Information on data processing
For terre des hommes Germany e.V., the protection of personal data has a very high priority. We want you to know what data we store and how we use it.
In the following, we inform you about the data collection, data processing and your further rights as a data subject according to Art. 13 and Art. 14 of the EU General Data Protection Regulation (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016
on the protection of individuals with regard to the processing of personal data, on the free movement of such data, and Data Protection Regulation and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR) in connection with your visit to our website.
1. Controller and contact details of the data protection officer
Responsible for the processing of your personal data is:
terre des hommes Germany e.V.
Ruppenkampstraße 11a
49084 Osnabrück
Phone: +49 (0)541 / 7101-0
Mail: info@tdh.de
For questions regarding the processing of your personal data by us, on the subject of data protection in general and for the assertion of your data subject rights (e.g. requests for information, advertising objections, revocation of consent), please contact the aforementioned address or the e-mail address info@tdh.de. In the case of desired secure transmission, please contact us by post. For all other data protection concerns, you can contact our external data protection officer, Dr. Stefan Drewes, directly via the e-mail address datenschutzbeauftragter@tdh.de.
2. website service and IT-security
When you visit our website, our web server uses access logs to record which pages have been accessed and when. Access logs contain the following data: IP address, directory protection user, date, time, pages accessed, logs, status code, amount of data, referer, user agent, host name accessed. The IP addresses are stored anonymously and deleted after 60 days. Accesses via FTP are also logged with anonymized information on user name and IP address and deleted after 60 days. stored.
Error logs, which record erroneous page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website.
Mail logs for sending emails from the web environment are anonymized after one day and deleted after 60 days. Mail logs for sending via our mail servers are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and spam prevention.
We process the aforementioned personal data on the basis of our legitimate interest in providing you with information on our services on our websites and in ensuring IT-security for you when you visit our websites, on the basis of Art. 6 (1) sentence 1 lit. f DSGVO.
All terre des hommes online forms are accessed via a secure SSL connection and your data is transmitted via this. We use the SSL certificate “Starter” from Mittwald CM Service GmbH & Co KG (RapidSSL TLS RSA CA G1) for this purpose. Your data is encrypted on the way from your computer to us and can only be read again on our server.
3. contact requests and service
If you have any questions about terre des hommes, these consultations, our projects or campaigns, you can contact us by e-mail, letter, fax or telephone. We will process your personal data depending on the subject of your enquiry. If necessary, we may also use personal data that has been stored in our systems in the context of other data processing (e.g. data on previous enquiries).
Depending on the request, the data is processed to fulfil our legal obligations to you on the basis of Art. 6 (1) sentence 1 lit. c DSGVO and/or on the basis of our legitimate interest in answering your request on the basis of Art. 6 (1) sentence 1 lit. f DSGVO. The data will be deleted when your request/enquiry has been processed and no other storage obligations exist.
4. subscription to the newsletter
This offer is only aimed at adults (18+). If you would like to receive the newsletter offered on the terre des hommes website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter (double opt-in procedure). For the registration to our newsletter we use the so-called double opt-in procedure. This means that after you have provided your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe. The storage serves the purpose of being able to send you the newsletter. Furthermore, we store your IP addresses and the times of your registration each time you register and confirm, in order to prevent misuse of your personal data and to be able to provide proof of correct sending. Further data will not be collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The legal basis for this is your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO.
5. participation in consultations
Two forms, for adults (18+) and children/young people (below 18), are provided for participation in the consultations.
The following data are processed in the form for adults (18+):
• name, preferred title, country, email address, organizational name, organizational website
If you consent to the publication of your data, the following data will be processed:
• name, preferred title, age, country and/or organization name
In the form for children/young people (below 18) the following data are processed:
• Name, age, preferred titled, country, email address
• Parent/Guardian/Organizational Sponsor name
If you consent to the publication of your data, the following data will be processed:
• Initial of the name, age, country
The data will be stored until March 2023, the end of the consultations, after which it will be deleted. The consultations will be transmitted to the United Nations Human Rights Council (UNHRC).
The legal basis of the data processing is the consent according to Art. 6 para. 1 sentence 1 lit. a, Art. 7, Art. 8 DSGVO.
6. use of technically necessary cookies
Cookies are small text files on the Internet. Websites place these small text files in the browsing history of users – this is therefore also referred to as “setting cookies”. Cookies are either sent to the user by the respective server (HTTP cookie) or generated when a website is called up (scripted cookie). By setting cookies, visits to a website are marked and recognised, which means that surfing behaviour can be adapted. Cookies thus generally serve to optimise a page for the user; certain types of cookies are also responsible for the error-free functioning of the website. On this website, only cookies are used that are necessary for the function of this website and in particular for the control of the consultation forms (Typeform). The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO.
7. website tracking with Matomo
This website uses the open source web analytics service Matomo. Matomo enables us to evaluate user movements on vzbv.de in a data protection-friendly manner for the purpose of improving our offer. For this purpose, Matomo does not set cookies on the user’s computer. Instead, so-called “fingerprinting” is used, which records user movements on vzbv.de with the help of pseudonymised IP addresses in combination with user-side browser settings. Due to these requirements, visits and individual page views can be recorded, but it is not possible to draw conclusions about the identity of individual users. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. If you wish to generally prevent the recording of your page visits, you have the option of activating the Do-Not-Track function in your browser. This measure is effective for this as well as for other pages visited by you.
For this website, the collection of your site visits can also be prevented by using the following opt-out option. Please note that when you activate this option, a cookie will be stored on your system:
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
8. Bot protection for the internet
We use “Friendly Captcha” and “Antispam Bee” to protect our websites and online services from spam and abuse. Based on the underlying mechanisms of the blockchain, Friendly Captcha employs a fundamentally new approach to securely defend your websites and online services from spam and bots. Friendly Captcha does not depend on tracking our users and exploiting personal data. Friendly Captcha generates a unique crypto puzzle for each visitor. As soon as the user starts filling a form it starts getting solved automatically. Solving it will usually take a few seconds. By the time the user is ready to submit, the puzzle is probably already solved. “Antispam Bee” blocks spam comments and trackbacks effectively, without captchas and without sending personal information to third party services.
9. integration of social plug-ins on the website
If we use so-called “social plug-ins” on our websites, we integrate them as described below. When you visit our websites, the social plug-ins are deactivated, i.e. no transmission of any data to the operators of these networks takes place. If you wish to use one of the networks, click on the respective social plug-in to establish a direct connection with the server of the respective network. If you have a user account with the network and are logged in there at the moment of activating the social plug-in, the network can assign your visit to our website to your user account. If you wish to avoid this, please log out of the network before activating the social plug-in. A social network cannot assign a visit to other terre des hommes websites until you have also activated a social plug-in present there. If you activate a social plug-in, the network transmits the content that becomes available as a result directly to your browser, which integrates it into our websites. In this situation, data transfers may also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on this platform are governed exclusively by the privacy policy of the respective network. The social plug-in remains active until you deactivate it or delete your cookies.
When you click on the link to an offer or activate a social plug-in, personal data may end up with providers in countries outside the European Economic Area that, from the perspective of the European Union (“EU”), do not ensure an “adequate level of protection” for the processing of personal data in line with EU standards.
10. your rights as a data subject
The following rights are available to you as a data subject in principle and, insofar as contractual and legal obligations do not conflict with this:
• Right of access (Art. 15 DSGVO) with the restrictions according to §§ 34, 35 Federal Data Protection Act;
• Right to rectification of inaccurate data (Art. 16 DSGVO);
• Right to deletion (Art. 17 DSGVO) with the restrictions according to §§ 34, 35 Federal Data Protection Act;
• Right to restrict the processing of personal data (Art. 18 DSGVO);
• Right to data portability (Art. 20 DSGVO);
• Right to complain to a data protection supervisory authority (Art. 77 DSGVO); the data protection supervisory authority responsible for terre des hommes Germany e.V. is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover;
• Individual right of objection (Art. 21 para. DSGVO) on grounds arising from your particular situation and concerning data processing pursuant to Art. 6 para. 1 sentence 1 lit. e and Art. 6 para. 1 sentence 1 lit. f DSGVO;
• Right to object to the processing of data for advertising purposes (Art. 21 (3) DSGVO; you may object to the use of your data for advertising purposes at any time with effect for the future.
If the data processing is based on consent, your consent can be revoked at any time with effect for the future. The legality of the data processing carried out up to the time of the revocation is not affected by this.
The easiest way to exercise the rights of the data subject is to contact us using the contact details given under point 1.
11. Note for parents or guardians
Parents or guardians are responsible for protecting the privacy of their children. We ask you to talk to your children about safe and responsible handling of their own personal data on the Internet.
The development of the Internet or legislation may require adjustments to our privacy policy. We always post changes to our privacy policy here and recommend that you read this policy occasionally.
Last updated: December 2021
