Based on the concept for the reopening of the properties of the Palace Administration in conjunction with Section 20(1) No. 3 of the Fifth Bavarian Ordinance on Infection Prevention Measures (BaylfSMV), the Bavarian Administration of State-owned Palaces, Gardens and Lakes is required to record the contact details of guided guests in buildings with guided tour operations.
The external office of the Bavarian Administration of State Palaces, Gardens and Lakes competent for the respective property is responsible for the processing of this data on site. You will find this office here (link to the selection page "Palaces") on the respective page for the destination you have selected. Alternatively, please ask for the relevant external office at the cash desk of your destination. You can contact the official data protection officer responsible for us at email@example.com or via the postal address: Bayerische Schlösserverwaltung, Schloss Nymphenburg, Eingang 16, D-80638 Munich.
Data processing is carried out for the purpose of tracing COVID-19 infections. The legal basis for such data processing is thus Art. 6(1) point (d) GDPR (processing of personal data to protect vital interests of the data subject or of another natural person). This also includes the processing of personal data in order to monitor epidemics and their spread. Another legal basis for data processing is Art. 6(1) point (c) GDPR in conjunction with Art. 20(1) No. 3 of the Fifth Bavarian Ordinance on Infection Prevention Measures and the concept for reopening the properties of the Palace Administration, as well as Art. 6(1) point (e) GDPR (performance of a task required in the public interest) and, based on your consent to data collection, Art. 6(1) point (a) GDPR.
The data collected may only be passed on at the request of the competent health authorities so that possible infection routes can be traced. The contact data will be kept for a period of one month and then destroyed.
As a data subject, you have the right to access to and rectification of the personal data collected on you as well as the right to have your data deleted once the retention period has expired. For this purpose, you can contact the external office responsible for your destination, which will also delete the data after the expiry of the above-mentioned retention period, regardless of any request on your part.
Irrespective of this, you have a right to appeal to the competent supervisory authority. The competent supervisory authority for Bavarian public bodies is the Bavarian Data Protection Commissioner, whose contact details are as follows:
Bavarian Data Protection Commissioner
Postal address: Postfach 22 12 19, D-80502 Munich
Address: Wagmüllerstraße 18, D-80538 München
Phone: +49 89 212672-0
Fax: +49 089 212672-50