Data protection information Whistleblower Protection Act
Information pursuant to Article 13 of the General Data Protection Regulation (GDPR) for the
Collection of personal data from data subjects
Person responsible
Mayor of the pilgrimage town of Kevelaer
Dr. Dominik Pichler
Peter-Plümpe-Platz 12
47623 Kevelaer
Tel.: 02832-122-206
E-mail: dominik.pichler@kevelaer.de
Data protection officer
Nina Neunheuser
Tel. 02832-122-204
E-mail: datenschutzbeauftragte@kevelaer.de
Purpose of data processing
The purpose of the data processing is to process your submission in accordance with Section 13 of the Whistleblower Protection Act (HinSchG), i.e. the processing is carried out to operate the reporting office, to carry out the procedure and, if necessary, to take follow-up measures. Your personal data to be processed in this context is earmarked, i.e. it will only be used for the purpose for which it was collected.
Main legal basis
Your personal data is processed on the following legal basis:
Art. 6 para. 1 c) GDPR in conjunction with Section 10 of the Whistleblower Protection Act (HinSchG).
Recipients and categories of recipients of the data
Only the employees of the internal reporting office have access to the data you have entered in accordance with Section 16 (2) HinSchG. The data may be forwarded in the exceptional cases specified in Section 9 HinSchG.
Duration of storage and retention periods
The documentation of the reports received will be deleted three years after the procedure has been completed in accordance with Section 11 (5) HinSchG. The documentation may be kept for longer in order to fulfill the requirements of the Whistleblower Protection Act or other regulations, as long as this is necessary and proportionate.
Rights of the data subject
Your rights to information, correction, deletion, restriction of processing, data transfer and objection regarding the personal data collected are expressly pointed out at this point. The legal basis for this is Articles 15 to 21 of the EU General Data Protection Regulation and Sections 49 and 50 of the NRW State Data Protection Act.
Competent supervisory authority
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel. 0211/38424-0
Fax. 0211/38424-10
E-mail: poststelle@ldi.nrw.de