Asset Publisher

Thank you for your interest in our company and our websites. We take the protection of your personal data and the protection of your privacy very seriously. We want you to know when we store which data and how we use it. Below we would like to inform you about how we handle your data.

 

Controller (Art. 4 para. 7 GDPR) is the

Konrad-Adenauer-Stiftung e. V.
Klingelhöferstraße 23
10785 Berlin

Tel: +49 30 26996-0 (Zentrale)
Fax: +49 30 26996-3217 (Zentrale)

E-mail: zentrale@kas.de

 

You can reach our data protection officer at

Konrad-Adenauer-Stiftung e. V.
– Datenschutzbeauftragter –
Klingelhöferstraße 23
10785 Berlin

E-mail: dsb@kas.de

 

When you use our website, we process your personal data. We process your data strictly confidentially and only for the purpose we informed you about when collecting the data. Our standards for processing your data are the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other applicable data protection regulations.

 

1. Processing of your personal data when you visit our website

1.1. Scope of data processing

Every time our website is accessed and every time a file is retrieved, data, including personal data, is collected by our systems, and temporarily stored in a log file. The following personal data is processed:

  • IP address (if applicable, in anonymized, shortened form)
  • Date and time of access (timestamp)
  • Access details and destination address (protocol version, HTTP method, referrer, user agent string)
  • Name of the retrieved file and transferred data volume (requested URL incl. query string, size in bytes)
  • Information whether the retrieval was successful (HTTP Status Code)
  • Web page where the request originated
  • Browser type or app used
  • Operating system and its interface
  • Language and version of the browser software

 

1.2. Purposes of the data processing

We use the personal data collected during a visit to our websites to protect our IT systems from attacks and other illegal activities and to enable you to surf our websites as comfortably as possible. During this data processing, we do not draw any conclusions about your person. In this regard, neither a personal evaluation nor an evaluation of the data for marketing purposes or profiling takes place. Your data will be deleted after three months at the latest.

If you provide us with personal data, e.g., as part of a registration or for the execution of a contract (e.g., event participation), we use this data for these purposes. In addition, we use this data for the purposes of customer administration and, if necessary, for the purposes of billing for any business transactions, in each case to the extent necessary for this purpose.

Insofar as you have given us your consent in the context of our cookie banner (see section 2.), we and, if applicable, third parties will use your personal data to display personalized content or advertising to you based on your usage behavior. Analytical methods such as profiling or scoring may be used for this purpose.

In addition, we process your data insofar as there is a legal obligation to do so, e.g., in the case of retention obligations under commercial or tax law.

We use your data to customize the functionality of our websites based on your usage behavior.

 

1.3. Disclosure of your personal data

To optimize and secure our websites and to improve our business operations, we may use other external service providers, e.g., data centers, IT service providers. These service providers are carefully selected by us and contractually obligated accordingly. As part of their service provision, it may be necessary for these service providers to process your personal data. However, we only pass on your data insofar as this is necessary for the provision of our websites, to comply with our legal obligations, to protect our legitimate interests or if we have your consent.

 

1.4. Data transfer to recipients in third countries

In principle, the processing of your personal data takes place in Germany or within the European Union ("EU") or within the European Economic Area ("EEA"). By using external service providers or based on your consent, a transfer and processing of your personal data outside the EU or the EEA may occur. In these cases, we will take the necessary measures to continue to protect your personal data and to comply with the requirements of data protection laws.

These transfers are usually based either on adequacy decisions (Art. 45 GDPR), e.g., to Switzerland or the United States. In other cases, the transfer may be based on the use of the EU standard contractual clauses (Art. 46 GDPR) if there is no adequacy decision for the recipient country or the required certifications have not been made (esp. in the case of the EU-U.S. Data Privacy Framework).

Please note, however, that for individual processing activities it is possible that we transfer the data to a third country whose data protection regulations differ from the GDPR. This affects the applicable level of data protection, e.g., in some cases there may be no comparably effective legal remedies against access to data by state authorities. 

 

1.5. Legal basis of the data processing operations

If you gave consent for the processing of your personal data, your consent is also the legal basis for the processing, pursuant to Art. 6 para. 1 lit. a GDPR.

If information from end devices (e.g., cell phones, desktop) is accessed or stored, this is done in accordance with Section 25 TDDDG.

The legal basis for the processing of your personal data for the performance of a contract, is Art. 6 para. 1 lit. b GDPR.

The legal basis for processing your personal data to comply with our legal obligations, is Art. 6 para. 1 lit. c GDPR.

If we process your personal data to protect our legitimate interests or those of a third party, Art. 6 (1) f GDPR is the corresponding legal basis. The type of personal data, the purpose of processing, the circumstances of processing and the interest in the confidentiality of the personal data, are considered in the context of the balancing of interests.

 

1.6. Duration of the storage of your personal data

As a matter of principle, we delete your personal data as soon as the purpose of processing stated in this data protection declaration ceases to apply. If necessary, storage will take place beyond this point in time, insofar as we are legally obliged to do so, or it is necessary for the defense of legal claims. If deletion should not be possible in individual cases, the data concerned will be blocked for further processing.

 

2. Cookies, analysis and marketing technologies

We use cookies and comparable analysis and marketing technologies ("cookies") on our websites. Cookies are stored on your computer and transmitted from it to our websites. A cookie contains a characteristic string of characters that enables your web browser to be uniquely identified when you return to our websites.
 We distinguish between technically necessary cookies (section 2.1.), analytical and statistical cookies (section 2.3.) and marketing cookies (section 2.4.).

We use analytical and marketing cookies exclusively with your consent, pursuant to Art. 6 Para. 1 lit. a GDPR. Please note our information on data transfers to third countries (section 1.4.). The storage or retrieval of information in the terminal device only takes place with your consent, pursuant to Section 25 TDDDG. However, if the storage or retrieval is necessary for the provision of the website, no consent is required, pursuant to Section 25 TDDDG.

Likewise, you can configure the handling of cookies in your browser yourself. By changing the settings in your browser, you can disable or restrict the transmission of cookies. You can delete cookies that have already been stored at any time. If cookies are deactivated for our websites, it may no longer be possible to use all functions to their full extent.

For more information, see the web pages of your respective browser provider:

Google Chrome support.google.com/accounts/answer/61416?hl=de
Mozilla Firefox support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectlocale=de&redirectslug=cookies-loeschen-daten-von-websites-entfernen
Safari support.apple.com/de-de/guide/safari/sfri11471/mac
Internet Explorer support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Opera help.opera.com/de/latest/web-preferences/

 

2.1 Technically required cookies 

These cookies are technically necessary for the proper operation of our websites. Among other things, they ensure the technical stability of our websites and enable security-relevant functionalities. The use of certain functions (e.g., contact forms) is also only made possible by technically necessary cookies. There is no possibility to use our websites without such processing of data, i.e., you have no possibility to object.

We use this type of cookies to increase the security and functionality of our websites and offered web applications.

The processing of personal data using necessary cookies is based on Art. 6 (1) lit. f GDPR. With the use of technically necessary cookies, we aim to simplify the use of our websites for you. Some functions of our websites cannot be offered without the use of cookies. For these, it is necessary that the browser you use is recognized even after a change of website. Our legitimate interest also lies in these purposes. We do not use your user data collected through technically necessary cookies to create user profiles.

We use the necessary cookies listed below:

Cookie name Purpose Deletion period Cookie type
LFR_SESSION_STATE_* Status of the current Liferay session(s) Session Secure
JSESSIONID To process your session-related requests to our server Session HTTP
GUEST_LANGUAGE_ID

Used to save the last selected language of the current visitor.

1 year

 HTTP
COOKIE_SUPPORT

This cookie is used to check whether the visitor's browser supports cookies.

1 year

 HTTP
cookieconsent_status

Stores the information whether the cookie content has already been displayed.

 1 year  
kas_statistics_consent

Stores the visitor's consent status for cookies on the current domain.

1 month

  
LOGIN

Used for account creation so that the login field is automatically filled in after the account is created, or to automatically fill in the login field after the user logs out.

1 year

 HTTP
COMPANY_ID

Used to track the Liferay portal instance to which an authenticated user has logged in.

 Session HTTP
ID

Liferay user ID for the assignment of the logged-in user

 Session HTTP

 

2.2 Cookies for statistical analysis

These cookies enable us to obtain statistical information about the use of our websites and to understand how visitors interact with our websites. With the help of these cookies, we can, for example, determine the number of visitors to our websites and optimize our website content. The data analysis is anonymized.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our websites or not being able to use them to their full extent.

The legal basis for the processing of personal data using cookies for reach measurement is your consent pursuant to Art. 6 (1) lit. a GDPR. You have the right to revoke your consent at any time without giving reasons with effect for the future.

We use the cookies listed below for analysis and statistics:

Cookie name Provider Purpose

Deletion period

 Cookie type
_pk_id www.kas.de

Matomo: used to store some details about the user, such as the unique visitor ID.

13 months

SameSite Lax
_pk_ses www.kas.de

Matomo: short-lived cookies used to temporarily store data for the visit.

30 minutes

 SameSite Lax
_pk_ref www.kas.de

Matomo: used to store the attribution information , the referrer that was originally used to visit the website

6 months

 SameSite Lax
matomo_sessid www.kas.de

Matomo: it is important to note that it does not contain data used to identify visitors and is considered an "essential" cookie

14 days

 HTTP, Secure, SameSite Lax

 

2.2.1 Matomo

Our websites use Matomo, a web analytics service (on premise). We use Matomo to analyze the use of our website and individual functions and offers to optimize our websites. Matomo uses cookies that allow an evaluation of your use of our websites (including your IP address).

We have activated the function "Anonymize Visitors' IP addresses" on our websites. This means that your IP addresses are processed in a shortened form so that a reference to a person can be excluded.

The legal basis for the processing of the data is your consent, according to Art. 6 para. 1 lit. a GDPR.

You have the right to revoke your consent at any time without giving reasons with effect for the future.

If you do not agree with the processing of your data in the context of the use of our websites, you have the option to completely deactivate Matomo in your browser settings (see section 2). In this case, it is possible that not all functions of our websites will be fully available to you.

Further information on Matomo's terms of use and data protection can be found at https://matomo.org/privacy-policy/.

 

2.3 Cookies for marketing and other services

Usage analysis cookies allow us to analyze how you use our websites. With the help of these cookies, we can test the effectiveness of our websites and detect errors. In addition, these cookies provide insights for optimizing our services and for web analytics. We can also use them to show you usage-based content and personalized advertising.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our websites or not being able to use them to their full extent.

The legal basis for the processing of personal data using cookies for usage analysis is your consent pursuant to Art. 6 (1) lit. a GDPR.

 

2.3.1 General information on the integration of Google services

In order to continuously improve our website and to provide you with the best possible user experience on our websites, we use the services of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Within the scope of the services, Google may process your personal data. It cannot be ruled out that Google may also transfer your data to a server outside the EU, possibly in the USA or in another third country. For more information, please visit https://policies.google.com/privacy/frameworks?gl=de.

We have no influence on how and which of your personal data Google processes. According to Google's privacy policy, depending on the respective Google service, the following personal data may be processed (see https://policies.google.com/privacy?gl=de#infocollect):

  • Data about the apps, browsers, and devices you use when accessing Google services.
  • Unique identifiers, the type and settings of your browser, the type and settings of your device, the operating system, mobile network information (name of your mobile carrier, phone number, app version number).
  • Data about how your apps, browsers, and devices interact with Google services (e.g., IP address, crash reports, system activity, and the date, time, and referring URL of your request).
  • Activity data (e.g., terms you search for, videos you watch, content and ads you view and interact with).

Further information on how Google uses data from websites on which Google services are embedded can be found at https://policies.google.com/technologies/partner-sites?hl=de.

For the purpose and scope of data processing by Google, as well as your rights in this regard and settings options for protecting your privacy, please refer to Google's privacy policy at https://policies.google.com/privacy?hl=de. Information on your privacy settings can be found at https://safety.google/privacy/privacy-controls/.

 

2.3.1.1 Google Ads / Adwords / Conversion Tracking

Our websites use Google Ads and, within the scope of Google AdWords, conversion tracking, an analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information generated by the cookies is transmitted to a Google server, possibly in the USA or in another third country, and stored there. We ourselves do not collect and process any personal data in the advertising measures. We are only provided with statistical evaluations by Google. Based on these evaluations, we can see which of our advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools, in particular we cannot identify you from this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server.

The legal basis for processing the data is your consent pursuant to Art. 6 (1) a GDPR. You have the right to revoke your consent at any time without giving reasons with effect for the future (see rights of data subjects).

If you do not agree with the future transmission of your data to Google in the context of the use of our websites, you have the option to deactivate Google Ads in your browser settings (section 2). Furthermore, you have the option of objecting to interest-based advertising by Google by making the settings you wish at www.google.de/settings/ads. In this case, it is possible that not all functions of our websites will be fully available to you.

 

2.3.1.2 Google Maps

We use Google Maps, a service of the provider Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. As part of the services, Google may process personal data about you. Google Maps is a map service that is intended to make it easy to find the places we indicate on our websites. By using Google Maps, data about your use of the Maps functions on our websites may be processed by Google. In this context, it cannot be ruled out that Google also transmits the information to a US server. For more information, please visit https://policies.google.com/privacy/frameworks?gl=de.

The legal basis for the processing of the data is your consent, according to Art. 6 para. 1 lit. a GDPR.

You have the right to revoke your consent at any time without giving reasons with effect for the future.

If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, you have the option to deactivate Google Maps in your browser settings. In this case, however, you will no longer be able to use Google Maps and the map display.

 

2.3.2 YouTube

On our websites, we have integrated content via the video platform service YouTube. YouTube is a service provided by YouTube LLC ("YouTube"), 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. We integrate content from YouTube on our websites in order to make various videos directly available to you on our websites without you having to access the content separately on YouTube. This allows us to optimize our offer and make your user experience more interesting.

YouTube is integrated by embedding the service on our websites using a so-called "iFrame". When loading this iFrame, it cannot be ruled out that YouTube or Google may process your personal data and transmit it to a server in a third country.

The legal basis for the processing of the data is your consent, according to Art. 6 para. 1 lit. a GDPR.

You have the right to revoke your consent at any time without giving reasons with effect for the future.

If you do not agree with the future transmission of your data to Google in the context of the use of YouTube, you have the option to deactivate YouTube in your browser settings. In this case, however, you can no longer watch videos YouTube.

Information and further notes on data processing by Google in the context of the use of Google services can be found in this privacy policy under section 2.3.1 "General information on the integration of Google services".

 

3. Contact

You have several ways to get in touch with us.

 

3.1 Scope of data processing

You have the option of contacting us via the contact channels provided on our websites (e-mail, mail, telephone, fax). In this case, we process your personal data transmitted to us (e.g., e-mail address, postal address, telephone number, data resulting from the content). 

 

3.2 Legal basis

If your contact refers to a contract or is a pre-contractual contact, Art. 6 (1) lit. b GDPR is the legal basis. In all other cases, the legal basis for processing your data is Art. 6 para. 1 lit. f GDPR. It is our legitimate interest to process your contact requests.

 

3.3 Purpose of the data processing

The purpose of the data processing is the handling of your contact request. The data is processed exclusively for this purpose.

We pass on your data to our service providers within the scope of what is legally permissible in the context of order processing. For their part, our service providers are obligated to comply with the applicable data protection provisions; in particular, they may process your data exclusively for the fulfillment of their tasks on our behalf and only in accordance with our instructions.

 

3.4 Duration of the storage of your personal data

After complete processing of the contact request, we restrict your data for further processing. If your contact is aimed at establishing a lasting business relationship, we will retain your data for the duration of this contact relationship.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to contact us.

 

4. Newsletter

On our websites you have the possibility to subscribe to our free newsletter.

 

4.1 Scope of data processing

In the case of registration for our newsletter, the following personal data is processed by us in each case:

  • Name
  • E-Mail-address
  • Optional information (e.g., the desired contact method, the region you live in, areas of interest or other topic-specific information)
  • IP address of the calling computer
  • Date and time of dispatch.

For the processing of the data, your consent is obtained during the registration process. We secure the registration by a so-called double opt-in procedure. In this way, we ensure that the e-mail address provided in connection with the newsletter subscription is assigned to you. After you have entered your required data (name, e-mail address) in the respective input mask, you will receive an automated e-mail with an activation link. By confirming the link, you have subscribed to our newsletter.

 

4.2 Legal basis

The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a GDPR.

You have the right to revoke your consent by unsubscribing from the newsletter via the link in every mail or at infos-abbestellen@kas.de at any time without giving reasons with effect for the future (see rights of data subjects).

 

4.3 Purpose of the data processing

The purpose of the data processing is the implementation of the newsletter subscription. The data is processed exclusively for this purpose.
We pass on your data to our service providers within the scope of what is legally permissible as part of order processing. For their part, our service providers are obligated to comply with the applicable data protection provisions; in particular, they may process your data exclusively for the performance of their tasks on our behalf and only in accordance with our instructions.

 

4.4 Duration of the storage of your personal data

We store your personal data for the duration of your respective subscription to our newsletter.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, if you do not provide us with the data, you cannot subscribe to our newsletter.

 

5. Product information

5.1 E-mail advertising in connection with the offer of a service

5.1.1 Scope of data processing

If we have received your personal data (first name, last name, e-mail address) in connection with the sale of a product or service and you have not objected to this, we reserve the right, in accordance with Section 7 (3) UWG, to regularly send you offers by e-mail for similar products to those you have already purchased from our range.

 

5.1.2 Legal basis

The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f GDPR. We have an overriding legitimate interest in addressing our customers in an advertising manner.

You have the right to object to the processing of your personal data at any time with effect for the future by unsubscribing via link in the e-mail or at infos-abbestellen@kas.de (see rights of the data subjects).

We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.

 

5.1.3 Purpose of the data processing

The purpose of data processing is the implementation of marketing measures. Your data will not be passed on to third parties in this context.
We pass on your data to our service providers within the scope of what is legally permissible as part of order processing. For their part, our service providers are obligated to comply with the applicable data protection regulations; in particular, they may only process your data to fulfill their tasks on our behalf and only in accordance with our instructions.

 

5.1.4 Duration of the storage of your personal data

We store your personal data until you object. After exercising your objection, we delete your personal data, unless you have expressly consented to further use, or we reserve the right to further data processing that is permitted by law and about which we inform you in this statement.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, if you do not provide us with the data, it will not be possible to send you product information by e-mail.

 

5.2 Postal advertising

5.2.1 Scope of data processing

We reserve the right to process your personal data (first name, last name, postal address) in the context of sending offers and product information by mail.

 

5.2.2 Legal basis

The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f GDPR. We have an overriding legitimate interest in addressing our customers in an advertising manner.

You have the right to object to the processing of your personal data at any time with effect for the future by writing us at infos-abbestellen@kas.de or at our headquarters address (see rights of the data subjects).

We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.

 

5.2.3 Purpose of the data processing

The purpose of data processing is the implementation of marketing measures.
We pass on your data to our service providers within the scope of what is legally permissible as part of commissioned processing. Our service providers are obligated to comply with the applicable data protection regulations, they may process your data exclusively for the fulfillment of their tasks on our behalf and only according to our instructions.

 

5.2.4 Duration of the storage of your personal data

We store your personal data until revocation. After exercised revocation, we delete your personal data, unless you have expressly consented to further use, or we reserve the right to further data processing that is permitted by law and about which we inform you in this statement.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, if you do not provide us with the above data, it will not be possible to send you product information by mail.

 

6. Sweepstakes

6.1 Scope of data processing

From time to time, we offer competitions on our websites and social media presences. If you take the opportunity to participate in our competitions, the data you enter in the respective input mask will be stored.

 

6.2 Legal basis

The data processing in this context is based on Art. 6 para. 1 lit. a GDPR.

You have the right to revoke your consent at any time without giving reasons with effect for the future (see rights of the persons concerned). In the event of revocation, you will no longer be able to participate in the respective competition.

 

6.3 Purpose of the data processing

We process your personal data for the purpose of conducting the sweepstakes, including to determine whether you are eligible to participate and to determine and notify the winners.

In order to send the prizes, we may pass on your data to our shipping partners, who support us in the implementation of the prize draw, within the scope of what is legally permissible. These companies are in turn obligated to comply with the applicable data protection provisions; in particular, these companies may process the data exclusively for the fulfillment of their tasks on our behalf and only in accordance with our instructions.

 

6.4 Duration of the storage of your personal data

As soon as the business purpose of conducting the competition has been fulfilled and you have not been determined as the winner, we will delete your data after the competition has ended.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, if you do not provide us with the data, it will not be possible to participate in the competition or to contact you regarding a prize notification.

 

7. Internal website area/user account

7.1 Scope of data processing

On our websites, we offer you access to our protected internal website area for the use of the comment function on various publications. To do this, you must register with a user account using the access data provided to you on request. Your personal data transmitted in this context will be stored by us.

In the case of the use of these functions, the following personal data is processed by us in each case:

  • Name
  • E-mail address
  • Date of birth.

In the form, only those fields are specified as mandatory fields that are absolutely necessary for the use of the respective offer. After the successful entry, you will receive a registration e-mail to the specified e-mail address, which contains a link by means of which you can confirm your registration and complete the regulation process. After registration, you can access our internal website area at any time by entering your e-mail address and password.

 

7.2 Legal basis

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR.

You have the right to revoke your consent at any time without giving reasons with effect for the future, for example by deactivating your user account. In this case, however, you will no longer be able to access our internal website area.

 

7.3 Purpose of the data processing

We use the data to manage your user account. If necessary, we pass on your data to our service providers within the scope of what is legally permissible as part of order processing. Our service providers are obligated to comply with the applicable data protection regulations, they may process your data exclusively for the fulfillment of their tasks on our behalf and only according to our instructions.

 

7.4 Duration of the storage of your personal data

In case of deactivation of your user account, we will delete your personal data immediately, unless there are any legal requirements to the contrary (e.g., criminal prosecution due to investigation of individual comments).

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, if you do not provide us with the data, the creation of a user account is not possible.

 

8. Event registration 

8.1 Scope of data processing

The Konrad-Adenauer-Stiftung e.V. offers various events (on-site or online).  To participate in these events, you must register using the forms provided on our websites.

The following data may be collected:

  • First name, last name
  • E-mail address
  • Information that is considered a prerequisite for the event (e.g., student status)
  • Information that is required for participation in the event (e.g., indication of age in order to take measures to protect minors; indication of food intolerances, in the case of catering by KAS).

In the forms, only those fields are indicated as mandatory fields that are absolutely necessary for the use of the respective offer, i.e., the data that we need to confirm your registration, to inform you about the specific event and to identify you if necessary.

Following the event, your contact data will remain in our customer database so that we can also inform you about thematically similar events in the future (see section 5).

 

8.2 Legal basis

The legal basis for the data processing is Art. 6 para. 1 lit. b GDPR, as we need your information to fulfill our contractual obligation in the context of the event offer.

We process further information from you that we need to comply with legal requirements (e.g., protection of minors) or to defend ourselves against legal claims based on our overriding legitimate interest, Art. 6 (1) lit. f GDPR.

If we process your health data (e.g., food intolerances), this is done based on your consent in accordance with Art. 9 (2) a, Art. 6 (1) a GDPR.

The storage of your data in our participant file is based on our legitimate interest in being able to maintain contact with you in the future (Art. 6 Para. 1 lit. f GDPR). You can object to this at any time within the scope of your right to object according to Art. 21 GDPR (see rights of the persons concerned, item 11).

 

8.3 Purpose of the data processing

We use your data to conduct the event and to subsequently send you event-related information, if you can be assigned to the same main topic as the event you have selected.

We pass on your data to our service providers within the scope of what is legally permissible as part of commissioned processing. Our service providers are obligated to comply with the applicable data protection provisions, they may process your data exclusively for the fulfillment of their tasks on our behalf and only according to our instructions.

In the case of events with cooperation partners that are offered and/or carried out jointly, an exchange of all data for joint event administration takes place (e.g., participant lists, invitations; event organization, implementation; event billing and internal service allocation between the cooperation partners).

 

8.4 Duration of the storage of your personal data

After the completion of the event, your personal data will remain in our customer database unless you object to this processing.

The provision of your personal data is required to register for our events. Failure to provide it will result in you not being able to register for our events.

 

9. Online presences in social media

We operate online presences on social networks (“fan pages”). On these presences, we regularly publish and share content, offers and information on the activities of the Konrad-Adenauer-Stiftung. 

 

9.1 Scope of processing

With every interaction on our social media presences, your personal data is automatically collected and stored by the operators of the respective social network for market research and advertising purposes. It cannot be ruled out that the collected data may also be processed outside the European Union. Among other things, this may make it more difficult to enforce the rights of data subjects. We have no influence on which data is collected and transmitted by the operator of the social network, to which third-party recipients a transmission is made by the operator of the social network and how long the data is stored by the operator of the social network. In this regard, we refer to the privacy statements of the respective social network:

User profiles are created from the collected data using pseudonyms. These can be used, for example, to place advertisements within and outside the social networks that presumably correspond to your interests. 

When you access our profile page on one of the networks, the operator may set cookies or similar technologies on your end device, regardless of whether you have an account with this network or whether you are logged in there. This happens, for example, by showing users on the pages of the social network ads from advertising partners of the network whose websites they have previously visited. In addition, cookies make it possible to create statistics about the use of the respective profile page (e.g., number of page views, target groups).

If we receive such statistical analyses from the operator of the social network, the data is anonymized by the operator beforehand, i.e., it is not possible for us to assign usage data to an individual user. If you are logged in to the social network, however, the operator of the social network may be able to assign the visit to our profile on the platform to your account there. If you want to prevent the collected data from being directly assigned to your user account, you must log out of the respective social network before clicking on the graphic. 

We generally collect all communications, content, and other information you share with us when you visit our social media presence, such as when you post something on one of our social media presences or send us private messages. In addition, if you have an account on one of these networks, we may see your public information, such as your username, information in your public profile, and content you share with a public audience. The nature, scope and purposes of the processing of your personal data on social networks are primarily determined by the operators of the social networks. For further information on data processing by the respective provider, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of the social network (see above).

 

9.2 Usage analysis (page insights)

As part of our profiles on social media, the operators of the social network provide us with so-called "page insights". We use Facebook and Instagram Insights to learn more about our account subscribers or their performance. 

With each of your interactions with our social media profile, Facebook or Instagram records your usage behavior by means of cookies and similar technologies. These are anonymized statistics that can give us information about the interaction with our posts or other content. An assignment to your person is not possible for us. We have no access to the personal data used by Facebook or Instagram for the creation of insights ("page insights data"). The selection and processing of Page Insights data is carried out exclusively by the operator of the social network.

Insights provide us with information on how our audience interacts with specific posts, stories, videos, reels, and live videos. Insights and metrics for our account may also include paid activity. The following Insights are available to us on Facebook and Instagram, respectively: 

  • Current highlights,
  • Overview of reached accounts or accounts that have interacted; 
  • Total number of friends/subscribers;
  • Content we shared;
  • Interactions with our account;
  • Discoveries;
  • Display information. 

This helps us to optimize our activities on the presences, for example by being able to better respond to the interests and usage habits of our audience when planning and selecting our content.

As part of the Insights function, Facebook or Instagram may provide us with the following data categories, among others, in anonymized (statistical) form for the purpose of performance measurement and optimization of our presence:

  • Date and time of the action;
  • Country/city of the user,
  • Language code (http status code);
  • Age/Gender Group;
  • Previously visited website;
  • End device of the user;
  • User ID (if logged in).

Facebook or Instagram and we are joint controllers for the processing of your data in connection with Insights. In this context, the operator of the social network provides the associated IT infrastructure as well as the website of the social network and is the primary contact when it comes to processing your data on the pages of the social network (e.g., information or deletion). Regarding data processing on social networks, we therefore recommend that you contact the respective social network directly for information requests or other questions regarding user rights, such as a deletion request, as only the operators of the social networks have full access to your user data. However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network if necessary. For this purpose, we have stipulated in an agreement which company fulfills which data protection obligations in accordance with the GDPR regarding the processing of Page Insights data.

You can view the agreement with Facebook (incl. Instagram as a Facebook product) here:
 https://www.facebook.com/legal/terms/page_controller_addendum. 

A compilation of the key contents of this agreement can be found here:
 https://www.facebook.com/legal/terms/information_about_page_insights_data. 

 

9.3 Legal basis of the processing

We operate our social media presences in order to inform about our offers and services as well as to provide an additional contact option. If you are asked by the respective network operator for consent to data processing, the legal basis for data processing is Article 6 (1) a GDPR. Otherwise, the legal basis is Article 6 (1) lit. f GDPR. We have an overriding legitimate interest in an optimized presentation of our offers and effective communication with our customers and interested parties.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with effect for the future. If you do not agree with the future transmission of your data in the context of the use of our social media presences, you have the option to object to the data processing:

In the event of consent withdrawal, it is possible that not all functions of our websites will be fully available to you.

 

Right of objection (Art. 21 GDPR) 

You have the right to object to the processing of your personal data at any time with future effect, for example by sending an e-mail to dsb@kas.de. 

We will not subsequently process your personal data further unless we can demonstrate compelling legitimate grounds for our processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. For the processing of your Page Insights data together with Facebook or Instagram, we have agreed with the respective operator that they are primarily responsible for providing you with information about the processing of your Page Insights data and enabling you to exercise your data protection rights under the GDPR (e.g. right to object). You can find more information about your data protection rights in connection with Page Insights directly from the operator of the respective network.

You can also assert your rights with us in connection with processing activities that concern our joint responsibility with network operators, e.g., by e-mail dsb@kas.de. In this case, we will forward your request to the network operator without delay.

9.4 Purpose of data processing 

With our online presences we aim at an effective communication with our customers and interested parties as well as an optimized presentation of our offers.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our website and social media sites, or not being able to use them to their full extent.

 

9.5 Duration of data processing

We delete private messages that you send to us via social networks within 7 days of the last communication with you. We leave public posts from you (e.g., in our timeline) permanently published until you explicitly request their deletion or delete the posts in question yourself. We reserve the right to delete illegal content published on our profile page, e.g., copyright infringements or criminally relevant statements. In addition, we store usernames and comments that are deleted due to violation of netiquette. These will only be kept for possible proof in case of legal disputes within the statute of limitations.

The data collected directly by us via the social media presence is deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please refer to the privacy policy of the respective network (see above).

 

10. Social plugins

We use so-called social plugins on our websites, which are provided by third-party providers of social networks. These plugins can be interaction elements or content (graphics, videos, or text contributions) (see 9.).

In order to increase the protection of your data when visiting our websites, we have only integrated the social plug-ins to a limited extent, i.e., only using an HTML link on our websites. This integration prevents the social plugins integrated on our websites from establishing a connection with the servers of the provider of the respective social network and transmitting your data when you call up our websites.

Only when you activate the respective plugin by clicking on the associated button, a new window of your browser opens and calls up the page of the respective provider, on which you can (possibly after entering your login data) e.g., press the Like- or Share-button.

If you are logged in to the respective social network of the third-party provider while visiting our websites, the third-party provider of the respective social network may be able to recognize the information thus collected from your specific visit and assign it to your personal profile or publish it via this. If you want to prevent the assignment, you must either log out of the respective social network before clicking on the social plugin or make the corresponding settings in your user account of the social network.

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the best possible presentation of our offer and extensive visibility in social media.

You have the right to object to the processing of your personal data at any time with effect for the future (see rights of data subjects). You can find more information about your objection options on the websites of the respective providers (see above). We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves to assert, exercise, or defend legal claims. You may also exercise your rights in relation to processing activities concerning our joint responsibility with Facebook with us. In this case, we will forward your request to Facebook without delay to bring about a prompt clarification.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our websites or not being able to use them to their full extent.

We use the social plugins of the following third-party providers:

 

10.1 Facebook

Facebook is an Internet service provided by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94107, USA. In the EU, this service is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Further information about the possible representations of the plugins as well as their respective functions can be viewed at https://developers.facebook.com/docs/plugins/. It is possible that Facebook stores your IP address even though you are not a registered member. At https://www.facebook.com/policy.php you will find further information on data processing by Facebook as well as your rights and protection options in this regard.

 

10.2 Instagram

Instagram is an internet service of Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA 94107, USA. In the EU, this service is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. At https://privacycenter.instagram.com/policy you can find more information about data processing by Instagram and your rights and protection options in this regard.

 

10.3 Twitter

Twitter is an Internet service provided by Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107, USA. At https://twitter.com/de/privacy you will find further information on data processing by Twitter as well as your rights and protection options in this regard.

 

10.4 LinkedIn

LinkedIn is a service of the provider LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. At https://www.linkedin.com/legal/privacy-policy you can find more information about data processing by LinkedIn and your rights and protection options in this regard.

 

10.5 XING

XING is a service of the provider XING AG, Dammtorstraße 29-32, 20354 Hamburg. At https://www.xing.com/app/share?op=data_protection you will find further information on data processing by XING as well as your rights and protection options in this regard.

 

10.6 Soundcloud

Soundcloud is a service of SoundCloud Limited, 20 Old Bailey, London, EC4M 7AN, UK. At https://soundcloud.com/pages/privacy you can find more information about the data processing by Soundcloud and your rights and protection options in this regard.

 

10.7 Spotify

Spotify is a service of the provider Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. At https://www.spotify.com/de/legal/privacy-policy/, you can find more information about Spotify's data processing and your rights and protections in this regard.

 

10.8 YouTube

YouTube is a service of the provider YouTube LLC ("YouTube"), 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For videos from Youtube that are embedded on our site, the extended data protection setting is activated. This means that your personal data is only processed by YouTube when you play a YouTube video provided on our web pages. At https://policies.google.com/privacy you can find more information about data processing by YouTube and your rights and protection options in this regard.

 

10.9 Vimeo

Vimeo is a service of the provider Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA. At https://vimeo.com/privacy, you can find more information about data processing by Vimeo and your rights and protection options in this regard.

 

10.10 Podigee

Podigee is a service of Podigee GmbH, Schlesische Straße 20, 10997 Berlin. Podigee is a podcast hosting platform that allows us to embed a podcast player on our website. For more information on data processing by Podigee and your rights and protection options in this regard, please visit https://www.podigee.com/de/ueber-uns/datenschutz.

 

10.11 3Q

3Q is a service of 3Q GmbH, Belfortstraße 5, 81667 Munich. This tool sets a cookie on the information technology system of the data subject. By setting the cookie, 3Q is enabled to analyze the use of our video content or platform. As part of this technical process, 3Q obtains knowledge of personal data, such as the IP address of the data subject, which 3Q uses, among other things, to enable usage analyses for the use of audiovisual content. At https://3q.video/datenschutzhinweise you can find more information about data processing by 3Q and your rights and protection options in this regard.

 

10.12 Flipping book

On our websites we have embedded content via the image catalog service FlippingBook. FlippingBook is a service provided by FlippingBook Limited ("FlippingBook"), Sqaq Cordina, Cospicua BML1900, Malta. We include content from FlippingBook on our websites to display online image catalogs and present images and videos over them. This allows us to optimize our offer and make your user experience more interesting. Information and further details on data processing by FlippingBook can be found in their privacy policy at https://flippingbook.com/de/help/common/privacy-policy-and-disclaimer.

 

11. Rights of the data subject

If we process your personal data, you are a data subject according to Art. 4 No. 1 GDPR with the following rights towards us:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
  • Right to withdraw your consent under data protection law (Art. 7 para. 3 GDPR)

You have the right to withdraw your consent to us at any time, e.g., by sending an e-mail to dsb@kas.de. The withdrawal of consent does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation.

 

Right to object (Art. 21 GDPR)

In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. e or f GDPR for reasons arising from your situation; this also applies to profiling based on these provisions. You can address the objection to one of our specified contact addresses, for example to dsb@kas.de.

We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.

If you wish to exercise a right, please contact our Data Protection Officer at dsb@kas.de.

We would like to point out that in certain cases we may request additional information from you in order to establish your identity. For example, when exercising the right to information, we can ensure that information is not released to unauthorized persons.

Automated decision-making does not take place on our websites.

 

12. Safety

We use technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. We continuously improve our security measures in line with technological developments.

 

13. Responsibility for external content

Our websites contain links to websites of external providers. We have no influence on and do not control that other providers comply with the applicable data protection regulations. If you believe that linked external sites violate applicable law or have other inappropriate content, please let us know. We will check your notice and remove the external link if necessary. We are not responsible for the content and availability of linked external websites.

 

14. Validity of the privacy policy

Due to the further development of our websites or the implementation of new technologies, it may become necessary to change this data protection declaration. We reserve the right to change this privacy policy at any time with effect for the future. The version available at the time of your visit to the website will always apply.

 

Status: August 2023