Data Privacy Statement

Data protection information:

Name and contact of the controller in accordance with Article 4 (7) GDPR

Company: Bundeskanzler-Helmut-Schmidt-Stiftung
Address: Kattrepel 10, 20095 Hamburg
Telephone: +49 40 / 18 23 12 18
Email: info@remove-this.helmut-schmidt.de

Data Protection Officer
Name: Thomas Barthel
Address: Kattrepel 10, 20095 Hamburg
Email: info@remove-this.helmut-schmidt.de

Security and protection of your personal data
Upholding the confidentiality of the personal data made available to us by you and protecting them from unauthorised access is a priority for us. We, therefore, apply the utmost care and state-of-the-art security standards to ensure a maximum protection of your personal data.

As a federal foundation under public law, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the provisions of the Federal German Data Protection Act (BDSG). We have taken the technical and organisational measures to ensure that the provisions on data protection are observed both by us and by our external service providers.

Definitions
The legislator requires that personal data be processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”). In order to secure this, we inform you about the individual legal definitions which are also used in this Data Privacy Statement:

  1. Personal data
    “Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
     
  2. Processing
    “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
     
  3. Restriction of processing
    “Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future.
     
  4. Profiling
    “Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
     
  5. Pseudonymisation
    “Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
     
  6. Filing system
    “Filing system” means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.
     
  7. Controller
    “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
     
  8. Processor
    “Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
     
  9. Recipient
    “Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
     
  10. Third Party
    “Third party” means a natural or legal person, public authority, agency or other body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
     
  11. Consent
    “Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmation action, signifies agreement to the processing of personal data relating to him or her.

Lawfulness of processing
The processing of personal data shall be lawful only if there is a legal basis for the processing. The legal basis for the processing can, more particularly, be the following in accordance with Article 6 (1)(a) – (f) GDPR:
  a. The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  b. The processing is necessary for the performance of a contract, to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  c. The processing is necessary for compliance with a legal obligation to which the controller is subject;
  d. The processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  e. The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  f. The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests of fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Information about the collection of personal data
(1) We inform you hereinbelow about the collection of personal data when using our website. Personal data are eg name, address, email addresses, user behaviour.
(2) If you contact us by email or via a contact form, the data you provide (your email address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We erase the data obtained in this context after storage is no longer necessary, or processing is restricted if there are legal obligations to retain data.

Collection of personal data when visiting our website
When you use our website for information purposes only, ie if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure its stability and security (legal basis: Article 6 (1) sentence 1 lit f GDPR):

–    IP address
–    Date and time of the request
–    Time zone difference to Greenwich Mean Time (GMT)
–    Content of the request (specific page)
–    Access status / HTTP status code
–    Amount of data transferred in each case
–    Website from which the request came
–    Browser
–    Operating system and its user interface
–    Language and version of the browser software.

Use of cookies
The legal basis for the use of cookies is Section 25 (1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG).

(1) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard disk associated with the browser you are using and which provide the party setting the cookie with certain information. Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website offer as a whole more user friendly and effective.

(2) This website uses the following types of cookies, whose scope and function are explained below:
–    Transient cookies (a.)
–    Persistent cookies (b.).

  a. Transient cookies are automatically erased when you close the browser. They include, more particularly, session cookies. The latter store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This means that your computer can be recognised when you return to our website. The session cookies are erased when you log out or close the browser.
  b. Persistent cookies are automatically erased after a defined period of time, which may vary depending on the cookie. You can erase the cookies in the security settings of your browser at any time.
  c. You can configure your browser settings according to your wishes and eg refuse to accept third-party cookies or all cookies. So-called “third-party cookies” are cookies which have been set by a third party, ie not by the actual website you are currently visiting. Please note that by deactivating cookies, you may not be able to use all the functions of this website.
  d. We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
  e. The flash cookies used are not collected by your browser, but by your flash plug-in. Furthermore, we use HTML5 storage objects which are stored on your terminal device. These objects store the required data independently of the browser you are using and have no automatic expiry date. If you do not want flash cookies to be processed, you must install an appropriate add-on, eg “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly erase your cookies and browser history manually.

Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you will usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.
(2) In some instances, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly audited.
(3) Furthermore, we may pass on your personal data to third parties if we offer the participation in promotions, contests, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the offer.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of these circumstances in the description of the offer.

Newsletter
(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are specified in the declaration of consent.
(2) For the registration for our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an email to the email address provided by you, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically erased after one month. In addition, we store your IP addresses and the times of log-in and confirmation. The purpose of this procedure is to be able to prove your log-in and, if necessary, to clarify a possible misuse of your personal data.
(3) The only mandatory information required for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is Article 6 (1) sentence 1 lit a. GDPR.
(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email, through this form on the website, by email to info@remove-this.helmut-schmidt.de or by sending a message to the contact details in the imprint.
(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the aforementioned data and the web beacons to your email address and an individual ID. The data are collected exclusively in a pseudonymous form, ie the IDs are not linked to your other personal data, a direct personal reference is excluded. You can object to this tracking at any time by clicking on the separate link provided in every email or by informing us through any other contact channel. The information is stored for as long as you are a subscriber to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.
(6) We use an external service provider for the sending of newsletters. A separate contract data processing agreement has been concluded with the service provider to ensure the protection of your personal data. The newsletter is sent using the dispatch service provider SendinBlue, a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany; parent company: Sendinblue, SAS, with headquarters at 7 rue de Madrid, 75008 Paris ("Sendinblue").

The dispatch service provider may use the data of the recipients in a pseudonymous form, i.e. without assigning them to a user, to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

The newsletters contain a so-called "web beacon", i.e. a pixel-sized file which is retrieved from our server when the newsletter is opened or, if we use a dispatch service provider, from the latter's server. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services using the technical data or the target groups and their reading behaviour on the basis of their retrieval locations (which can be determined using the IP address) or the access times. Statistical surveys also include the determination of whether newsletters are opened and when they are opened, and the links which are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients, but it is neither our intention nor, if used, that of the dispatch service provider to monitor individual users. The analyses rather serve to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The data processing is based on your consent (Art. 6.1 letter a GDPR). This can be revoked at any time by unsubscribing from the newsletter. The data processing operations which have already taken place remain unaffected by this. If you do not want any analysis, you must unsubscribe from the newsletter. A corresponding link is provided in each newsletter.

You can view the data privacy policy of Sendinblue at  https://de.sendinblue.com/legal/privacypolicy/.

Mailchimp contractually undertakes to transfer and process all European data of users in conformity with the Standard Contractual Clauses (the “SCCs”) which allow our users to continue to lawfully transfer data subject to European data protection laws (including the GDPR) outside Europe to Mailchimp in the USA. The SCCs automatically apply in accordance with the Data Processing Addendum of Mailchimp.

MailChimp
The Rocket Science Group LLC d/b/a MailChimp
675 Ponce De Leon Ave NE, Suite 5000
Atlanta, Georgia 30308
Tel.: +1 404 806-5843
Email: legal@remove-this.mailchimp.com

Rocket Science Group LLC (MailChimp) maintains online platforms which allow our users to stay in touch with their subscribers, primarily by email. They allow users to upload email addresses and other subscriber profile information, such as name, physical address and other demographic information, to the MailChimp database. This information is used to send emails and enable the use of certain other MailChimp functions for such users. In accordance with its published data privacy statement, MailChimp shares some information with third parties to make available and support the services MailChimp offers to users. MailChimp also shares some information with advertising partners of third-party providers, in order to better understand the needs and interests of users so that more relevant content and targeted advertising can be provided to those users and other users. When you sign up for our newsletter on our website, the information you enter is stored by MailChimp. When you receive a newsletter via MailChimp, information such as IP address, browser type and email programme is stored to provide us with information about the performance of our newsletter. MailChimp can determine whether the email has arrived, whether it has been opened and whether links have been clicked on by means of the images called web beacons integrated in the HTML emails (details can be found at https://kb.mailchimp.com/reports/about-open-tracking). All this information is stored on the servers of MailChimp and not on this website. You can withdraw your consent to receiving our newsletter at any time in the email received by clicking on the link at the bottom. Once you have unsubscribed by clicking on the unsubscribe link, your data will be erased at MailChimp. MailChimp invokes Standard Contractual Clauses concerning the security of any data transfers to the USA. You can learn more about the use of cookies by MailChimp at https://mailchimp.com/legal/cookies/, and further information can be found in the data privacy statement of MailChimp which is available at https://mailchimp.com/legal/privacy/ .
Moreover, MailChimp contractually undertakes to transfer and process all European data of its users in accordance with the Standard Contractual Clauses (the “SCCs”), which continue to give our users the possibility to lawfully transfer data subject to European data protection laws (including the GDPR) outside of Europe to MailChimp in the USA. The SCCs automatically apply in accordance with the Data Processing Addendum of Mailchimp.
More information on: https://mailchimp.com/de/help/mailchimp-european-data-transfers/

Children
Our offer is basically aimed at adults. Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians.

Rights of the data subject
(1) Withdrawal of the consent
If the processing of the personal data is based on consent given, you have the right at any time to withdraw your consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
If you want to exercise your right of withdrawal, you can contact us at any time.

(2)Right of confirmation
You have the right to request a confirmation from the controller as to whether we process personal data concerning you. You may request such confirmation at any time under the aforementioned contact data.

(3) Right of access
If personal data are processed, you have the right to request access to such personal data and the following information at any time:
  a. the purposes of the processing;
  b. the categories of personal data concerned;
  c. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  d. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  e. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
  f. the right to lodge a complaint with a supervisory authority;
  g. where the personal data are not collected from the data subject, any available information as to their source;
  h. the existence of automated decision making including profiling referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer. We provide a copy of the personal data undergoing processing. For any further copies requested by you, we may charge a reasonable fee based on administrative costs. When you make the request by electronic means, and unless otherwise requested by you, the information will be provided in a commonly used electronic form. The right to obtain a copy referred to in para 3 may not adversely affect the rights and freedoms of others.

(4) Right to rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

(5) Right to erasure (“right to be forgotten”)
You have the right to obtain from us the erasure of personal data concerning you without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:
  a. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  b. The data subject withdraws consent on which the processing is based according to point a) of Article 6 (1) or point a) of Article 9 (2) GDPR, and where there is no other legal ground for the processing.
  c. The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing pursuant to Article 21 (2) GDPR.
  d. The personal data have been unlawfully processed.
  e. The personal data have to be erased for compliance with the legal obligation in Union or Member State law to which the Controller is subject.
  f. The personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.
Where the controller has made the personal data public and is obliged pursuant to para 1 to erase the personal data, the Controller, taking account of available technology and the cost of implementation, has to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of those personal data.
The right to erasure (“right to be forgotten”) does not apply to the extent that processing is necessary:
–    For exercising the right of freedom of expression and information;
–    For compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
–    For reasons of public interest in the area of public health in accordance with points h) and i) of Article 9 (2) as well as Article 9 (3) GDPR;
–    For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) GDPR, insofar as the right referred to in para 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
–    For the establishment, exercise or defence of legal claims.

(6) Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the following grounds applies:
  a. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  c. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
  d. the data subject has objected to the processing pursuant to Article 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where processing has been restricted under the aforementioned conditions, such personal data are, with the exception of storage, only to be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
In order to exercise the right to restriction of processing, the data subject may contact us at any time under the aforementioned contact data.

(7) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
  a. the processing is based on consent pursuant to point a) of Article 6 (1) or point a) of Article 9 (2) or on a contract pursuant to point b) of Article 6 (1) GDPR; and
  b. the processing is carried out by automated means.
In exercising the right to data portability pursuant to para 1, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of the right to data portability does not affect the right to erasure (“right to be forgotten”). This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

(8) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point e) or f) of Article 6 (1) GDPR, including profiling based on those provisions. The controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
In the context of the use of information society services and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) GDPR, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You may exercise the right to object at any time by contacting the respective controller.

(9) Automated individual decision making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
  a. is necessary for entering into, or performance of, a contract between the data subject and a data controller;
  b. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
  c. is based on the data subject’s explicit consent.
The controller implements suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain intervention on the part of the controller, to express his or her point of view and to contest the decision.
The data subject may exercise this right at any time by contacting the respective controller.

(10) Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

(11) Right to an effective judicial remedy
Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, you have the right to an effective judicial remedy where you consider that your rights under this Regulation have been infringed as a result of the processing of your personal data in non-compliance with this Regulation.

Use of Google Analytics
(1) We use the Google Analytics service of Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). This service enables an analysis of the use of our internet pages and uses cookies to do so. For this purpose, the information generated by the cookie, such as your anonymised IP address, is transmitted on our behalf to a Google server, where it is stored and analysed. On this website Google Analytics has been extended by the code “gat._anonymizelp();”. This ensures that IP addresses are recorded anonymously. As a rule, the anonymisation of your IP address is carried out by shortening your IP address by Google within the European Union or in other contracting states of the European Economic Area (EEA). In exceptional cases, your IP address may be transmitted to a Google LLC server in the USA and only anonymised there. Your IP address transmitted in this way will not be combined with other data from Google LLC.
(2) As part of the Google Analytics advertising function, remarketing and reports on performance by demographic characteristics and interests are used. The purpose of these procedures is to use the information on user behaviour to align advertising measures more closely with the interests of the respective users. In the context of remarketing, personalised advertising measures can be placed on other websites based on the user’s surfing behaviour on this website. The advertising material may contain products that the user has previously viewed on the website. If you have consented to have your web and app browsing history linked to your Google account by Google or to have information from your Google account used to personalise ads, Google will use such data for cross-device remarketing.
(3) Most browsers automatically accept cookies. However, you may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if you do this, you may not be able to use the full functionalities of this website. You must make the settings separately for each browser you use.
Furthermore, you can prevent the collection and processing of this data by Google LLC by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, or within browsers on mobile devices, please click on the following link:  deactivate Google Analytics. This will place an opt-out cookie on your device for our internet pages with effect for your currently used browser. If you erase your cookies in this browser, you must click on this link again. The data processing, more particularly the setting of cookies, is carried out with your consent on the basis of Article 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
(4) For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

Use of social media plug-ins
(1) We currently use the following social media plug-ins: [Facebook, Google+, Twitter, Xing, T3N, LinkedIn, Flattr]. We use the so-called two-click solution. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in through the marking on the box via its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offering. In addition, the data collected when you visit our website is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data are transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grey box.
(2) We have no influence on the data collected and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We likewise have no information on the erasure of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and / or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise such right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6 (1) sentence 1 lit. f GDPR.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider or are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activate button and for instance link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid an assignment to your profile with the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data privacy statements of these providers provided below. There you will also receive further information on your rights in this connection and setting options for protecting your privacy.
(6) Addresses of the respective plug-in providers and URLs with their respective data privacy statements:
a. Facebook:Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company Meta Platforms, Inc, 1601 Willow Road Menlo Park, CA 94025 USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. The data transmission to the USA is based on the Standard Contractual Clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum and
https://de-de.facebook.com/help/566994660333381.
b. Google:Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Further information can be found on https://policies.google.com/?hl=de.
c. Twitter:Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; Parent company Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ; https://twitter.com/privacy. The data transmission to the USA is based on the Standard Contractual Clauses of the EU Commission: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.
d. Xing:New Work SE, Am Strandkai 1, 20457 Hamburg, Germany; https://privacy.xing.com/de/datenschutzerklaerung.
e. T3N:yeebase media GmbH, Kriegerstr. 40, 30161 Hanover, Germany; https://t3n.de/store/page/datenschutz.
f. LinkedIn:LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, Parent company: LinkedIn Inc., 1000 West Maude Avenue Sunnyvale, CA 94085, USA; http://www.linkedin.com/legal/privacy-policy. The data transmission to the USA is based on the Standard Contractual Clauses of the EU Commission: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
g. Flattr:Flattr Network Ltd. With registered office in 2nd Floor, White bear yard 114A, Clerkenwell Road, London, Middlesex, England, EC1R 5DF, United Kingdom; https://flattr.com/privacy.

Integration of Google Maps
(1) On this website we use the Google Maps service. This allows us to show you interactive maps directly on the website and makes it possible for you to use the map function conveniently.
(2) By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data collected during your visit to our website will be passed on. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and / or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles and you must contact Google to exercise such right.
(3) Most browsers accept cookies automatically. However, you may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if you do this, you may not be able to use the full functionalities of this website. You must make the settings separately for each browser you use.
You can also prevent the collection and processing of these data by Google LLC by downloading and installing the browser add-on available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, or within browsers on mobile devices, please click on the following link: deactivate Google. This will place an opt-out cookie on your device for our internet pages with effect for your currently used browser. If you delete your cookies in this browser, you must click on this link again. You can also deactivate user-based advertising via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/), the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/). The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Article 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future through our consent management platform, which you can access here, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
(4) For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data privacy statement of the provider. There you will also find further information on your rights in this regard and the setting of options for protecting your privacy:  www.google.de/intl/de/policies/privacy.

Guest management with “Guestoo”
For guest management purposes, we use the cloud solution of the provider “Guestoo”. Therefore, please note the data privacy statement of Guestoo. Within Guestoo, personal data are processed and stored for the duration of the organisation as well as the preparation and follow-up of the respective events. Any existing legal obligations to retain data remain unaffected.
 
Online events with “Zoom”
Within the context of our online events, we use the video transmission tool Zoom, a service of Zoom Video Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA (hereinafter referred to as “Zoom”). Zoom is used by us to conduct online events via video transmission.

The information processed includes, amongst others, user details (eg first name, last name, email address), meeting meta data (eg topic, participant IP addresses, device / hardware information) and recordings (MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat).

If you have a user account with Zoom and participate in the video conference via such user account, Zoom can assign the meta data to your user account. However, it is not necessary for you to use or create a user account with Zoom to use the video conferencing system. Instead of your real name, you may also use a pseudonym when creating your user account.

Data processing is carried out for the fulfilment of the contract on the basis of Article 6 (1) (b) GDPR. For the processing of “operational data” in the USA and for the processing of personal data in the case of support, the level of protection is guaranteed by the use of the EU Standard Contractual Clauses. Further information can be found on: https://explore.zoom.us/de/privacy/ and on https://explore.zoom.us/de/terms/.
 
Map application Schmidt Map with “OpenStreetMap”
The application “In the footsteps of Helmut Schmidt in Hamburg” is based on OpenStreetMap. In order to display the map functions, IP addresses – and, if released, location data – of your terminal device are processed within the European scope of GDPR. The data may also be stored in a third country (UK, USA).

Contract processors
We use external service providers (contract processors), eg for the dispatch of goods, newsletters or payment processing. A separate contract data processing agreement has been entered into with the service providers to ensure the protection of your personal data.
In addition to the service providers already mentioned, we also work with the following service providers:

  • Public Relations von Hoyningen-Huene
    Marc von Bandemer
    Heimhuder Straße 79
    20148 Hamburg
     
  • EPS Agentur für Kommunikation GmbH
    Kai Engelmann
    Kokkolastraße 2
    40882 Ratingen
     
  • resch media
    David Resch
    Huckarder Straße 12
    44147 Dortmund
     
  • Zelzer Medien Design GmbH
    Richard Zelzer
    Lavendelweg 1
    41844 Wegberg
     
  • Mittwald CM Service GmbH & Co. KG
    Königsberger Straße 4-6
    32339 Espelkamp
     
  • Hilmar Bee, Graphischer Betrieb
    Thorsten Schmidt
    Wandalenweg 24
    20097 Hamburg