Privacy policy of Stadtwerke Rodgau

II Data Protection Officer

Schüllermann Dataservice GmbH

Robert-Bosch-Str. 5
63303 Dreieich

E-mail: sds@schuellermann.de

III General information on data processing

1. purposes and legal bases

The city of Rodgau, as the operator of this website, takes the protection of your personal data very seriously. We ensure that the applicable data protection regulations - in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act, the Hessian Data Protection and Freedom of Information Act (HDSIG) and other data protection laws - are always observed. In addition, we have taken comprehensive technical and organisational measures to protect your personal data in order to ensure its security and confidentiality.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. In principle, we process your personal data to fulfil our public tasks and to provide this website for the purpose of public relations. The legal basis for this is in particular Art. 6 para. 1 lit. e GDPR in conjunction with. § Section 3 (1) HDSIG.

Please note that the transmission of data on the Internet (e.g. when communicating by e-mail) always harbours security risks. Complete protection against access by unauthorised third parties is not technically possible.

If you would like to send us confidential information, we recommend that you use the secure method of contacting us during our office hours, by telephone or by post.

2. hoster

We use carefully selected service providers for the technical provision of our website and for certain functions. We have concluded order processing contracts with these service providers in accordance with Art. 28 GDPR to ensure the protection of your personal data. The service providers act exclusively in accordance with our instructions and are subject to strict contractual obligations with regard to confidentiality, data security and data protection.

3. third country transfer

Integrated third-party providers (e.g. YouTube, Vimeo, OpenStreetMap in some cases) may transfer data to third countries (e.g. USA/UK). These countries do not have a level of data protection comparable to that in the EU. It cannot be ruled out that government agencies may access data without you being entitled to effective legal remedies. These services are only integrated after you have given your consent via our consent tool.

1. General information on data processing
   1. Purposes and legal bases

The city of Rodgau, as the operator of this website, takes the protection of your personal data very seriously. We ensure that the applicable data protection regulations - in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act, the Hessian Data Protection and Freedom of Information Act (HDSIG) and other data protection laws - are always observed. In addition, we have taken comprehensive technical and organisational measures to protect your personal data in order to ensure its security and confidentiality.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. In principle, we process your personal data to fulfil our public tasks and to provide this website for the purpose of public relations. The legal basis for this is in particular Art. 6 para. 1 lit. e GDPR in conjunction with. § Section 3 (1) HDSIG.

Please note that the transmission of data on the Internet (e.g. when communicating by e-mail) always harbours security risks. Complete protection against access by unauthorised third parties is not technically possible.

If you would like to send us confidential information, we recommend that you use the secure method of contacting us during our office hours, by telephone or by post.

4. storage duration

We only process data for as long as is necessary for the respective purpose or for as long as statutory retention periods apply. Specific time limits are specified in the section on individual processing operations.

5 Automated decisions/profiling

There is no exclusively automated decision-making within the meaning of Art. 22 GDPR.

6. SSL or TLS encryption

This site uses SSL or TLS encryption for the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line

IV. Your rights

If your personal data is processed, you as the data subject have the following rights vis-à-vis the controller within the meaning of the GDPR:

1. right to information in accordance with Art. 15 GDPR

In accordance with Art. 15 GDPR, you have the right to check the lawfulness of the processing of your personal data and to request information about it, in particular which personal data is processed for which purpose and which categories. You also have the right to information about the recipients and the storage period and, if applicable, about the transfer of personal data to third countries or to an international organisation. In addition, you can request information, in particular about the existence of a right to rectification, erasure, restriction or objection to the processing of personal data, the existence of a right to lodge a complaint, the origin of your personal data if it was not collected from the data subject.

2. right to rectification in accordance with Art. 16 GDPR

In accordance with Art. 16 GDPR, you have the right to request the correction of your stored incorrect personal data and, taking into account the purposes of the processing, the completion of incomplete personal data.

3. right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR

Furthermore, in accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us if one of the following reasons applies:

• The necessity of the processing to achieve the purpose no longer exists.
• You have withdrawn your consent and there is no other legal basis.
• You have objected to the processing pursuant to Art. 21 (1) or (2) GDPR; in the case of Art. 21 (1), this only applies if there are no overriding legitimate grounds for the processing.
• The personal data was processed unlawfully.
• The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
• The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

4. right to restriction of processing in accordance with Art. 18 GDPR

According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if one of the following conditions is met:

• You dispute the accuracy of your personal data.
• The processing of personal data is unlawful; you request the restriction of the use of your personal data instead of erasure.
• The controller no longer needs the personal data for the purposes of the processing, but you as the data subject require them for the establishment, exercise or defence of legal claims.
• You as the data subject have lodged an objection pursuant to Art. 21 (1) GDPR.

5. right to data portability pursuant to Art. 20 GDPR

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

6. right to object to processing in accordance with Art. 21 GDPR

Pursuant to Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

7. revocation of consent for the processing of your personal data

If you have given us your consent to process your personal data in accordance with Art. 7 GDPR, you can revoke this consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. Such a revocation affects the permissibility of the processing of your personal data after you have given us your revocation. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. You can send your revocation by e-mail or by post using the address given above.

8. right to lodge a complaint pursuant to Art. 77 GDPR

If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you as the data subject have the option of complaining to the competent supervisory authority in accordance with Art. 77 GDPR.

In principle, you can contact the supervisory authority in the Member State in which you as the data subject have your habitual residence or place of work or the supervisory authority of our registered office or the place of the alleged infringement:

The Hessian Commissioner for Data Protection and Freedom of Information

Postal address:

P.O. Box 31 63
65021 Wiesbaden

On-site:

Gustav-Stresemann-Ring 1
65189 Wiesbaden

Phone +49 611 1408 0
Fax +49 611 1408 611

E-mail address: poststelle@datenschutz.hessen.de

V. Hosting

Our website is hosted by ekom21 - KGRZ Hessen. There are corresponding order processing contracts with ekom21.

VI General data processing when visiting the website

1. server log data

When you visit our website, your personal data may be processed. When you use the website for information purposes, so-called "log data" is processed: This means that when you visit our website, a so-called log data record (so-called server log files) is stored temporarily and anonymised on our web server. This consists of:

• the page from which the page was requested (so-called referrer URL)
• the name and URL of the requested page
• the date and time of the call
• the description of the type, language and version of the web browser used
• the IP address of the requesting computer
• the amount of data transferred
• the operating system
• Information about the browser type and version used (language and version of the browser software)
• the message whether the call was successful (access status/Http status code)
• the GMT time zone difference

We process the personal data specified above in accordance with the provisions of the GDPR, the other relevant data protection regulations and only to the extent necessary.

The log data is processed for statistical purposes and to improve the quality of our website, in particular the stability and security of the connection. The legal basis for this is our mandate to inform citizens in accordance with Art. 6 para. 1 sentence 1 lit. e GDPR in conjunction with Art. 3 para. 1 HDSIG. § Section 3 (1) HDSIG

2. cookies and consent management (CMR21)

Our website uses so-called "cookies". Cookies are small data packets and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party providers within our websites (e.g. to display maps, to integrate videos or for statistical reach measurement).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the login function or the display of videos). Other cookies can be used to analyse user behaviour or for advertising purposes

For cookies/technologies that are not technically necessary (e.g. statistics, external media), we obtain your consent in advance in accordance with Section 25 TDDDG and Art. 6 para. 1 lit. a GDPR. Our consent management takes place via CMR21 (ekom21) and documents your decision.

You can change your settings at any time via the cookie settings bar.

Technically necessary cookies (CMS21):

The following cookies are technically necessary for the operation of the website:

3. analysis tools

With your consent, we use the open source software Matomo to analyse and statistically evaluate the use of the website. Cookies are used for this purpose. The information obtained about website use is transmitted exclusively to our servers and summarised in pseudonymous user profiles. We use the data to analyse the use of the website. The data collected is not passed on to third parties. The tool records the shortened IP address (depending on the configuration), the device and browser used and the pages accessed. The IP addresses are anonymised (IP masking) so that they cannot be assigned to individual users.

The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG. In doing so, we are pursuing our legitimate interest in optimising our website for our public image.

You can change your settings at any time via the cookie settings bar.

4. contact form (bulky waste registration)

The website offers visitors the opportunity to contact the municipal utilities directly to arrange a bulky waste collection appointment. A contact form can be used for this purpose. When using these forms, the user enters personal data. We use the form to process contact details (e.g. name, address, email/telephone) and information about the order (collection address, items, preferred dates). The legal basis is our public task of municipal waste disposal within the meaning of Art. 6 para. 1 lit. e GDPR in conjunction with § Section 3 (1) HDSIG.

The data will be used exclusively for processing the application and for making appointments and will be deleted after the statutory retention periods.

5. third-party services (YouTube, OpenStreetMap)

External services that provide additional functions or content are integrated on our website. For reasons of data protection, these services are initially deactivated. Only when you have actively consented in the consent tool will a connection to the servers of the respective providers be established and personal data transmitted. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Please note that data may also be transferred to third countries (e.g. the USA). These countries do not have a level of data protection comparable to that in the EU. It cannot be ruled out that government agencies may access data without you being entitled to effective legal remedies

a) Youtube

We use the YouTube service, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the integration of videos.

After your consent, at least your IP address and technical information (e.g. browser, end device, time of access) will be transmitted to Google. Google may link the data collected with existing user accounts and may also use it for its own purposes, such as profiling and advertising

b) OpenStreetMap

To display maps, we use the OpenStreetMap service, operated by the OpenStreet-Map Foundation, St John's Innovation Centre, Cowley Road, Cambridge, UK.

Only after your consent will a connection to the OpenStreetMap servers be established and your IP address and technical information processed

VII Actuality

This privacy policy is valid from 28 August 2025 and any future changes will be published here.