Art. 18 BayDSG
Establishment and Tasks (on Art. 51 to 58 and 85 GDPR)
(1)The Bavarian State Office for Data Protection Supervision (State Office) shall be the supervisory authority pursuant to Art. 51 GDPR and Section 40 of the Federal Data Protection Act for non-public bodies. Within the scope of application of Art. 38, Art. 58 para. 1 letters b, c, e and f and para. 2 letters c to j GDPR shall not apply.
(2)The seat of the State Office shall be Ansbach.
(3)The President of the State Office shall be a civil servant appointed for a fixed term and shall be appointed by the State Government for a period of five years.
(4)The State Office may delegate personnel administration and management tasks to other public bodies of the Free State of Bavaria, insofar as this does not impair its independence. Personal data of employees may be transmitted to these bodies insofar as knowledge thereof is necessary for the fulfilment of the delegated tasks.