Data protection notice
We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the geoportal applications of the City of Aachen, which can be accessed via the addresses https://geoportal.aachen.de/extern and https://geoportal.aachen.de/familienstadtplan.
Who is responsible and how can I reach you?
Person responsible
for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR)
City of Aachen
The Lord Mayoress
Sibylle Keupen
Markt, 52058 Aachen
Tel.: +49 (0) 241-432 0
stadt.aachen@mail.aachen.de
Data Protection Officer
Data Protection Officer City of Aachen
Data Protection, Information and IT Security
Auditing Department 14/300
Kasinostrasse 48-50
52058 Aachen
datenschutz@mail.aachen.de
What is it about?
This privacy policy meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and in the event of statutory retention obligations.
Who receives my data?
We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In addition, in individual cases we pass on personal data to third parties if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.
Insofar as we use service providers for the operation of our website who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.
Do you use cookies?
"Cookies" are small text files that do not contain any malicious code and can be stored on your computer when you visit our website. The cookies we use only control the functions of our website and do not pass on any data to other parties. Most of the cookies used on our website are so-called session cookies. They are automatically deleted at the end of your visit. Permanent functional cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit and to make user-friendly basic settings.
You have the option of preventing the storage of cookies on your computer by making the appropriate settings in your browser, allowing cookies only in individual cases or activating the automatic deletion of cookies when the browser is closed. However, disabling cookies may limit the functionality of our website.
Under no circumstances do we use cookies that pass on personal data to third parties. We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings.
Domain:
https://geoportal.aachen.de/
Name:
PHPSESSID
Description:
PHPSESSID is a session cookie used in PHP-based web applications to identify a user's session on a website. When a user visits a website that uses PHP sessions, a PHPSESSID cookie is sent to the user's browser and stored on the user's computer. This cookie contains a unique identifier for the user's session, which the server uses to retrieve the relevant data for that session.
Storage duration:
The data is processed exclusively within the scope of the session carried out and deleted automatically
What rights do I have?
Under the conditions of the legal provisions of the GDPR, you have the following rights as a data subject:
- Information in accordance with Art. 15 GDPR about the personal data stored about you in the form of meaningful information on the details of the processing and a copy of your data;
- Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
- Deletion in accordance with Art. 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose the erasure of the data because you need it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
- Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6 (1) a GDPR or on the basis of a contract pursuant to Art. 6 (1) b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
- Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is carried out on the basis of Art. 6 (1) e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the establishment, exercise or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
- Revocation pursuant to Art. 7 (3) GDPR of your given consent with effect for the future.
- Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR.
Supervisory authority:
State Commissioner for Data Protection and Freedom of Information (LDI NRW)
Kavalleriestr. 2-4, 40213 Düsseldorf
Tel.: +49 (0) 211-38424-0
poststelle@ldi.nrw.de
How is my data processed in detail?
Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.
Provision of the website
Type and scope of processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which the access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider[DV1] [FS(A2]
Our website is not hosted by us, but by regio iT gesellschaft für informationstechnologie mbH, which processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.
Purpose and legal basis
The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 (1) f GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 (1) c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.
Storage period
The aforementioned data is stored for the duration of the website display.
Integration of card service providers
Type and scope of processing
In addition to our own map services, we also use numerous third-party web services (e.g. Geodata Center (BKG), Arbeitsgemeinschaft der Vermessungsverwaltungen der Länder der Bundesrepublik Deutschland (AdV), Geobasis NRW) to provide map materials for our online offering. To ensure that the desired maps are displayed, you establish a connection to the servers of these providers, whereby your IP address is transmitted. A detailed list of maps from external providers can be found in the copyrights.
Purpose and legal basis
The use of external map material is based on our legitimate interest in accordance with Art. 6 (1) f GDPR. Without access to this externally loaded map material, we will not be able to display the service you have requested.
Storage duration
The specific storage duration of the data processed by you on the respective website cannot be influenced by us, but is determined by the respective providers. Further information can be found in the privacy policies of the providers.
Integration of tracking tools
Type and scope of processing
The websites https://geoportal.aachen.de/extern and https://geoportal.aachen.de/familienstadtplan use Matomo software technologies to collect and store data for optimization purposes. Only shortened and anonymized IP addresses are used for analysis, which makes it impossible to draw conclusions about users. No data is passed on to third parties.
The websites mentioned use Matomo services from regio iT. Cookies are not created for web analysis.
Purpose and legal basis
The use of matomo and the cookies used in this context is based on our legitimate interest in accordance with Art. 6 (1) f GDPR. Our concern in this regard is the measurement of visitor numbers, the optimization of our online offer and our website.
As the privacy of our visitors is important to us, data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymized as soon as possible. No other use, combination with other data or transfer to third parties takes place.
SSL encryption
The websites https://geoportal.aachen.de/extern and https://geoportal.aachen.de/familienstadtplan have SSL encryption for data security reasons. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the "lock" symbol in your browser line.
Updating this privacy policy
If we introduce new products or services, change Internet procedures or if Internet and IT security technology develops further, the privacy policy must be updated. We therefore reserve the right to amend or supplement the declaration as required. We will publish the changes here. You should therefore visit this website regularly to find out about the current status of the data protection declaration.
Status: May 2025