Data protection - information on data processing
For Terre des Hommes, the protection of personal data has a very high priority. We want you to know what data we save and how we use it.
In the following we will inform you about the data collection, data processing and your other rights as those affected as those affected according to Art. 13 and Art. 14 GDPR. For reasons of transparency, we have divided the information into the following applications:
- Information on data processing for visitors to our website,
- Information on data processing for members (volunteers), donors, customers of the online shop, prospective customers, supporters and for business partners of Terre des Hommes and
- Information on data processing for visitors to our social media accounts
A. Responsible body and affected rights
1. Responsible body and contact details of the data protection officer
2. Your rights as those affected
B. Information for visitors to our website
1. Website service and IT security
2. Contact inquiries and service
3. Service for members and donors
4th online donation
5.
Subscription of our newsletter
7. Participation in petitions
8. Integration of social plug-ins on the website
9. Consent management tool (cookies and tracking technology)
9.1. Necessary cookies
9.1.1. Consent management system cookie
9.1.2. Google Tag Manager
9.2. Statistics, analysis and marketing cookies
9.2.1. Google Analytics
9.2.2. Google ad Grandts / Google AdWords Tracking
9.2.3. Facebook pixel
10. Integration of external content on our website
10.1. YouTube videos
10.2. Vimeo videos
10.3. Google Maps
10.4. Elfight and Instagram
C. Information for members (volunteers), donors, customers of the online shop, prospective customers, supporters, supporters and for business partners
1. Categories of personal data
2. Purpose of data processing and legal basis
3. Recipient and categories of recipients of data
4. Transmission of data to a third country or an international organization
5. Duration of data storage
for the provision of data
Information on data processing for visitors to our social media accounts
Note for parents or supervisors
A. Responsible body and affected rights
1. Responsible body and contact details of the data protection officer
The responsible body for the processing of your personal data is:
Terre des Hommes Germany EV
Ruppenkampstraße 11a
49084 Osnabrück
Tel. 0541 / 7101-0
info@tdh.de
www.tdh.de
If you have any questions about the processing of your personal data by us, on the subject of data protection in general and to assert your rights of data (e.g. request for information, advertising, revocation of consent), please contact the aforementioned address or the email address info@tdh.de. In the event of the desired secure transmission, please contact us by post.
For all other data protection concerns, you can directly at our external data protection officer Dr. Turn Stefan Drewes.
2. Your rights as the person concerned
The following rights are based on the principle of the principle and, if contractual and legal obligations, do not conflict with this:
- Right to information (Art. 15 GDPR) with the restrictions according to §§ 34, 35 BDSG NF;
- Right to correct incorrect data (Art. 16 GDPR);
- Right to deletion (Art. 17 GDPR) with the restrictions according to §§ 34, 35 BDSG NF;
- Right to restrict the processing of personal data (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR);
- Right to complaint with a data protection supervisory authority (Art. 77 GDPR); The supervisory authority for data protection responsible for TDH is the state representative for data protection Lower Saxony, Prinzenstraße 5, 30159 Hannover;
- Individual right of objection (Art. 21 (1) GDPR) for reasons that arise from their special situation and concern data processing according to Art. 6 (1) E) and Art. 6 (1) f) GDPR;
- Right to object to the processing of data for advertising purposes (Art. 21 (3) GDPR); You can object to advertising use of your data at any time with effect for the future.
If data processing is based on consent, your consent can be revoked at any time with effect for the future.
The easiest way to contact the contact options listed under Section 1.
B. Information for visitors to our website
1. Website service and IT security
When you visit our websites, our web server uses access logs to record which page views have taken place at what time. Access logs contain the following data: IP, directory protection user, date, time, pages called, protocols, status code, data volume, speaker, user agent, accessed hostname. The IP addresses are saved anonymously and deleted after 60 days. Access via FTP are also recorded with anonymous information on the user name and IP address and deleted after 60 days.
Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these include the accessing IP address and, depending on the error, the website accessed.
The mail logs for sending emails from the web environment are anonymized after a day and deleted after 60 days. Mail logs for shipping via our mail servers will be deleted after four weeks. The longer maintenance time is necessary to ensure the functionality of the mail services and spam control.
We process the aforementioned personal data on the basis of our legitimate interest to provide you with information on our services and services on our website and to ensure IT security towards you when visiting our website, based on Art. 6 (1) f) GDPR.
All online forms from Terre des Hommes are accessed via a secure SSL connection and your data is transmitted. We use the SSL certificate »Starter« by Mittwald CM Service GmbH & Co. KG (Rapidssl TLS RSA CA G1). Your data is encrypted to us on the way from your computer and can only be read on our server again.
2. Contact inquiries and service
If you have any questions about Terre des Hommes, our projects or promotions, you can contact us by email, letter, fax or phone. We process your personal data depending on your request. If necessary, we also use personal data that have been stored in our systems as part of other data processing (e.g. data for previous inquiries).
Depending on the request, the data is processed, depending on the purpose of the contract initiation, implementation or processing with you on the basis of Art. 6 (1) b) GDPR, to fulfill our legal obligations towards you on the basis of Art. 6 (1) c) GDPR and/or based on our legitimate interest to answer your request, based on Art. 6 (1) f). The data will be deleted if your request/your request has been processed and there are no other retention obligations (e.g. according to BGB or HGB).
3. Service for members and donors
If you want to provide us with a new address or bank details or to make other changes to your data as part of an existing membership or donation relationship, you can use the contact form https://www.tdh.de/kontakt/kontaktFormal/ , with which your data will of course be transferred to Terre des Hommes. The processing of the personal data to be entered in the contact form is carried out on the basis of Art. 6 (1) b) GDPR as part of your membership at Terre des Hommes and/or your donation relationship with Terre des Hommes.
The data will be deleted when your membership/donation relationship has ended and there are no other retention obligations (e.g. according to BGB or HGB).
Further information on data processing for members and donors can be found in section c .
4. Online donations
On the website there is the possibility to provide online donations to Terre des Hommes. The donation forms on www.tdh.de are made available to us by Twingle GmbH, which is active for Terre des Hommes as a processor in accordance with Art. 28 GDPR. Twingle guarantees complete data protection and legally secure data storage. The data of the donation transactions SSL-encrypted and saved in certified data centers. Each donation amount goes directly to Terre des Hommes account and not through an account of Twingle. Current information about the security procedure used and data processing can be found here: https://www.twingle.de/datenschutz/ .
Components of PayPal are integrated in the donation forms of Terre des Hommes. A PayPal account is guided via an email address, which is why there is no classic account number. PayPal enables online payments to trigger third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services. The European operating company of PayPal is the PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If you select "PayPal" in our online forms during the donation process, your data is automatically transmitted to PayPal. The applicable data protection regulations of PayPal can be called up at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
Further information on data processing for donors can be found in section c .
5. Online donation shop
From our website you can access the online donation shop on the underside https://www.tdh.de/spenden-und-stiften/spendenshop/ . If you donate a gift there, you support aid projects from Terre des Hommes in the selected area. After purchasing, you can choose a certificate for well -known or family members. The gift certificate will be sent to you by email immediately after the donation.
In the online donation shop we use the donation form of Twingle GmbH, Prinzenallee 74, 13357 Berlin. TWINGLE GmbH provides the technical platform for the donation process for this donation form and works for us as a processor in accordance with Art. 28 GDPR. The data you entered during the donation (e.g. address, bank details, reason for transfer) will be processed by us and passed on to Twingle in order to be able to process your donation in accordance with Art. 6 Para. 1 lit. b) GDPR. The data is processed by Twingle exclusively in ISO27001-certified data centers in Germany with 100 percent green electricity and transmitted to us via a secure connection with the latest data encryption. With this encrypted connection, the payment data is also handed over directly to the respective payment service provider. Current information about the security procedure used and data processing can be found here: https://www.twingle.de/datenschutz/ .
Further information on data processing for donors can be found in section c .
6. Subscription of our newsletter
If you would like to obtain the newsletter offered on the Terre of the Hommes website, we need an email address and information from you that allow us to check that you are owners in the specified email address and agree to the reception of the newsletter (double opt-in procedure). We use the so-called double opt-in procedure to register for our newsletter. This means that after specifying your email address, we send you a confirmation email to the specified email address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm this within seven days, your registration will be automatically deleted. If you confirm the desire to receive the newsletter, we save your email address until you cancel the newsletter. The storage serves the purpose of being able to send you the newsletter. Furthermore, we save your IP addresses and the times of your registration when registering and confirmation in order to prevent misuse of your personal data and to be able to provide proof of the correct sending. Further data is not collected or only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties. The legal basis for this is your consent according to Art. 6 (1) a) GDPR.
The Terre des Hommes newsletter contain so -called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable a log file recording and a log file analysis. This can make a statistical evaluation. Based on the embedded tracking pixel, we can see whether and when an email was opened and which links in the email were called up. We are saved by us about the tracking pixels contained in the newsletters in order to optimize the newsletter shipping. There is no newsletter tracking to be assigned to interest. The legal basis for this forms Art. 6 (1) f) GDPR.
7. Participation in petitions
If you take part in our petitions, your data is processed to fulfill the petition purpose in accordance with Art. 6 (1) f) GDPR. This includes the forwarding of your data to the recipients of the petition mentioned, ID R. are German and/or European politicians or other decision -makers. These process your data in accordance with the data protection guidelines of the political institutions (e.g. Bundestag), for which these people work, and your data can be archived up to ten years after the petition process has been completed.
When participating in petitions, there is usually also the possibility to consent to the work of Terre des Hommes and the invitation to further petitions by Terre des Hommes in accordance with Art. 6 (1) a) GDPR.
8. Integration of social plug-ins on the website
If we use so-called »social plug-ins« on our website, we tie them into them as described below: If you visit our websites, the social plug-ins are deactivated, ie it does not take place to the operators of these networks. If you want to use one of the networks, click on the respective social plug-in to establish a direct connection to the server of the respective network. If you have a user account with the network and are logged in there at the moment of activating the social plug-in, the network can assign your visit to our website to your user account. If you want to avoid this, please log out of the network before activating the social plug-in. A social network cannot assign to other terre of the Hommes website before you have not activated an existing social plug-in. If you activate a social plug-in, the network transfers the content available as a result directly to your browser, which integrates you into our websites. In this situation, data transfers can also take place that are initiated and controlled by the respective social network. The data protection regulations of the respective network apply exclusively to your connection to a social network, the data transmissions taking place between the network and your system and for your interactions on this platform. The social plug-in remains active until you deactivate it or delete your cookies.
If you click on the link to an offer or activate a social plug-in, personal data can be found in countries outside of the European Economic Area that, from the perspective of the European Union ("EU"), does not guarantee the "appropriate level of protection" for the processing of personal data.
9. Consent management tool (cookies and tracking technology)
When you call up our websites, a banner of the CONSENT management tool appears, which you indicate the use of technically necessary cookies and cookies in need of consent, as well as the display of content from external websites on our website.
By clicking the consent button, you agree to the use of cookies and the display of content from external websites on our website and will be processed your data on the basis of your consent according to Art. 6 (1) a) GDPR. The processing of your data in connection with technical, mandatory cookies is based on Art. 6 (1) c) and f) GDPR.
The technologies used are cookies and pixel tags. The following data is processed in particular by third-party providers: IP addresses, usage data, Click Path, app updates, browser information, device information, JavaScript support, visited pages, referrer URL, downloads, flash version, location information, purchase activity, widget interactions, respected visit and time.
These services can also transfer the data collected to another country outside the European Union, the European Economic Area and to countries that do not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. The legal basis for the storage of cookies and the further evaluation of the data and the transmission of data to the USA is the consent you have given via the CONSENT management tool in accordance with Art. 6 (1) a) GDPR.
You can revoke your consent completely or only with regard to individual services at any time. You can also revoke your consent at any time and generally prevent the setting of cookies by changing your browser setting and deactivating the setting of cookies there. In your browser settings, you can also choose whether you want to be informed if a website uses cookies. You can find out how the changes to your browser settings must be made in detail to the instructions or help function of your browser used.
If you would like to revoke your consent with regard to third-party cookies, please contact the provider of the corresponding cookies. You can find more information in the data protection declarations or cookie policies of the respective provider.
Please note that after deactivating cookies, you can continue to visit and use our websites by changing your browser setting. Under certain circumstances, however, deactivating the cookies can cause you to no longer fully use the functions of our website.
9.1 necessary cookies
These cookies are always active and technically necessary for the operation of our website. We also know through this type of cookie whether you want to stay logged in. This is the only way we can make our services available faster when you visit our website.
9.1.1 Consent management system cookie
The cookies are required for the consent administration service "Consent Management System" and thus to comply with the legal obligations to save consent. The following browser information is processed: Date and time of the visit, device information, geographical location, opt-in and opt-out data, Request URL of the website, side path of the website. The legal basis for this forms Art. 6 (1) c) GDPR.
9.1.2 Google Tag Manager
This is a Tag management system (platform) from Google Ireland Limited to manage JavaScript and HTML code snippets with which tracking, analysis, personalization and marketing performance tags and tools can be implemented. The anonymization of the IP address before forwarding to Google was activated by us. Data processing is only carried out if further Google cookies are used with your consent. The following data is then processed: functionality, used technologies, pixels, collected data, aggregated data for triggering tags. The legal basis for this forms Art. 6 (1) f) or a) GDPR only IVM the other services of Google, for which consent is given. The location of the processing is the USA. The data will be deleted after 14 days.
Below is the email address of the data protection officer of the processing company: https://support.google.com/policies/contact/general_privacy_form
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. Recipients of the data are Alphabet Inc., Google LLC, Google Ireland Limited. Click here to read the data protection regulations of the data processor. https://policies.google.com/privacy?hl=de
Click here to revoke all domains of the processing company. https://safety.google/privacy/privacy-controls/
Click here to read the data processor's cookie guideline. https://www.google.com/intl/de/tagmanager/use-policy.html
9.2 Statistics, analysis and marketing cookies
Statistics and analysis cookies and pixels serve analysis and marketing purposes and help us understand how visitors interact with our website by collecting information anonymously. Based on this information, we can further improve and optimize our website for you.
9.2.1 Google Analytics
This is a web analysis service. Processing company is Google Ireland Limited. Data processing takes place for the purpose of the analysis. The technologies used are cookies and pixel tags. The following data is processed: IP addresses, usage data, Click Path, app updates, browser information, device information, JavaScript support, visited pages, referrer URL, downloads, flash version, location information, purchase activity, widget interactions, date and time of the visit.
Below is the email address of the data protection officer of the processing company: https://support.google.com/policies/contact/general_privacy_form
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. Data receivers are: Alphabet Inc., Google LLC, Google Ireland Limited.
The legal basis for the storage of cookies and the further evaluation of the data as well as transmission of data to the USA is the consent you provide via the Consent Management system according to Art. 6 (1) a) GDPR. The further evaluation of the data collected is carried out using Google Analytics over a period of 2 years.
9.2.2 Google Adgrants / Google Ads Tracking
We use Google Ad Grants's offer, the offer for NGOs from Google AdWords to draw attention to our important topics with the help of advertising materials (so -called Google AdWords) on external websites. These advertising materials are delivered by Google via so -called "ad servers". Ad server cookies are used, which enable the evaluation of performance parameters such as AD impressions, clicks and conversions. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. If you get to our website via a Google display, Google AdWords saves a cookie in your PC. These cookies usually lose their validity after 30 days and should not serve to identify them personally. The following analysis values are usually saved for this cookie: Unique Cookie ID, Number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), optout information (marking that the user no longer wants to be addressed).
These cookies enable Google to recognize your internet browser. If a user is visited in certain pages of the website of an AdWords customer and the cookie stored on his computer has not yet expired, Google and the*of the customers can recognize that the*user has clicked on the display and has been forwarded to this page. Another cookie is assigned to all AdWords customers. Cookies cannot therefore be tracked on the websites of AdWords customers. We do not collect and process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify users based on this information.
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. The legal basis for the storage of cookies and the further evaluation of the data as well as transmission of data to the USA is the consent you provide via the Consent Management system according to Art. 6 (1) a) GDPR.
We also have no influence on the scope and further use of the data that is collected by Google by using this tool and therefore inform you in accordance with our level of knowledge:
By integrating "tracking tools", Google receives the information that you have accessed the corresponding website of our website or have clicked on an advertisement from us. If you are registered with a service from Google, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider will find and save your IP address.
Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de and https://services.google.com/sitestats/de.html
9.2.3 Facebook pixel
This is a tracking technology offered by Facebook and is used by other Facebook services such as Facebook Custom Audiences. The company that processes the data is Facebook Ireland Limited. The data processing purposes are: advertising, analysis, marketing, retargeting, tracking. The technologies used are cookies and pixels placed in the browser. The following data is processed: Risled advertisements, browser information, respected content, device information, geographical location, interactions with advertising, services and products, IP address, marketing information, pixel ID, referrer URL, success of marketing campaigns, usage data, user behavior, Facebook user ID.
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. Recipient of the data collected is: Facebook Inc., Facebook Ireland Limited.
The legal basis for the storage of the cookies and the further evaluation of the Daen and the transmission of data to the USA is the consent granted by you via the cookie consent management tool according to Art. 6 (1) a) GDPR.
Value of the cookies/pixels: fr; The data will be deleted after 720 days at the latest.
With the help of the Facebook pixel, Facebook is possible to determine visitors to our website as a target group for displaying ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel in order to notify the Facebook ads that we have switched on on Facebook and within the services of the partners cooperating with Facebook (so-called »Audience Network« https://www.facebook.com/audiencenetwork/ ), which have also shown an interest in our online offer or the specific features (e.g. interest or specific topics or Products that can be seen on the basis of the websites visited) that we transmit to Facebook (so -called "Custom Audiences"). With the help of the Facebook pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and do not have an annoying effect. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook advertisements for statistical and market research purposes by seeing whether users have been forwarded to our website after clicking on a Facebook advertisement (so-called "conversion measurement").
If you use a Facebook account, this can be seen for the Facebook pixel on our website based on the Facebook cookies set. Because this transmits the collected usage data for analysis and marketing purposes to Facebook. You can check and/or deactivate this data collection and further processing and use of the data by Facebook directly: https://www.facebook.com/settings?tab=ads
Service provider of the Facebook pixel is: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Website: www.facebook.com ; Data protection declaration:
https://www.facebook.com/about/privacy ;
The aforementioned data processing only affects users who have a Facebook account or have called up a Facebook partner page. The performance of advertising on Facebook (partner) pages based on the "Customer Audience" service does not affect users who are not members of Facebook. If an assignment of the Facebook ID contained in the Facebook Cookie can be made to a*m Facebook user, Facebook user assigns this user using the rules of a target group (Custom Audience) specified by us, provided the rules are relevant. We use the information obtained in this way to present advertising on Facebook (partner) pages.
Objection option (opt-out): If you want to object to the use of Facebook pixel, you can set an opt-out cookie on Facebook or deactivate JavaScript in your browser.
Memory
- The maximum limit for storing cookies: 1 year
- Non-cookie storage: no
Saved information
- Name: _FBP; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: act; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: C_USER; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: DTR; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: Fr; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: m_pixel_ration; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: PL; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: Presence; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: SB; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: spin; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: WD; Duration: 1 year; Type: Cookie; Domain: facebook.com
- Name: XS; Duration: 1 year; Type: Cookie; Domain: facebook.com
10. Integration of external content on our website
10.1 YouTube videos on our website
The YouTube video player service is integrated on the website. The company that processes the data is Google Ireland Limited. The data processing purposes are: Show videos. The technology used are cookies and pixels placed in the browser. Cookies (if "Privacy-Enhanced Mode" is not activated). The following data is processed: IP address, referrer URL, device information, seen videos.
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. Recipient of the data is: Alphabet Inc., Google LLC, Google Ireland Limited.
The legal basis for the storage of the cookies and the further evaluation of the data and the transmission of data to the USA is the consent you have given via the Consent Management tool according to Art. 6 (1) a) GDPR.
Name of the cookies/pixel: GPS, YSC, Visitor_info1_Live; The maximum limit for storing cookies: 10 years
Click here to read the data protection regulations of the data processor
https://policies.google.com/privacy?hl=de
Click here to read the data processor's cookie guideline
https://policies.google.com/technologies/cookies?hl=de
Click here to revoke all domains of the processing company
https://safety.google/privacy/privacy-controls/
10.2 Vimeo videos on our website
Our website integrates videos of the Vimeo platform. The platform is the Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies.
The legal basis for the storage of the cookies and the further evaluation of the data and the transmission of data to the USA is the consent you have given via the Consent Management tool according to Art. 6 (1) a) GDPR.
If you display a Vimeo video, a connection to Vimeo servers that are in the USA will be established. The Vimeo server is communicated which of our pages you have visited. If you are logged into your Vimeo account, make Vimeo enable your surfing behavior to be assigned to your personal profile directly. You can prevent this by logging out of your Vimeo account.
Further information on dealing with user data can be found in Vimeo's data protection declaration at https://vimeo.com/privacy .
We only record the extent to which the Vimeo videos we integrate are called up and delete this data after two years.
10.3 Maps of Google Maps
This website uses Google Maps map service via an API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server and stored there. Terre des Hommes has no influence on this data transmission.
This service can forward the data recorded to another country. Please note that this service can transfer data outside the European Union and the European Economic Area and to a country that does not offer an appropriate level of data protection. If the data is transferred to the United States, there is a risk that your data can be processed by US authorities for control and monitoring purposes without you may be entitled to legal remedies. The legal basis for the storage of cookies and the further evaluation of the data as well as transmission of data to the USA is the consent you provide via the Consent Management system according to Art. 6 (1) a) GDPR.
You can find more information on dealing with user data in Google's data protection declaration: https://policies.google.com/privacy?hl=de&gl=de
10.4 Elefsstsigt and Instagram
On the website, a plugin from ElfAgg can be integrated by clicking on the corresponding button. The activation of the plugin will transmit your IP address to the USA and load a cookie (session_id). According to ElfEs, the cookie only serves to count the view counter more than once every 15 seconds (more on this in the data protection declaration of Elfight ). Data processing for this takes place in the USA. In these cases, data is transferred to ElfSty without suitable guarantees ISD Art. 46 GDPR. With judgment of July 16, 2020, Az.: C-311/18 (»Schrems II«), the European Court of Justice has determined that no reasonable level of data protection is guaranteed in the United States. There is a risk of access to the transferred data by US security authorities without effective legal remedies and there are no enforceable concerns. The transmission is therefore only carried out within the framework of the consent given by clicking according to Art. 6 paragraph. Paragraph 1 sentence 1 lit. a) GDPR.
The plugin produces content from Instagram by establishing a direct connection to the provider. More information here Instagram | Terre des hommes (tdh.de)
C. Information for donors, customers of the online shop, interested parties, supporters and for business partners
1. Categories of personal data
Which categories of personal data are processed by Terre des Hommes depends largely on the occasion and in what framework a contact or a contractual relationship arises. A distinction must be made between (support) members, donors, customers of the online shop, supporters, prospective customers and business partners. As part of a member, a donation, a hands-on campaign, an inquiry, order or another contract, Terre des Hommes processes the following categories of personal data depending on the concrete relationship. In the respective forms with which personal data is collected, it is characterized by which data is absolutely necessary and which data can be reported voluntarily.
- Name, first name, address, contact details (telephone, email), place of birth; Member and donor ID; Further data on family members, for example in family memberships or for emergencies, belonging to a regional terre of the Hommes group;
- Company may also consist of names, first names, address, contact details (telephone, email), industry, contact person in the company with names, first names, function, contact details (telephone, email);
- Legitimation data (e.g. ID data), authentication data (e.g. signature sample), tax ID;
- Payments and order data (e.g. banking/credit card data, payment orders, SEPA direct debit), creditworthiness score (payment behavior for business partners);
- Order history and sales at business partners;
- Data as part of the management of legal disputes (e.g. to the participants, legal representatives, courts);
- Membership and donor history, interested parties with regard to legate.
If there is any direct contacts with you during membership, the donor and prospect support of hands-on activities or a business relationship with you, further data such as date of birth, marital status, industry/work, information about contact channel, date, occasion and result and copies of correspondence will be processed.
2. Purpose of data processing and legal bases
Terre des Hommes processes the aforementioned personal data and categories of personal data for the fulfillment of the respective contract (e.g. membership, donation, orders in the donation shop, other business relationship) including related information expenses or for the implementation of pre -contractual measures (e.g. contact inquiries) according to Art. 6 (1) b) GDPR. For these purposes, the contact details are also used, for example, within the framework of specific information and questions. Member data is sent to the regionally responsible Terre of the Hommes group and regional coordinators on this legal basis.
Terre des Hommes is also subject to various legal requirements (e.g. money laundry law, tax law) and in this respect also processes personal data on the basis of legal requirements according to Art. 6 (1) c) or in the public interest according to Art. 6 (1) e) GDPR. The purposes of processing include
- the application and evidence obligations in the context of grants by public bodies;
- the fulfillment of social security obligations (e.g. statutory accident insurance);
- The fraud and money laundering prevention;
- the fulfillment of tax law control and reporting requirements and examination requirements;
- the fulfillment of official and judicial instructions and orders;
- as well as the evaluation and control of risks at Terre des Hommes.
If necessary, Terre des Hommes processes personal data as part of the balancing of interests according to Art. 6 (1) f) GDPR to protect legitimate interests of Terre des Hommes or third parties. The following data processing is based on the balancing of interests:
- Measures for association management and further development of statutory tasks;
- Assessment of legal claims and defense in the event of legal disputes;
- Ensure IT security and the IT operation at Terre des Hommes;
- Prevention of crimes;
- Measures for building and plant security (e.g. access controls);
- Use of the guest WLAN;
- Data exchange with information to determine credit or failure risks among business partners.
As part of contact inquiries and free information orders, the processing is carried out according to Art. 6 (1) f) GDPR. For these purposes, the contact details are also used, for example, within the framework of specific information and questions.
Also within the framework of the balancing of interests according to Art. 6 (1) f) GDPR for the maintenance of legitimate interests of Terre of Hommes, Terre des Hommes processes personal data, for example, on the basis of the membership, the donation relationship, participation, existing contracts, existing contracts or inquiries for needs-based information based on the respective interests as part of the constitutional purposes of terre des Hommes (Own/donation advertising) according to the following provisions and provided that there is no contradiction to this:
- Postal (donation) advertising;
- Donation calls and information about Terre des Hommes to members by email;
- Telephone (donation) advertising towards companies in the event of the presumed consent.
Contradictions against these processing can be asserted at any time with effect for the future under the OA contact details (see A.1.).
Terre des Hommes does not transmit your data to third parties for advertising purposes.
If you have given us consent to the processing of personal data for certain purposes, the legality of this processing is given on the basis of your consent according to Art. 6 (1) a) GDPR. A granted consent can be revoked at any time with effect for the future under the OA contact details (see A.1.). Conservation can be granted
- the sending of what is based on their interests (e.g. within the framework of information requirements) Terre des Hommes newsletter by email;
- the use of the event/content of participation in petitions for the interest -based, content design of the newsletter;
- The telephone advertising within the framework of the statutory purposes by Terre des Hommes also for donations in favor of Terre des Hommes.
3. Recipient and categories of recipients of the data
Within Terre des Hommes, only those places are given access to their data that they need to fulfill our contractual and legal care. Service providers used by Terre des Hommes can also receive data for these purposes if they are commissioned as a processor in accordance with Art. 28 GDPR.
Possible recipients of personal data are e.g.
- the regionally responsible terre des hommes (members) group as well as internal bodies and groups;
- Cooperation partners with which actions and projects (e.g. hands-on actions) are carried out online or using print products;
- Public bodies and institutions (e.g. tax authorities, accident insurance institutions, Federal Central Tax Office) if there is a statutory or official obligation;
- other credit and financial services institutes;
- Courts and process representatives in the context of legal disputes;
- Processors, for example, for membership and donation advertising, for the support/maintenance of IT/IT applications, archiving, document processing, call center services, compliance services, controlling, data screening in accordance with legal requirements, printing and sending personalized letters, email shipping, accounting services and payment services;
- To take information as part of a credit request;
- Further data receivers based on a consent you have given.
4. Transmission of data to a third country or an international organization
Data transmission to countries outside the EU or the EEA and (so -called third countries) will only take place if necessary to carry out your orders (e.g. tax law obligation), you have given us consent or as part of order data processing. If service providers in the third country, for which there is no adequacy decision of the European Commission in accordance with Art. 45 (III) GDPR, are used in addition to written instructions (e.g. agreement of the EU standard contract clauses) to comply with the data protection level in Europe.
5. Duration of data storage
Terre des Hommes processes and stores your personal data as long as it is necessary for the fulfillment of contractual and legal obligations and on the basis of the balancing of interests, taking into account the respective data category. If the data is no longer necessary for this, they are deleted regularly, unless your - temporary - further processing is required, for example in a separate archive with restricted access authorizations: for the following purposes:
- Fulfillment of commercial and tax retention periods (e.g. Commercial Code, Tax Code) with the deadlines given there for storage or documentation for a period of two to ten years, calculated from the times named in the respective laws, e.g. for business letters, contracts, orders, invoices and donations);
- Preservation of evidence for a period of 30 years according to § 197 BGB, for example, within the framework of legally established claims, claims made from enforceable or fully extended documents;
- Preservation of evidence for a period of 3 years in accordance with Section 195 of the German Civil Code and a possible clarification of judicial or extrajudicial claims (e.g. the correspondence in the context of processing of affected rights, documents from membership in Terre des Hommes if there are no longer retention obligations, for example according to the tax code).
6. Obligation to provide data
In the context of a contractual relationship (e.g. support) memberships, donation processing, other contracts), those personal data must be provided that are necessary for the inclusion and implementation of a business relationship and the fulfillment of the associated contractual care or to whose collecting we are legally discerted. Without this data, we will usually have to reject the conclusion of the contract or the execution of the order or will no longer be able to carry out an existing contract and, if necessary, have to end.
Information on data processing for visitors to our social media accounts
Note for parents or
parents or supervisors are responsible for the protection of their children's privacy. We ask you to talk to your children about the safe and responsible handling of your own personal data on the Internet.
The development of the Internet or legislation may make adjustments in our data protection declaration necessary. We always make changes to our data protection declaration at this point and recommend that you read this declaration occasionally.
Last update: April 2025
Your contact with Terre des Hommes

Sandra J. Fenkl
Speaker Fundraising