Privacy Notice

1. General Information

Protecting and securing your personal data is of particular importance to us. We treat your personal data confidentially and process it only within the framework of legal data protection regulations and this privacy notice. To ensure the highest possible level of protection for your informational self-determination, we specifically ensure that no data transfers to third countries outside the EU occur, we do not use tracking cookies, and we only cooperate with trusted data processors.

This privacy notice informs you about which data we collect when you use this website (www.digitalrechte.de), how we use it, and what rights you have as a data subject.

2. Data Controller

The data controller responsible for data processing on this website is:

Zentrum für Digitalrechte und Demokratie gGmbH
Benjamin von der Ahe
Görlitzer Straße 52, 10997 Berlin, Germany
datenschutz@digitalrechte.de

3. Hosting

Our website is hosted by Uberspace GmbH, Kaiserstraße 15, 55116 Mainz, Germany. All data processed in connection with the operation of this website is stored on servers located in Germany.

Uberspace processes personal data exclusively on our behalf and based on a data processing agreement in accordance with Article 28 GDPR.

Further information on data protection at Uberspace can be found at:
https://uberspace.de/de/about/privacy

4. Collection and Processing of Personal Data

When you visit our website, the web server automatically collects and stores the following information in so-called server log files:

  • IP address of the requesting device

  • Date and time of access

  • Name and URL of the accessed file

  • Website from which the access originated (referrer URL)

  • Browser used and, if applicable, the operating system of the device

This data is technically necessary to display the website and to ensure its stability and security (Article 6(1)(f) GDPR).This data is not combined with other data sources. The log file data is stored separately from other personal data of users and is regularly deleted in accordance with legal requirements.

5. Cookies

Our website does not use cookies, except for those necessary for technical operation (e.g., for session management). We do not set tracking cookies or store data on your device.

Reach measurement (cookieless statistics)
To improve our website we collect anonymous usage statistics with a self-hosted solution on our server in Germany – without cookies and without storing any data on your device. For each page view, technical basics such as the page visited, device type, operating system, browser, language, screen size and the referring page are evaluated in aggregated form. Your IP address is processed only briefly to derive a daily-rotating, pseudonymous identifier and is not stored. No personal data is stored, no profiles are created, and no data is shared with third parties (Article 6(1)(f) GDPR).

6. Newsletter

If you wish to subscribe to the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. Additional information is not collected or is only collected on a voluntary basis.

The processing of the data entered into the newsletter subscription form is based solely on your consent (Article 6(1)(a) GDPR). You can revoke your consent to the storage of the data and its use for sending the newsletter at any time, for example, via the "unsubscribe" link in the newsletter. Data processing operations that have already taken place remain lawful even after revocation.

For sending our newsletter and for communication related to donations, we use the open-source software CiviCRM, which we operate on a server in Germany provided by Mittwald CM Service GmbH and Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany.

Data processing in CiviCRM
All data you enter when subscribing to the newsletter (in particular email address, and if applicable name) is stored exclusively in our CiviCRM installation on servers in Germany. Newsletter registration takes place in a so-called double opt-in process: after signing up you receive an email with a confirmation link that you must actively click. This confirmation is necessary to prevent anyone from registering with someone else's email address. When registering, IP address, date and time of registration and confirmation may be stored in CiviCRM to prevent misuse of the services or the data subject's email address. Data is stored until you unsubscribe from the newsletter and is deleted after unsubscribing.

We have concluded a data processing agreement with Mittwald CM Service GmbH and Co. KG in accordance with Article 28 GDPR. CiviCRM runs on our own installation; your newsletter data is not shared with third parties (except where legally required).

Statistical evaluation
CiviCRM offers the option to include tracking pixels in sent newsletters for statistical evaluation of delivery (e.g. open rates). If we enable this option, only pseudonymized technical information such as time of retrieval, IP address and browser type is collected and not merged with other data sources.

Further information about the CiviCRM project can be found at https://civicrm.org/. Information about hosting provider Mittwald can be found at https://www.mittwald.de/datenschutz.

Local “remember subscription” setting
If you tick the corresponding checkbox on the confirmation page, your browser stores locally that you have already subscribed, so the newsletter notice is not shown again. This information stays on your device, is not transmitted to us or any third party, and can be removed at any time by clearing your browser data.

7. Donation Form

We use a donation form provided by twingle GmbH, Prinzenallee 74, 13357 Berlin, on our website. twingle GmbH provides the technical platform for the donation process. The information you enter during the donation process (e.g., name, address, bank details, donation amount) is stored exclusively on servers in Germany and used to process the donation process you initiate.

If you subscribe to the newsletter via the donation form, the data entered for the newsletter (email address) will be stored and further processed in our CiviCRM installation. In this case, section 6 of this privacy notice regarding the newsletter applies.

We have concluded a data processing agreement with twingle GmbH in accordance with Article 28 GDPR and fully implement the strict requirements of the EU General Data Protection Regulation and German data protection authorities when using the donation form. Tracking for statistical purposes by twingle is disabled.

The transmission of your data is based on Article 6(1)(b) GDPR (processing for the performance of a contract), provided the information is essential for processing your donation, and – for any additional data (e.g., newsletter subscription) – Article 6(1)(a) GDPR (consent). You can revoke your consent to data processing at any time. Revocation does not affect the legality of data processing carried out before the revocation. twingle GmbH has assured us as a data processor that it consistently complies with legal deletion requirements. Further information can be found in twingle GmbH's privacy policy:
https://www.twingle.de/datenschutz/

8. Contacting Us

If you contact us via email or through a contact form, the information you provide, including your email address and, if applicable, your name, will be stored for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent and comply with legal deletion obligations.

9. Your Rights

As a data subject, you have the right to:

  • Access your stored data (Article 15 GDPR)

  • Rectify incorrect data (Article 16 GDPR)

  • Delete your data (Article 17 GDPR)

  • Restrict processing (Article 18 GDPR)

  • Data portability (Article 20 GDPR)

  • Object to processing (Article 21 GDPR)

An overview of the content and scope of data subject rights can be found at the Federal Commissioner for Data Protection and Freedom of Information (BfDI):
https://www.bfdi.bund.de/DE/Buerger/Basiswissen/Betroffenenrechte/BetroffenenRechte_node.html

To exercise your rights, please contact the data controller mentioned above for the operation of the website and the processing of personal data (digitalrechte GmbH).

10. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a data protection supervisory authority.

As our headquarters are in Berlin, the competent data protection supervisory authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
mailbox@datenschutz-berlin.de
Phone: +49 (0)30 13889-0

11. Changes to this Privacy Notice

We reserve the right to adapt this privacy notice to reflect changes in legal requirements or changes in our services and data processing.

Last updated: November 2025