¶¶Òõ¶ÌÊÓƵ

The Layered Privacy Notice is a crucial compliance document required under German data protection law and the GDPR for organizations processing personal data. It serves as a transparent communication tool between data controllers and data subjects, providing information about data processing activities in an accessible, tiered format. The document is structured to meet the requirements of the German Federal Data Protection Act (BDSG), the GDPR, and other relevant German privacy laws, while following the layered notice approach recommended by European data protection authorities. This format allows organizations to present complex privacy information in a way that is both comprehensive and user-friendly, with increasing levels of detail in each layer.

1. Layer 1 - Key Information Overview: Brief summary of essential privacy information, including identity of controller, purposes of processing, data subject rights, and how to access more detailed information

2. Layer 2 - Detailed Information: Comprehensive section containing all required privacy information

3. Identity and Contact Details: Information about the data controller and DPO contact details

4. Processing Purposes and Legal Bases: Detailed explanation of why personal data is processed and the legal grounds for processing

5. Categories of Personal Data: List and description of personal data types being processed

6. Recipients and Transfers: Information about who receives the data and any international transfers

7. Retention Periods: Information about how long different types of personal data are kept

8. Data Subject Rights: Explanation of individual rights under GDPR and how to exercise them

9. Automated Decision-Making: Information about any automated decision-making or profiling

10. Cookie Information: Details about cookie usage and related technologies as required by TTDSG