Information on the processing of personal data in accordance with Article 13 of the EU General Data Protection Regulation (GDPR)
Description of the processing activity
You have a commercial or catering law matter being processed by the City of Aachen. This means that your personal data (name, address, etc.) required for this purpose must be processed, stored and possibly passed on to other authorities and institutions to be involved.
Below you will find the relevant information on data processing
Responsible for data processing:
City of Aachen
The Lord Mayor
Security and Order Department
Peterstraße 44 - 46, 52062 Aachen
Tel.: 0241-432 32001
E-mail: ordnungsamt@mail.aachen.de
Data Protection Officer:
Data Protection Officer of the City of Aachen
Data protection, information and IT security - Auditing department 14/300
Casino Street 48-50, 52058 Aachen
Tel.: 0241-432 1470
E-mail: datenschutz@mail.aachen.de
Your data will be processed for the following purpose:
Pursuant to Art. 4 No. 2 GDPR, processing is, among other things, the collection, storage, transmission and use of personal data for the handling of your commercial or catering law matter and for the fulfillment of the associated purpose.
The collection and processing of data is based on the following legal bases:
Trade Regulation Act (GewO), Catering Act (GastG), Prostitutes Protection Act NRW (ProstSchG NRW), Guarding Ordinance (BewachV), State Treaty on Gambling (GlückStV), Implementation Act for the State Treaty on Gambling NRW (AG GlückStV NRW), State Immission Control Act NRW
Possible recipients of the data are:
Due to legal regulations, the forwarding of your data to third parties is permitted in certain cases.
prescribed. If the requirements are met in your case, your data will be transmitted to:
- Tax office in accordance with the provisions of GewO, GastG, ProstSchG, AO, BewachV
- Chamber of Industry and Commerce in accordance with the provisions of the GewO
- Chamber of Crafts in accordance with the provisions of the GewO
- District government in accordance with the provisions of the GewO
- Weights and measures office in accordance with the GewO
- Employment agency / job center in accordance with the provisions of the GewO
- German statutory accident insurance in accordance with the provisions of the GewO
- Professional associations in accordance with the provisions of GewO, GastG
- Main customs office in accordance with the provisions of the GewO
- It-nrw according to the regulations GewO
- Health insurance companies in accordance with the provisions of GewO, GastG
- Food monitoring in accordance with the provisions of GewO, GastG
- Police in accordance with the provisions of GewO, GastG, BewachV, ProstSchG
- StädteRegion Aachen/ involved regulatory authorities of the cities/municipalities in accordance with the regulations
GewO, GastG, ProstSchG, BewachV, GlückStV
- involved departments of the City of Aachen in accordance with the provisions of the GewO, GastG, ProstSchG, GlückStV,
LImschG
- Courts/public prosecutor's office in accordance with the provisions of the GewO, GastG, BewachV, ProstSchG
- Federal Office of Justice in accordance with the provisions of the GewO, BewachV, GastG, GlückStV, ProstSchG
- State Office for the Protection of the Constitution in accordance with the provisions of GewO, BewachV
- State Office of Criminal Investigation in accordance with the provisions of GewO, BewachV
- Road traffic office in accordance with the provisions of the GewO
- Ministry of the Interior NRW in accordance with the provisions of the GewO
- authorized recipients of information in accordance with the provisions of the GewO
Your data will be processed and stored electronically.
In principle, your data is processed and stored electronically:
Electronic data processing at Aachen City Council is carried out with the support of the IT service provider regio iT from Aachen. Compliance with all data protection regulations is guaranteed by a contract for order processing in accordance with Art. 28 GDPR and by constant checks.
If applicable, your data will also be passed on to organizational units (e.g. in the case of payment transactions to the City of Aachen's treasury) within the city administration of Aachen, which must necessarily be involved in the processing of the data in order to fulfil the described purpose.
Duration of data storage:
The duration of data storage is based on the statutory retention periods from the provisions of the aforementioned regulations. It can be 5 years, but in individual cases also 10 years. This does not apply to the registration data of prostitutes. These must be deleted no later than three months after the expiry of the validity period of the registration certificate, provided that no case of § 9 para. 2 ProstSchG or an order according to § 11 para. 3 ProstSchG has been issued. In these cases, the aforementioned retention periods apply again.
Rights of data subjects:
In accordance with Art. 15 GDPR, you are entitled to receive information from the data controller about the personal data stored about you at any time and free of charge without giving reasons. In accordance with Art. 20 GDPR, you also have the right to request your personal data from the controller in a directly transferable (digital) format, provided that your data is stored there digitally. You can request the rectification, restriction of processing or erasure of your data in accordance with Art. 16, 17, 18 GDPR if there are reasonable grounds for doing so. In addition, you can gladly. Art. 21 GDPR against data processing in accordance with Art. 6 (1) lit. e) GDPR, which is carried out for the performance of a task in the public interest or in the exercise of official authority and against the use of your data for direct marketing. You can submit the request for these rights either by post or by e-mail to the responsible body. You can also contact the responsible data protection officer regarding data protection issues. Finally, we would like to draw your attention to your right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR
Supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
P.O. Box 20 04 44 - 40102 Düsseldorf
Phone: +49 (0) 211-38424-0
E-mail: poststelle@ldi.nrw.de
Status: May 2025