Privacy policy

Privacy policy

This is the Privacy policy for and associated information. It contains further information in accordance with Art. 13 GDPR in case that personal data is collected.

Privacy policy

The city of Dachau is responsible for this Website and according to the General Data Protection Regulation (GDPR) provider of a teleservice. At the beginning of your visit on this Website, we would like to inform you of the kind, scope and purpose of collection and use of personal data in a precise, transparent, understandable and easily accessible way in a clear and simple language, which personal data is collected or used.

With the following data protection declaration we would like to show you how we handle your personal data and how you can contact us:

Große Kreisstadt Dachau
Konrad-Adenauer-Straße 2-6
D-85221 Dachau
Represented by: Lord Mayor Florian Hartmann
Phone: +49 8131 75-0
Fax: +49 8131 75-44299


Our data protection officer
You can contact our data protection officer as follows:

Daniela Flach (Data protection officer)
Konrad-Adenauer-Straße 2-6
D-85221 Dachau

A. Generally
For better comprehensibility, our data protection declaration does not make any gender-specific differentiation. In terms of equal treatment, corresponding terms apply to both genders. What the terms used such e. g. "Processing" means Article 4 GDPR.

B. Specific
Personal information is all information that relates to an identified or identifiable natural person. The personal data of users processed within the scope of this online offer include usage data (e. g. visited websites of our online offer) and content data (e. g. entries in the contact form). "User" includes all categories of data subject. These include the visitors of our online offer.

Data protection
We guarantee that we only collect, process, store and use your data in connection with the processing of your inquiries and for internal purposes as well as to provide the services you have requested or to provide content.

Basics of data processing
We only process users' personal data in compliance with the relevant data protection regulations. This means that the data of the users are only processed if there is a legal permission or with the consent of the person concerned.

You can find the legal basis in the GDPR as follows:

  • Consent: Art. 6 Para. 1a GDPR
  • Processing of data to fulfill our services and performance a contract with you: Art. 6 Para. 1b GDPR
  • Processing of data to fulfill legal obligations: Art. 6 Para. 1c GDPR
  • Processing of data to safeguard the legitimate interests : Art. 6 Para. 1f GDPR


Data transmission to third parties
When using the citizens' concern management system, data is transmitted to a processor. The city of Dachau is responsible for their data protection compliance.

Data transfer to a third country or an international organization
There is no data transfer to a third country or an international organization.

Storage period of your personal data
We adhere to the principles of data economy and data avoidance. This means that we only store the data you have made available to us for as long as necessary to fulfill the aforementioned purposes or for the various storage periods stipulated by law. If the respective purpose no longer applies or after the relevant deadlines have expired, your data will be routinely blocked or deleted in accordance with the statutory provisions. We have created a concept for this to ensure this procedure.

Contact the city of Dachau
If you contact us by e-mail, fax, telephone, contact form, etc. or our ordering system for information material and brochures, you agree to electronic communication. Personal data is collected when you contact us. The respective contact form shows which data is collected in the case of a contact form. Your data will be transmitted with SSL encryption. The infomation you provide will only be saved for the purpose of processing the request and for possible follow-up questions.

We would like to point out that e-mails can be read or changed without authorization and unnoticed on the transmission path. We would also like to draw your attention to the fact that we use software to filter unwanted e-mails (spam filter). The spam filter can reject e-mails if they have been identified as spam by certain features (possibly even incorrectly).

What are your rights?

a) Right of providing information (Article 15 GDPR)
You have the right to obtain free information about your stored data. Upon request, we will inform you in writing in accordance with applicable law which personal data we have stored about you. This also includes the origin and recipient of your data and the purpose of the data processing.

b) Right to rectification (Article 16 GDPR)
You have the right to have your data stored by us corrected if it is incorrect. Here you can also first processing, e.g. B. if the correctness of your personal data is disputed (= right to object according to Art. 21 GDPR)

c) Right to cancellation (Article 17 GDPR)
You can also request the deletion of your personal data, provided there are no statutory retention requirements. If there is such an obligation, we will block your data on request. If the relevant legal requirements are given, we will delete your personal data without your request, unless the data is still required for any legal reasons.

d) Right to block / Restriction of processing (Article 18 GDPR)
You can also have your data blocked. So that your data can be blocked at any time, this data must be kept in a lock file for control purposes.

e) Right to data portability (Article 20 GDPR)
You are entitled to request the provision of the personal data transmitted to us in a format that allows the transmission to another location.

f) Right to lodge a complaint with a supervisory authority
You have the option to lodge a complaint with the responsible data protection supervisory authority:

Bavarian State Commissioner for Data Protection (BayLfD)
Mailing address: Postfach 22 12 19, D-80502 Munich
Home address: Wagmüllerstraße 18, D-80538 Munich
Phone: +49 89 212672-0
Fax: +49 89 212672-50

g) Right to object (Article 21 GDPR)
You have to option at any time to object to the use of your data with future effect. To do this, it is sufficient to send a corresponding email to This can also be used in the event of a dispute about the correctness of the provisional regulation. However, such a revocation does not affect the legality of the processing operations that have taken place up to that point.

Protection of your personal data
We always take organizational and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and thus to protect the data processed by us against unwanted accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. Current SSL encryption technology is used for this. For security reasons, no further details will be published.

Your personal data is protected in the following points (excerpt):
a) Maintaining the confidentiality of your personal data

b) Maintaining the integrity of your personal data

c) Maintaining the availability of your personal data

The security measures in use are continuously improved in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our online offer due to the insecure nature of the Internet. Because of this, any data transfer from you to our online offer is at your own risk.

Protection of minors
Personal information may only be made available to us by persons under the age of 16 if the legal guardians have given their consent.

Use of cookies

a) This website uses the following types of cookies if you have expressly consented to them, the scope and functionality of which are explained below:

- Transient Cookies (to b)
- Persistent Cookies (to c).

b) Transient cookies are automatically deleted when you close the browser. This includes session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website (see "Persistent Cookies"). The session cookies are deleted when you close the browser.

c) Persistent cookies are developed from the transient cookies, do not contain your IP address, therefore do not allow any conclusions to be drawn about the person acting and are automatically deleted at the latest 3 months after your last contact. These include in particular the cookies with which your computer can be recognized when you return to our website.

d) You can configure your browser settings according to your wishes and e.g. refuse to accept cookies. There are no presets in this regard. You can delete the cookies in the security settings of your browser at any time. The configuration is only valid for one browser session and no longer.

Analysis of usage data
To analyze usage data, this website uses the open source analysis software Matomo, which is operated by the city of Dachau on its own server system. If you have given your consent, the information generated during this session about the use of this website will be saved on our server. The IP address is anonymized before being saved. The information generated by cookies about the use of this website is not passed on to third parties. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time in the future.

Your consent to the analysis of usage data is stored in the form of a transient cookies. Your consent ends when you close the browser by automatically deleting the transient consent cookie. If you visit our website again, you will be asked for your consent again. If you give your consent, a persistent Matomo cookie is also saved in order to recognize your browser. This cookie does not contain any personal data that would allow conclusions to be drawn about your person. The Matomo cookie only becomes technically effective when you give your consent. It is valid for three months and is automatically deleted after it expires.

In order to be able to play YouTube videos on our website, you will be asked for your consent before loading the video. We would like to point out that the processing of your data when you click this link is outside the area of responsibility of the city of Dachau and that only the data protection regulations of the provider YouTube apply. Our online offer includes YouTube functions for displaying and playing videos. These functions are offered by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA are therefore not subject to the scope of protection of the General Data Protection Regulation (GDPR). Further information can be found in YouTube's data protection guidelines.

The extended data protection mode is used here, which, according to the provider, only starts storing user information when the video (s) is played. When playback of embedded YouTube uses cookies to collect information about user behavior. In contrast to the GDPR, you will not be asked for your consent. According to information from YouTube, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. In addition, disclosure under the so-called CLOUD Act of the USA must be made possible for government agencies to be passed on.

Disclosure of personal data for order processing
The personal data collected by us in the context of your order via our ordering system for information material and brochures will be passed on to the transport company commissioned with the delivery for processing the contract, insofar as this is necessary for the delivery of the goods.

Trademark protection
Each company or trademark mentioned here is the property of the respective company. Brands and names are mentioned for purely informational purposes.