Information on data processing
For terre des hommes Germany e.V., the protection of personal data has a very high priority. We want you to know what data we store and how we use it.
In the following, we inform you about the data collection, data processing and your further rights as a data subject according to Art. 13 and Art. 14 of the EU General Data Protection Regulation (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data, and Data Protection Regulation and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR) in connection with your visit to our website.
1. Controller and contact details of the data protection officer
Responsible for the processing of your personal data is:
terre des hommes Germany e.V. Ruppenkampstraße 11a
49084 Osnabrück
Phone: +49 (0)541 / 7101-0
Mail: info@tdh.de
For questions regarding the processing of your personal data by us, on the subject of data protection in general and for the assertion of your data subject rights (e.g. requests for information, advertising objections, revocation of consent), please contact the aforementioned address or the e-mail address info@tdh.de. In the case of desired secure transmission, please contact us by post. For all other data protection concerns, you can contact our external data protection officer, Dr. Stefan Drewes, directly via the e-mail address datenschutzbeauftragter@tdh.de.
2. Website service and IT-security
When you visit our website, our web server uses access logs to record which pages have been accessed and when. Access logs contain the following data: IP address, directory protection user, date, time, pages accessed, logs, status code, amount of data, referer, user agent, host name accessed. The IP addresses are stored anonymously and deleted after 60 days.
Error logs, which record erroneous page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website.
Mail logs for sending emails from the web environment are anonymized after one day and deleted after 60 days. Mail logs for sending via our mail servers are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and spam prevention.
We process the aforementioned personal data on the basis of our legitimate interest in providing you with information on our services on our websites and in ensuring IT-security for you when you visit our websites, on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.
All terre des hommes online forms are accessed via a secure SSL connection and your data is transmitted via this. We use the SSL certificate “Starter” from Mittwald CM Service GmbH & Co KG (RapidSSL TLS RSA CA G1) for this purpose. Your data is encrypted on the way from your computer to us and can only be read again on our server.
3. Contact requests and service
If you have any questions about terre des hommes, our projects or campaigns, you can contact us by e-mail, letter, fax or telephone. We will process your personal data depending on the subject of your enquiry. If necessary, we may also use personal data that has been stored in our systems in the context of other data processing (e.g. data on previous enquiries).
Depending on the request, the data is processed to fulfil our legal obligations to you on the basis of Art. 6 para. 1 sentence 1 lit. c GDPR and/or on the basis of our legitimate interest in answering your request on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. The data will be deleted when your request/enquiry has been processed and no other storage obligations exist.
4. Subscription to the newsletter
This offer is only aimed at adults (18+). If you would like to receive the newsletter offered on the terre des hommes website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter (double opt-in procedure). For the registration to our newsletter we use the so-called double opt-in procedure. This means that after you have provided your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe. The storage serves the purpose of being able to send you the newsletter. Furthermore, we store your IP addresses and the times of your registration each time you register and confirm, in order to prevent misuse of your personal data and to be able to provide proof of correct sending. Further data will not be collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The legal basis for this is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPRGDPR.
5. Website tracking with Matomo (without cookies)
On this website we use the web analytics service Matomo to analyze and review the use of our website. Through the statistics obtained, we can improve our offer and make it more interesting for you as a user. For the analysis of website usage, your IP address and information such as timestamps, websites visited and your language settings are processed on our servers. No cookies are used. The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. In addition, we use the Matomo extension “AnonymizeIP”, which processes IP addresses in a shortened form and excludes the possibility of direct personal references. The legal basis for the use of Matomo is Art. 6 para. 1 sentence 1 lit. f GDPR.
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
In this case, however, a technically required opt-out cookie must be stored in your browser. If you delete this cookie, the opt-out must be reactivated when you visit our website again. The Matomo program is an open source project. Information from the third-party provider on data protection is available at matomo.org/privacy-policy.
6. Use of Friendly Captcha
On our website we use the Friendly Captcha tool. This is offered by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee. The tool is used to prevent automated and abusive requests by so-called “bots”. As part of this process, your IP address is captured by Friendly Captcha in order to send a cryptographic task to your terminal. This task is solved in the background and once solved, a confirmation is sent by Friendly Captcha to the server that this is a natural person.
Friendly Captcha processes and stores the following data in the above process:
- Anonymized IP address of the requesting computer.
- Information about the used browser, as well as operating system
- Anonymized counter per IP address to control the cryptographic tasks
- Website from which the access has taken place (so-called referer URL)
The data is processed to protect against abusive access or spam attacks by bots. If personal data is processed when Friendly Captcha is used, it is deleted after 30 days. The legal basis for the processing is our legitimate interest in the security of data processing pursuant to Art. 6 para. 1 sentence 1 f) GDPR. More information available at https://friendlycaptcha.com/de/privacy
7. Integration of social plug-ins on the website
If we use so-called “social plug-ins” on our websites, we integrate them as described below. When you visit our websites, the social plug-ins are deactivated, i.e. no transmission of any data to the operators of these networks takes place. If you wish to use one of the networks, click on the respective social plug-in to establish a direct connection with the server of the respective network. If you have a user account with the network and are logged in there at the moment of activating the social plug-in, the network can assign your visit to our website to your user account. If you wish to avoid this, please log out of the network before activating the social plug-in. A social network cannot assign a visit to other terre des hommes websites until you have also activated a social plug-in present there. If you activate a social plug-in, the network transmits the content that becomes available as a result directly to your browser, which integrates it into our websites. In this situation, data transfers may also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on this platform are governed exclusively by the privacy policy of the respective network. The social plug-in remains active until you deactivate it or delete your cookies.
When you click on the link to an offer or activate a social plug-in, personal data may end up with providers in countries outside the European Economic Area that, from the perspective of the European Union (“EU”), do not ensure an “adequate level of protection” for the processing of personal data in line with EU standards.
8. Your rights as a data subject
The following rights are available to you as a data subject in principle and, insofar as contractual and legal obligations do not conflict with this:
- Right of access (Art. 15 GDPR) with the restrictions according to §§ 34, 35 Federal Data Protection Act;
- Right to rectification of inaccurate data (Art. 16 GDPR);
- Right to deletion (Art. 17 GDPR) with the restrictions according to §§ 34, 35 Federal Data Protection Act;
- Right to restrict the processing of personal data (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR);
- Right to complain to a data protection supervisory authority (Art. 77 GDPR); the data protection supervisory authority responsible for terre des hommes Germany e.V. is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover;
- Individual right of objection (Art. 21 para. 1 GDPR) on grounds arising from your particular situation and concerning data processing pursuant to Art. 6 para. 1 sentence 1 lit. e and Art. 6 para. 1 sentence 1 lit. f GDPR;
- Right to object to the processing of data for advertising purposes (Art. 21 para. 3 GDPR; you may object to the use of your data for advertising purposes at any time with effect for the future.
If the data processing is based on consent, your consent can be revoked at any time with effect for the future. The legality of the data processing carried out up to the time of the revocation is not affected by this.
The easiest way to exercise the rights of the data subject is to contact us using the contact details given under point 1.
9. Note for parents or guardians
Parents or guardians are responsible for protecting the privacy of their children. We ask you to talk to your children about safe and responsible handling of their own personal data on the Internet.
The development of the Internet or legislation may require adjustments to our privacy policy. We always post changes to our privacy policy here and recommend that you read this policy occasionally.
Last updated: June 2023