Information on the processing of personal data in accordance with Article 13 of the EU General Data Protection Regulation (GDPR)
Description of the processing activity
You have a commercial or catering law matter being processed by the City of Aachen. This means that your data required for this purpose must be processed, stored and, under certain circumstances, passed on to other authorities and institutions involved. You will find the relevant information on data processing below.
Responsible for data processing:
City of Aachen
The Lord Mayor
Security and Order Department
Peterstraße 44 - 46, 52062 Aachen
Tel.: 0241-432 32001
E-mail: ordnungsamt@mail.aachen.de
Data Protection Officer:
Data Protection Officer of the City of Aachen
Data protection, information and IT security - Auditing department 14/300
Casino Street 48-50, 52058 Aachen
Tel.: 0241-432 1470
E-mail: datenschutz@mail.aachen.de
Your data will be processed for the following purpose:
Pursuant to Art. 4 No. 2 GDPR, processing is, among other things, the collection, storage, transmission and use of personal data to deal with your commercial or catering law matter and to fulfill the associated purpose. If children under the age of 16 are affected by the administrative process and this is based on personal consent, the declaration of consent of the holder of parental responsibility and the competent guardianship court must be obtained in any case.
The collection and processing of data is based on the following legal bases:
Trade Regulation Act (GewO), Catering Act (GastG), Prostitutes Protection Act NRW (ProstSchG NRW), Guarding Ordinance (BewachV), State Treaty on Gambling (GlückStV), Implementation Act for the State Treaty on Gambling NRW (AG GlückStV NRW), State Immission Control Act NRW
Possible recipients of the data are:
Due to legal regulations, the forwarding of your data to third parties is permitted in certain cases.
prescribed. If the requirements are met in your case, your data will be transmitted to:
- Tax office in accordance with the provisions of GewO, GastG, ProstSchG, AO, BewachV
- Chamber of Industry and Commerce in accordance with the provisions of the GewO
- Chamber of Crafts in accordance with the provisions of the GewO
- District government in accordance with the provisions of the GewO
- Weights and measures office in accordance with the GewO
- Employment agency / job center in accordance with the provisions of the GewO
- German statutory accident insurance in accordance with the provisions of the GewO
- Professional associations in accordance with the provisions of GewO, GastG
- Main customs office in accordance with the provisions of the GewO
- It-nrw according to the regulations GewO
- Health insurance companies in accordance with the provisions of GewO, GastG
- Food monitoring in accordance with the provisions of GewO, GastG
- Police in accordance with the provisions of GewO, GastG, BewachV, ProstSchG
- StädteRegion Aachen/ involved regulatory authorities of the cities/municipalities in accordance with the regulations
GewO, GastG, ProstSchG, BewachV, GlückStV
- involved departments of the City of Aachen in accordance with the provisions of the GewO, GastG, ProstSchG, GlückStV,
LImschG
- Courts/public prosecutor's office in accordance with the provisions of the GewO, GastG, BewachV, ProstSchG
- Federal Office of Justice in accordance with the provisions of the GewO, BewachV, GastG, GlückStV, ProstSchG
- State Office for the Protection of the Constitution in accordance with the provisions of GewO, BewachV
- State Office of Criminal Investigation in accordance with the provisions of GewO, BewachV
- Road traffic office in accordance with the provisions of the GewO
- Ministry of the Interior NRW in accordance with the provisions of the GewO
- authorized recipients of information in accordance with the provisions of the GewO
In principle, your data is processed and stored electronically:
Electronic data processing at Aachen City Council is carried out with the support of the IT service provider regio iT from Aachen. Compliance with all data protection regulations is guaranteed by a contract for order processing in accordance with Art. 28 GDPR and by constant checks.
If applicable, your data will also be passed on to organizational units (e.g. in the case of payment transactions to the City of Aachen's treasury) within the city administration of Aachen, which must necessarily be involved in the processing of the data in order to fulfil the described purpose.
Duration of data storage:
The duration of data storage is based on the statutory retention periods of the provisions of the aforementioned regulations. If it becomes apparent at a later date, which was not foreseeable when the data was collected, that the data collected is to be processed for another purpose or transmitted to another body, the data subject must be informed of this fact again.
Rights of data subjects:
If the data processing takes place on the basis of personal consent, you have the right to withdraw this consent without giving reasons in accordance with Art. 7 (3) GDPR. This does not apply to the use of your data already made in the past, but only for the future. In accordance with Art. 15 GDPR, you are entitled to receive information from the data controller about the personal data stored about you at any time without giving reasons and free of charge. In accordance with Art. 20 GDPR, you also have the right to request your personal data from the controller in a directly transferable (digital) format, provided that your data is stored there digitally. In accordance with Art. 16, 17, 18 GDPR, you can request the rectification, restriction of processing or erasure of your data if there are reasonable grounds for doing so. In addition, in accordance with Art. 21 GDPR, you can object to data processing in accordance with Art. 6 (1) lit. e) GDPR, which is carried out for the performance of a task in the public interest or in the exercise of official authority, and to the use of your data for direct marketing purposes. You can exercise these rights either by post or by sending an email to the controller. You can also contact the responsible data protection officer regarding data protection issues. Finally, we would like to draw your attention to your right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.
Supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
P.O. Box 20 04 44 - 40102 Düsseldorf
Phone: +49 (0) 211-38424-0
E-mail: poststelle@ldi.nrw.de
Status: May 2025