Data privacy policy

NAWAREUM is a registered trademark and department of the Technology and Support Center (TFZ).

The Technology and Support Center (TFZ) processes personal data in various areas in order to perform public tasks and provide information to citizens.

This data privacy policy explains how personal data is collected, processed and transmitted by the TFZ. Furthermore, this data privacy policy informs affected persons of their rights.

This data privacy policy applies to all persons who contact or are in contact with the TFZ or use its services, unless in a particular case more specific information is provided (fact sheets, forms, etc.).

Third parties (for example, online platforms such as Facebook, Instagram or YouTube, which are linked on our websites) may also process personal data. This data privacy policy does not apply to such third parties or their services. The TFZ is not responsible how these third parties may use the personal data collected by them. For personal data processing and information about the data privacy practices of third parties, please refer directly to them. Please also refer to the data privacy policies on the respective sites.

Contact details of the person responsible

The person responsible for data collection is the
Technology and Support Center (TFZ)
Schulgasse 18
94315 Straubing, Germany
Phone: +49 9421 300-210
Fax: +49 9421 300-211
Email: datenschutz [at]

Contact details of the data protection officer

Data protection officer of the Technology and Support Center (TFZ)
Schulgasse 18
94315 Straubing, Germany
Phone: +49 9421 300-210
Fax: +49 9421 300-211
Email: datenschutz [at]

Purpose and legal basis for the personal data processing

Purpose of processing data is to operate the website. We collect, process and store data in order to provide you, as a visitor of our website, with interesting, up-to-date and descriptive information and be able to contact you.

Unless otherwise stated, the legal basis for the processing of your data results from Article 4 (1) of the Bavarian Data Protection Act (BayDSG) in conjunction with Article 6 (1) (e) of the General Data Protection Regulation (DSGVO). Accordingly, we are permitted to process the data required to fulfill a task incumbent upon us.

If you have consented to the processing, the data processing is based on Art. 6 (1) a DSGVO.

The processing of your personal data for the purpose of ordering admission tickets is based on the legal basis of Art. 6 para. 1 letter b DSGVO, which allows the processing of personal data for contractual purposes.

Categories of recipients of personal data

We use external service providers, in particular as data processors (e.g. IT service providers), to fulfill our contractual and legal obligations.

In addition, we transmit personal data to other authorities and courts for the fulfillment of legal obligations.

Duration of storage of personal data

Your data will only be stored for as long as is necessary for the fulfillment of the tasks, taking statutory retention periods into account.

Your rights

If we process your personal data, you have the following rights as a data subject:

If you have consented to the processing and the processing is based on this consent, you may revoke at any time the consent for the future. The lawfulness of the data processing carried out based on this consent until the revocation is not affected by this.

Right of complaint to the supervisory authority

Furthermore, you have a right of complaint to the Bavarian State Commissioner for Data Protection.

The Bavarian State Commissioner for Data Protection (BayLfD)
Wagmüllerstrasse 18
Postal address: P.O. Box 22 12 19, 80502 Munich, Germany
80538 Munich
Phone: +49 89 212672-0
Fax: +49 89 212672-50
Email: postoffice [at]

Further Information

For more detailed information on the processing of your data and your rights, you can contact us using the contact details above.


Our web server is operated by Hetzner Online GmbH. The personal data you provide when visiting our website is therefore processed on our behalf by:
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Email: info [at]


When you visit our web pages, you transmit data to the web server via your web browser. The following data is recorded during an ongoing session between your web browser and the web server:

Only anonymized IP addresses of visitors are stored. At web server level, this is done by storing an IP address <123.123.123.XXX> in the log file by default instead of the actual IP address of the visitor, e.g. <>, where XXX is a random value between 1 and 254. It is no longer possible to establish a personal reference. The data is processed exclusively for this purpose and in anonymized form for statistical purposes; it is not compared with other data records.


When you visit our website, cookies (small files) with different validity periods are stored on your hard drive. These are used exclusively to recognize you during this and further visits to the website.

Most web browsers are set to accept the usage of cookies. However, this function can be switched off by you in the settings of your web browser either for the current session or permanently. Parts of the offer, which are only available for registered users, can possibly not be used without the storage of cookies.

Active components

Active components such as JavaScript and Java applets are used in our web services. This function can be switched off by you in the settings of your web browser.


Our website links to our Facebook page where you may find further content (texts, photos and videos) about the NAWAREUM. For more information on Facebook's data privacy policy, please visit:
Facebook privacy policy


Our website links to our Instagram page where you may find further content (texts, photos and videos) about the NAWAREUM. For more information on Instagram's data privacy policy, please visit:
Instagram privacy policy


Videos from the external video platform YouTube are embedded on our websites. By default, a privacy notice is displayed for videos and no automated connection with YouTube's servers is established. Thus, the platform operator does not receive any data from the user when the web pages are accessed.

You can decide for yourself whether the YouTube videos should be activated. Only when you enable the playback of the videos by clicking on the link in the notice text do you give your consent for the data required (including the web address of the current page and your IP address) to be transmitted to the platform operator.

YouTube is a service of Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Google also processes your personal data in the USA. For more information on the purpose and scope of the data collection and processing, as well as information on options for protecting your privacy, please refer to the data privacy policy:
YouTube privacy policy

Further processing

On our web services, you can enter personal or business data. Your data is encrypted during transport using software (SSL) and is therefore protected from being read by third parties.

Contact via email

Information that you send to us unencrypted via email can possibly be read by third parties during transmission. As a rule, we are also unable to verify your identity and do not know who is hiding behind an email address. Legally secure communication by simple email is therefore not guaranteed. Like many email providers, we use filters against unwanted advertising (spam filters), which in rare cases automatically classify even normal emails as unwanted advertising by mistake and delete them. In any case emails containing harmful programs are automatically deleted.

If you want to send messages to us that are worthy of protection, we recommend that you encrypt and sign them to prevent unauthorized reading and falsification during transmission, or send the message to us by conventional mail. S/MIME-encrypted emails can be sent to us using the following encryption certificate:

Please let us know whether and in what way we can send you encrypted emails to reply to your mail and whether - if this is not possible - you agree to an unencrypted email reply. If you do not have the possibility to receive encrypted emails, we ask you to provide us with your postal address to be able to answer your messages worthy of protection.


As part of our press and public relations work, photos and film recordings are made and used at events and appointments, on which you may be recognizable. You can object to this.

Please use the contact details above for your objection.