if you have given your consent if a legal obligation so provides for it or if the processing for the performance of a task carried out in the public interest is necessary.
Insofar as we involve third parties with the processing of data on the basis of a so-called “Order Processing Contract“, this is done on the basis of the Article 28 of the EU GDPR.

Note on the Use of Contact Forms

If you enter data via a form within our online presence and transmit, you declare yourself by opt-in procedure by agree that we will provide your information in order to respond to your request within the state government and associated municipalities. The Data and information transmitted by you will be sent to the content of the ministries or municipalities responsible for your request. Your Concerns are made there by the persons responsible for the respective topic Edited.
In principle, a transfer to other third parties does not take place, data protection rules justify a transfer or we are legally obliged to do so. You can use your issued consent at any time, which then the answer to your request can make it impossible.

Anonymous Data Processing

In principle, personal data are not stored. For the use of individual interactive services on our site, you may different regulations. If you use such a service (such as e.g. contact forms, e-mail service) must be we process personal data to process your request. This includes information such as: Your name, phone number and/or Email address. For this processing of your personal data, at the appropriate location of our internet portal for your explicit consent.
As a rule, we process your personal data only in the scope, as you make it available to us via the Internet portal Make. If, exceptionally, further personal data are your request is required, you will be able to in addition to express consent.
When you visit the Internet offer, access dates and time of your visit to the website, technical information (version and name of the website browser and operating system, resolution of the monitor) as well as read Documents in the form of server log files. This access data are collected anonymously and are only used for statistical evaluations for the purpose of operation, safety and optimisation of our online offering Used. A reference to the data collected about the person of the user is Excluded. The name of the access provider is not saved.
When calling https://service.niedersachsen.de encryption method is used.

Web Analytics Services and Cookies

In service.niedersachsen.de, technologies from the company are used to Teleport, Saxony-Anhalt Data on web server monitoring and web page optimization purposes. The generated data on behalf of the provider of this website, Teleport will only use processed and stored in Germany and are therefore subject to the strict German and European data protection laws and standards. In the case of Cookies are small text files that are Cache of the website visitor's internet browser saved Be. The cookies enable the recognition of the internet browser. The use of such cookies enables a realistic statistical Capture page views and number of users. Aim of the range measurement is to statistically reduce the use of websites Evaluate. At no time are individual users identified. Your Identity is always protected. You will not receive any Advertising. Through the survey, we want to improve the usability and content of the constantly improve service.niedersachsen.de or to the actual adapt user interest.
The data processing takes place on the legal basis of Art. e (public interest) of the EU General Data Protection Regulation (GDPR). There the privacy of our visitors is particularly important to us, the IP address anonymises and login or device identifiers are used to unique but not assigned to a person key. Any other use, merging with other data, or Disclosure to third parties is not carried out.

Handling Cookies

“Cookies“ are small files that are stored on users' computers stored. Within the cookies, different information can be stored. A cookie is primarily used to provide the information about a user (or the device on which the cookie is stored) during or during the even after his visit within an online offer. As temporary cookies, or “session cookies“ or “transient cookies“, are cookies that are deleted after a user has online offer and closes its browser. In such a cookie e.g. the contents of a shopping cart in an online shop or a login jams. As “permanent“ or “persistent“ cookies that are also stored after the browser has been closed. Stay. For example, the login status can be saved if the users visit them after several days. Similarly, in such a cookie, the interests of the users, which are used for the measurement of range used. As a “third-party cookie“, cookies are used by other providers as the person responsible for operating the online offer, offered (otherwise, if it is only its cookies, you can speak “First-Party Cookies“). We may use temporary and permanent cookies and clarify this within the scope of our data protection declaration. If users do not want cookies to be stored on their computer, they will be asked to use the appropriate option in the system settings of your browser. Saved cookies can be deleted in the browser's system settings. The Exclusion of cookies may result in functional limitations of this online offer.

Right of Withdrawal

You have the right to give consents in accordance with Article 7(3) of the EU GDPR with effect for the future.

Right of Objection

You can, in the future processing of the data concerning you, article 21 of the EU GDPR at any time.

Deletion of Data

The data collected and processed by us will be processed according to the type. 17 and 18 EU GDPR deleted or restricted in its processing. Unless expressly stated in the context of this Privacy Policy, the data stored by us will be deleted as soon as it is purpose are no longer necessary and the deletion of the statutory retention obligations. If the data is not be deleted because they are used for other and legally permissible purposes. Necessary, their processing is restricted, i.e. the data is are blocked and not processed for any other purpose.

Rights of Data Subjects

You have the right to request confirmation of whether you relevant data are processed, if necessary on access to information about such data. As well as further information and copy of the data in accordance with Article 15 of the EU GDPR.
You do have the right. Article 16 of the EU GDPR has the right to Completion of the data concerning you or the correction of the relevant incorrect data. However, only the data which is sent to us in the form of a contact form request. Be. These are deleted after replying and are irretrievable Lost. A change is therefore not possible.
In accordance with Article 17 of the EU GDPR, you have the right to require: data concerning you will be deleted immediately, or alternatively after Article 18 GDPR restricts the processing of the data to Require.
You have the right to request that the data concerning you that you have been provided to us in accordance with Article 20 of the EU GDPR and request their transmission to other controllers. Your Contact form enquiries or emails are always sent to the person responsible for your position. The Ministry of Home Affairs and Sport preserves these data does not click on, but deletes after transmission.
In accordance with Article 77 20 of the EU GDPR, you also have the right to supervisory authority if you believe that the processing of personal data concerning you is not lawfully Is.
Information about the stored data is provided by the online editorial team in the Lower Saxony Ministry of Home Affairs and Sport:
Lower Saxony Ministry of Home Affairs and Sport
Please note that data protection regulations and handling of the data protection. In the course of the further development of our Internet sites and the implementation of new technologies can also be changes to this Privacy Policy. It is therefore advisable and necessary to be aware of changes in the legal regulations, privacy statements and the practice of commercial service providers, such as Twitter Inc., on an ongoing basis.

Privacy policy of the National Feedback Component

As of: 04.12.2023

The Federal Ministry of the Interior and for Home Affairs informs you here about the processing of personal data when using the National Feedback Component (NFK). Your feedback will be forwarded anonymously to the EU Commission. On the basis of Art. 25 of Regulation (EU) 2018/1724, we are obliged to report feedback on our online services to the Commission. Personal data is not processed in the process. Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

1. Information on the processing of personal data


The controller pursuant to Article 4(1)(7) and Article 26 of the General Data Protection Regulation (GDPR) is

Federal Ministry of the Interior and for Home Affairs (BMI)
Unit DV II 3
Alt-Moabit 140
10557 Berlin
Tel: +49 (0)30 18 681-0
E-Mail: poststelle@bmi.bund.de
DE-Mail: poststelle@bmi-bund.de-mail.de

If you have any questions about the protection of your data, please contact the data protection officer:

Data protection officer
Federal Ministry of the Interior and for Home Affairs
Alt-Moabit 140
10557 Berlin
Tel: +49 (0)30 18 681-0
E-Mail: bds@bmi.bund.de

We act as a processor:

]init[ Public limited company for digital communication
Köpenicker Straße 9
10997 Berlin
Fon: +49 30 97006 0
E-Mail: init@init.de

The Federal Information Technology Center (ITZBund) is the processor and operator of the National Feedback Component:

Federal Information Technology Center
Bernkasteler Straße 8
53175 Bonn
Tel: +49 (0) 22899 680-0
E-Mail: poststelle@itzbund.de

An agreement on order processing in accordance with Article 28 GDPR has been concluded with the processors.

2. Collection and storage of personal data

When using the Internet offer

Every time the website (platform with input mask) is accessed, data about this process is temporarily processed in a log file. In detail, the following personal data is stored for each access or retrieval:

  • Date and time of retrieval (timestamp),

  • IP address of the accessing device or server,

  • Request details and destination address (protocol version, HTTP method, referrer, user agent string),

  • Name of the retrieved file and transferred data volume (requested URL incl. query string, size in bytes) and

  • Message indicating whether the request was successful (HTTP status code).


Optionally, a free text field can be integrated. This free text field is provided with the note that no personal data within the meaning of Art. 4 (1) GDPR will be collected.

3. Legal basis and purpose of processing

The BMI is obliged on the basis of Article (Art.) 6(1)(c), (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 of the Federal Data Protection Act (BDSG); Section 5 of the BSI Act to store data to protect against attacks on the BMI's internet infrastructure and the federal government's communications technology beyond the time of your visit. This data is analyzed and, in the event of attacks on the communications technology, is required to initiate legal and criminal prosecution. The data will be deleted after a maximum of 90 days.

The sole purpose of processing your personal data is to ensure the functionality of the federal government's IT systems or those of its service providers.

Your feedback, on the other hand, is processed anonymously during evaluation. This means that the entries you make will not be processed together with your personal data and, in particular, will not be forwarded to the relevant authority to which you provide feedback. It is not possible to draw any conclusions about your person from your answers. Please ensure that you do not enter any personal data in free text fields. Your personal data will only be processed for the stated purpose. The processing of the above-mentioned personal data is necessary for this purpose.

Personal data of employees of the public bodies using the NFK are processed on the basis of Art. 6 para. 1 lit. b GDPR and stored for the duration of the contract.

4. Storage duration

The above-mentioned personal data will be completely deleted after a maximum of 90 days.

5. Use of cookies

The form does not use cookies.

6. Rights of the data subjects

You have the following rights vis-à-vis the BMI with regard to your personal data:

  • Right to information, Art. 15 GDPR
    The right of access gives data subjects comprehensive insight into the data concerning them and some other important criteria, such as the purposes of processing or the duration of storage. The exceptions to this right set out in Section 34 BDSG apply.

  • Right to rectification, Art. 16 GDPR
    The right to rectification includes the possibility for the data subject to have incorrect personal data concerning them corrected.

  • Right to erasure, Art. 17 GDPR
    The right to erasure includes the possibility for the data subject to have data erased by the controller. However, this is only possible if the personal data in question is no longer necessary, is being processed unlawfully or consent has been withdrawn. The exceptions to this right set out in Section 35 BDSG apply.

  • Right to restriction of processing, Art. 18 GDPR
    The right to restriction of processing includes the possibility for the data subject to prevent further processing of the personal data concerning them for the time being. A restriction occurs primarily in the review phase of other rights exercised by the data subject.

  • Right to object to the collection, processing and/or use, Art. 21 GDPR
    The right to object includes the possibility for data subjects to object to the further processing of their personal data in a particular situation, insofar as this is justified by the performance of public tasks or public and private interests. The exceptions to this right set out in Section 36 BDSG apply.

  • Right to data portability, Art. 20 GDPR
    The right to data portability includes the possibility for the data subject to receive the personal data concerning him or her in a commonly used, machine-readable format from the controller in order to have it forwarded to another controller if necessary. According to Art. 20 para. 3 sentence 2 GDPR, however, this right is not available if the data processing serves the performance of public tasks.


You can assert the aforementioned rights in writing using the contact details given in section 1.

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the data protection supervisory authority, the Federal Commissioner for Data Protection and Freedom of Information (BfDI), Graurheindorfer Str. 153, 53117 Bonn, telephone: +49 (0)228 997799-0, www.bfdi.bund.de.

You can also contact the above-mentioned data protection officer at any time with questions and complaints.

Contact Details of the Data Protection Officer

Lower Saxony Ministry of Home Affairs and Sport
The Data Protection Officer
Schiffgraben 12
E-Mail: datenschutzbeauftragter@mi.niedersachsen.de

Supervisory Authority

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
E-Mail: poststelle@lfd.niedersachsen.de