Jump to the content
Donate Donate now

Data protection - Information on data processing

For Terre des Hommes the protection of personal data is a very high priority. We want you to know what data we store and how we use it. 

Below, we inform you about data collection, data processing, and your other rights as a data subject under Articles 13 and 14 of the GDPR. For transparency, we have divided the information into the following use cases:

  • Information on data processing for visitors to our website,
  • Information on data processing for members (volunteers), donors, customers of the online shop, interested parties, supporters and business partners of Terre des Hommes and
  • Information on data processing for visitors to our social media accounts

A. Responsible body and data subject rights
1. Responsible body and contact details of the data protection officer
2. Your rights as a data subject


B. Information for visitors to our website
1. Website service and IT security
2. Contact requests and service
3. Service for members and donors
4. Online donations
5. Online donation shop
6. Subscription to our newsletter
7. Participation in petitions
8. Integration of social plug-ins on the website
9. Consent management tool (cookies and tracking technology)
9.1. Necessary cookies
9.1.1. Consent management system cookie
9.1.2. Google Tag Manager
9.2. Statistics, analysis and marketing cookies
9.2.1. Google Analytics
9.2.2. Google Ad Grants / Google Adwords tracking
9.2.3. Facebook Pixel
10. Integration of external content on our website
10.1. YouTube videos
10.2. Vimeo videos
10.3. Google Maps
10.4. Elfsight and Instagram
10.5. Brevo/Sibforms
10.6. Linguise


C. Information for members (volunteers), donors, online shop customers, interested parties, supporters, and business partners:
1. Categories of personal data
2. Purposes of data processing and legal bases
3. Recipients and categories of recipients of the data
4. Transfer of data to a third country or an international organization
5. Duration of data storage
6. Obligation to provide data

Information on data processing for visitors to our social media accounts

Notice for parents or guardians


A. Responsible body and data subject rights

1. Responsible body and contact details of the data protection officer

The responsible body for processing your personal data is:
Terre des Hommes Deutschland eV,
Ruppenkampstraße 11a,
49084 Osnabrück, Germany,
Tel. +49 541 / 7101-0,
info@tdh.de
, www.tdh.de

For questions regarding our processing of your personal data, data protection in general, and the exercise of your data subject rights (e.g., requests for information, objections to advertising, withdrawal of consent), please contact us at the above address or via email at info@tdh.de . If you prefer secure transmission, please contact us by mail .

contact our external data protection officer, Dr. Stefan Drewes, directly via the email address datenschutzbeauftragter@tdh.de .

2. Your rights as a data subject

The following rights are generally available to you as an affected person, provided that contractual and legal obligations do not preclude this:

  • Right of access (Art. 15 GDPR) with the restrictions according to §§ 34, 35 BDSG nF;
  • Right to rectification of inaccurate data (Art. 16 GDPR);
  • Right to erasure (Art. 17 GDPR) with the restrictions according to §§ 34, 35 BDSG nF;
  • Right to restriction of processing of personal data (Art. 18 GDPR);
  • Right to data portability (Art. 20 GDPR);
  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the supervisory authority responsible for data protection at tdh is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover;
  • You have the right to object on grounds relating to your particular situation to processing of personal data pursuant to Art. 6 (1) e) and Art. 6 (1) f) GDPR;
  • Right to object to the processing of data for advertising purposes (Art. 21 (3) GDPR); You can object to the use of your data for advertising purposes at any time with effect for the future.

If data processing is based on consent, you can withdraw your consent at any time with effect for the future.

The easiest way to exercise your data subject rights is to contact us using the contact details listed under point 1.

B. Information for visitors to our website

1. Website service and IT security

When you visit our websites, our web server logs which pages were accessed and when using access logs. Access logs contain the following data: IP address, directory protection user, date, time, pages accessed, protocols, status code, data volume, referrer, user agent, and hostname accessed. The IP addresses are stored anonymously and deleted after 60 days. Accesses via FTP are also logged with anonymized username and IP address information and deleted after 60 days.

Error logs, which record failed page requests, are deleted after seven days. These logs contain the error messages, the accessing IP address, and, depending on the error, the requested web page.

Mail logs for emails sent from the web environment are anonymized after one day and deleted after 60 days. Mail logs for emails sent via our mail servers are deleted after four weeks. This longer retention period is necessary to ensure the functionality of the mail services and for spam prevention.

We process the aforementioned personal data based on our legitimate interest in providing you with information about our services on our websites and in ensuring IT security for you when you visit our websites, on the basis of Art. 6 (1) f) GDPR.

All online forms from terre des hommes are accessed and your data transmitted via a secure SSL connection. We use the SSL certificate "Starter" from Mittwald CM Service GmbH & Co. KG (RapidSSL TLS RSA CA G1) for this purpose. Your data is encrypted on its way from your computer to us and can only be read again on our server.

2. Contact requests and service

If you have any questions about Terre des Hommes , our projects, or campaigns, you can contact us by email, letter, or telephone. We will process your personal data depending on the subject of your inquiry. We may also access personal data stored in our systems as part of other data processing activities (e.g., data from previous inquiries).

Depending on your request, your data will be processed for the purpose of initiating, executing, or, if applicable, processing a contract with you, based on Article 6(1)(b) GDPR; for fulfilling our legal obligations to you, based on Article 6(1)(c) GDPR; and/or based on our legitimate interest in responding to your request, based on Article 6(1)(f) GDPR. The data will be deleted once your request has been processed and no other retention obligations (e.g., under the German Civil Code or the German Commercial Code) exist.

3. Service for members and donors

If you wish to provide us with a new address or bank details, or make other changes to your data, as part of an existing membership or donation relationship, you can use at www.tdh.de/kontakt/kontaktformular/ Terre des Hommes . The processing of the personal data entered in the contact form is based on Article 6(1)(b) GDPR within the context of your membership with Terre des Hommes and/or your donation relationship with Terre des Hommes .

The data will be deleted once your membership/donation relationship has ended and no other retention obligations (e.g., under the German Civil Code or the German Commercial Code) exist.

Further information on data processing for members and donors can be found in Section C.

4. Online donations

The website also offers the option of making online donations to Terre des Hommes . The donation forms on www.tdh.de are provided by twingle GmbH, which acts as a data processor for Terre des Hommes in accordance with Article 28 of the GDPR. twingle guarantees complete data protection and legally compliant data storage. Donation transaction data is SSL-encrypted and stored in certified data centers. Every donation goes directly to Terre des Hommes and not via a twingle account. Current information about the security procedures and data processing can be found here: www.twingle.de/datenschutz/ .

Terre des Hommes ' donation forms integrate components from PayPal. A PayPal account is linked to an email address, so there is no traditional account number. PayPal allows you to send and receive online payments. PayPal also acts as an escrow service and offers buyer protection. The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If you select "PayPal" as your payment method during the donation process in our online forms, your data will be automatically transmitted to PayPal. PayPal's applicable privacy policy can be found www.paypal.com/de/webapps/mpp/ua/privacy-full

Further information on data processing for donors can be found in section C.

5. Online donation shop

From our website, you can access the online donation shop at www.tdh.de/spenden-und-stiften/spendenshop/ . By donating a gift there, you support Terre des Hommes in the selected area. After making your purchase, you can choose a certificate for friends or family members. The gift certificate will be sent to you by email immediately after your donation.

In our online donation shop, we use the donation form provided by twingle GmbH, Prinzenallee 74, 13357 Berlin. twingle GmbH provides the technical platform for this donation form and acts as our data processor in accordance with Article 28 of the GDPR. The data you enter when making a donation (e.g., address, bank details, reason for payment) is processed by us and forwarded to twingle so that they can process your donation in accordance with Article 6(1)(b) of the GDPR. Twingle processes the data exclusively in ISO 27001-certified data centers in Germany using 100% renewable energy and transmits it to us via a secure connection with state-of-the-art data encryption. Payment data is also transmitted directly to the respective payment service provider via this encrypted connection. You can find current information about the security procedures and data processing used here: www.twingle.de/datenschutz/ .

Further information on data processing for donors can be found in section C.

6. Subscribe to our newsletter

If you wish to subscribe to the newsletters offered on the Terre des Hommes website, we require your email address and information that allows us to verify that you are the owner of the specified email address and that you consent to receiving the newsletter (double opt-in procedure). We use the double opt-in procedure for newsletter registration. This means that after you provide your email address, we will send a confirmation email to that address, asking you to confirm that you wish to receive the newsletter. If you do not confirm this within seven days, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe. This storage is for the purpose of sending you the newsletter. Furthermore, we store your IP address and the date and time of your registration and confirmation to prevent misuse of your personal data and to be able to prove that the newsletter was sent correctly. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not share it with third parties. The legal basis for this is your consent pursuant to Art. 6 (1) a) GDPR.

Terre des Hommes newsletters contain tracking pixels. A tracking pixel is a miniature graphic embedded in HTML emails to enable log file recording and analysis. This allows for statistical evaluation. Using the embedded tracking pixel, we can see if and when an email was opened and which links within the email were clicked. We store this data collected via the tracking pixels in the newsletters to optimize newsletter distribution. We do not track newsletter recipients for the purpose of interest-based data collection. The legal basis for this is Article 6(1)(f) GDPR.

7. Participation in petitions

When you participate in our petitions, your data is processed to fulfill the petition's purpose in accordance with Article 6(1)(f) GDPR. This includes forwarding your data to the recipients of the petition named above, who are typically German and/or European politicians or other decision-makers. These recipients process your data in accordance with the data protection guidelines of the political institutions (e.g., the German Bundestag) for which they work; among other things, your data may be archived for up to ten years after the petition process has concluded.

When participating in petitions, there is usually also the option to consent to receiving the newsletter, further information about the work of Terre des Hommes and invitations to further petitions from Terre des Hommes in accordance with Art. 6 (1) a) GDPR.

8. Integration of social plug-ins on the website

When we use so-called "social plugins" on our websites, we integrate them as described below: When you visit our websites, the social plugins are deactivated, meaning no data is transmitted to the operators of these networks. If you wish to use one of the networks, click on the respective social plugin to establish a direct connection to the server of that network. If you have a user account with the network and are logged in when you activate the social plugin, the network can associate your visit to our websites with your user account. If you wish to prevent this, please log out of the network before activating the social plugin. A social network cannot associate your visit to other Terre des Hommes websites with your account until you have also activated a social plugin available there. When you activate a social plugin, the network transmits the content that becomes available directly to your browser, which integrates it into our websites. In this situation, data transfers may also occur that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers between the network and your system, and your interactions on that platform are governed exclusively by the privacy policy of the respective network. The social plug-in remains active until you deactivate it or delete your cookies.

If you click on a link to an offer or activate a social plug-in, personal data may be transferred to providers in countries outside the European Economic Area which, from the perspective of the European Union (“EU”), do not guarantee an “adequate level of protection” for the processing of personal data that meets EU standards.

9. Consent management tool (cookies and tracking technology)

When you visit our websites, a banner from the consent management tool will appear, informing you about the use of technically necessary cookies and cookies requiring consent, as well as the display of content from external websites on our websites, which requires consent. 

By clicking the consent button, you agree to the use of cookies and the display of content from external websites on our websites, and your data will be processed based on your consent pursuant to Art. 6 (1) a) GDPR. The processing of your data in connection with technically essential cookies is based on Art. 6 (1) c) and f) GDPR.

The technologies used are cookies and pixel tags. The following data is processed, in particular by third-party providers: IP address, usage data, click path, app updates, browser information, device information, JavaScript support, pages visited, referrer URL, downloads, Flash version, location information, purchase activity, widget interactions, videos viewed, and date and time of visit. 

These services may also transfer the collected data to a country outside the European Union, the European Economic Area, and to countries that do not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. The legal basis for storing cookies and further analyzing the data, as well as for transferring data to the USA, is the consent you have given via the consent management tool, pursuant to Article 6(1)(a) GDPR.

You can withdraw your consent completely or only with regard to individual services at any time. You can also withdraw your consent at any time and generally prevent cookies from being set by changing your browser settings and disabling cookies there. In your browser settings, you can also choose whether you want to be notified when a website uses cookies. For detailed instructions on how to change your browser settings, please refer to the instructions or help function of your browser.

If you wish to withdraw your consent regarding third-party cookies, please contact the provider of the respective cookie. Further information can be found in the privacy policy or cookie policy of the respective provider. 

Please note that you can still visit and use our websites after disabling cookies by changing your browser settings. However, disabling cookies may prevent you from fully using all the features of our websites.

9.1 necessary cookies

These cookies are always active and technically necessary for the operation of our website. This type of cookie also allows us to know whether you wish to remain logged in. This is the only way we can provide our services more quickly on your next visit to our website.

9.1.1 Consent management system cookie

The cookies are required for the consent management service "Consent Management System" and thus for compliance with legal obligations regarding consent storage. The following browser information is processed: date and time of the visit, device information, geographical location, opt-in and opt-out data, website request URL, and website page path. The legal basis for this is Article 6(1)(c) GDPR.

9.1.2 Google Tag Manager

This is a tag management system (platform) from Google Ireland Limited for managing JavaScript and HTML code snippets that enable the implementation of tracking, analytics, personalization, and marketing performance tags and tools. We have activated IP address anonymization before forwarding to Google. Data processing only occurs if additional Google cookies are used with your consent. The following data is then processed: functionality, technologies used, pixels, collected data, and aggregated data for triggering tags. The legal basis for this is Article 6(1)(f) or (a) GDPR only in conjunction with the other Google services for which consent is given. The processing location is the USA. The data is deleted 14 days after retrieval. 

Below you will find the email address of the data protection officer of the processing company: support.google.com/policies/contact/general_privacy_form

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. Recipients of the data are Alphabet Inc., Google LLC, and Google Ireland Limited. Click here to read the data processor's privacy policy: policies.google.com/privacy?hl=de

Click here to opt out on all domains of the processing company. safety.google/privacy/privacy-controls/

Click here to read the data processor's cookie policy. www.google.com/intl/de/tagmanager/use-policy.html

9.2 Statistics, analysis and marketing cookies

Statistical and analytical cookies and pixels are used for analysis and marketing purposes and help us understand how visitors interact with our website by collecting information anonymously. Based on this information, we can further improve and optimize our website for you.

9.2.1 Google Analytics

This is a web analytics service. The data controller is Google Ireland Limited. Data processing is carried out for analysis purposes. The technologies used are cookies and pixel tags. The following data is processed: IP address, usage data, click path, app updates, browser information, device information, JavaScript support, pages visited, referrer URL, downloads, Flash version, location information, purchase activity, widget interactions, and date and time of visit. 

Below you will find the email address of the data protection officer of the processing company: support.google.com/policies/contact/general_privacy_form

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. Data recipients are: Alphabet Inc., Google LLC, and Google Ireland Limited.

The legal basis for storing cookies and further analyzing the data, as well as transferring data to the USA, is your consent given via the consent management system in accordance with Art. 6 (1) a) GDPR. The further analysis of the collected data using Google Analytics takes place over a period of two years.

9.2.2 Google AdGrants / Google Ads Tracking

We use Google Ad Grants, the Google AdWords program for NGOs, to raise awareness of our important issues through advertising (so-called Google AdWords) on external websites. These ads are delivered by Google via so-called "ad servers." Ad server cookies are used to analyze performance parameters such as ad impressions, clicks, and conversions. This allows us to determine the success of individual advertising measures in relation to the data from the advertising campaigns. If you access our website via a Google ad, Google AdWords will store a cookie on your computer. These cookies typically expire after 30 days and are not intended to personally identify you. The following analytical data is usually stored in this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted).

These cookies allow Google to recognize your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Therefore, cookies cannot be tracked across the websites of different AdWords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses allow us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of these advertising tools, and in particular, we cannot identify users based on this information. 

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. The legal basis for storing cookies and further analyzing the data, as well as transferring data to the USA, is the consent you have given via the consent management system pursuant to Art. 6 (1) a) GDPR.

Furthermore, we have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge:

By integrating tracking tools, Google receives information that you have visited the corresponding page of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will learn and store your IP address.

Further information on data protection at Google can be found here: policies.google.com/privacy?hl=de and services.google.com/sitestats/de.html 

9.2.3 Facebook Pixel

This is a tracking technology offered by Facebook and used by other Facebook services, such as Facebook Custom Audiences. The company processing the data is Facebook Ireland Limited. The purposes of data processing are: advertising, analytics, marketing, retargeting, and tracking. The technologies used are cookies and pixels, which are placed in the browser. The following data is processed: viewed ads, browser information, viewed content, device information, geographic location, interactions with ads, services, and products, IP address, marketing information, pixel ID, referrer URL, success of marketing campaigns, usage data, user behavior, and Facebook user ID.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. The recipients of the collected data are: Facebook Inc., Facebook Ireland Limited.

The legal basis for storing cookies and further evaluating the data, as well as transferring data to the USA, is the consent you have given via the cookie consent management tool in accordance with Art. 6 (1) a) GDPR.

Value of cookies/pixels: fr; the data will be deleted after 720 days at the latest.

With the help of the Facebook pixel, Facebook can identify visitors to our website as a target audience for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to ensure that the Facebook Ads we place are only shown to users on Facebook and within the services of Facebook's partner companies (the so-called "Audience Network" www.facebook.com/audiencenetwork/ ) who have shown an interest in our online offerings or who exhibit certain characteristics (e.g., interest in specific topics or products, evident from the websites they visit) that we transmit to Facebook (so-called "Custom Audiences"). We also use the Facebook pixel to ensure that our Facebook Ads correspond to the potential interests of users and are not perceived as intrusive. Furthermore, with the help of the Facebook pixel, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion measurement").

If you use a Facebook account, the Facebook pixel on our website can recognize this by the Facebook cookie it sets. This cookie transmits the collected usage data to Facebook for analysis and marketing purposes. You can review and/or deactivate this data collection and the further processing and use of the data by Facebook directly on Facebook: www.facebook.com/settings?tab=ads
 

The service provider for the Facebook pixel is: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Website: www.facebook.com ; Privacy Policy:

www.facebook.com/about/privacy ;
The aforementioned data processing only applies to users who have a Facebook account or have visited a Facebook partner page. The display of advertising on Facebook (partner) pages using the "Customer Audience" service does not affect users who are not Facebook members. If the Facebook ID contained in the Facebook cookie can be associated with a Facebook user, Facebook will assign that user to a target group (Custom Audience) based on the rules we have defined, provided the rules are applicable. We use the information obtained in this way to display advertising on Facebook (partner) pages.

Opt-out option: If you wish to object to the use of the Facebook Pixel, you can set an opt-out cookie with Facebook or disable JavaScript in your browser.

Storage information

  • Maximum storage period for cookies: 1 year
  • Non-cookie storage: no

Stored information

  • Name: _fbp; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: act; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: c_user; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: datr; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: fr; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: m_pixel_ration; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: pl; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: presence; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: sb; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: spin; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: wd; Duration: 1 year; Type: cookie; Domain: facebook.com
  • Name: xs; Duration: 1 year; Type: cookie; Domain: facebook.com

10. Integration of external content on our website

10.1 YouTube videos on our website

The YouTube video player service is integrated into this website. The company processing the data is Google Ireland Limited. The purpose of the data processing is to display videos. The technologies used are cookies and pixels placed in the browser. Cookies are used if "Privacy-Enhanced Mode" is not activated. The following data is processed: IP address, referrer URL, device information, and videos viewed.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. The recipients of the data are: Alphabet Inc., Google LLC, and Google Ireland Limited.

The legal basis for storing cookies and further analyzing the data, as well as for transferring data to the USA, is the consent you have given via the consent management tool, pursuant to Article 6(1)(a) GDPR.

Cookie/pixel name: GPS, YSC, VISITOR_INFO1_LIVE; Maximum storage period for cookies: 10 years

Click here to read the data processor's privacy policy
: policies.google.com/privacy?hl=de

Click here to read the data processor's cookie policy
: policies.google.com/technologies/cookies?hl=de

Click here to revoke consent on all domains of the processing company:
safety.google/privacy/privacy-controls/

10.2 Vimeo videos on our website

Our website embeds videos from the Vimeo platform. The platform is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. 

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. 

The legal basis for storing cookies and further evaluating the data, as well as transferring data to the USA, is the consent you have given via the consent management tool in accordance with Art. 6 (1) a) GDPR.

Even when you view a Vimeo video, a connection is established to Vimeo's servers, which are located in the USA. This informs the Vimeo server which of our pages you have visited. If you are logged into your Vimeo account, you allow Vimeo to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account.

Further information on how Vimeo handles user data can be found in Vimeo's privacy policy at vimeo.com/privacy .

We only record the extent to which the Vimeo videos embedded on our site are accessed, and we delete this data after two years.

10.3 Map services from Google Maps

This website uses the Google Maps service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server. Terre des Hommes has no influence on this data transfer.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal recourse. The legal basis for storing cookies and further analyzing the data, as well as transferring data to the USA, is the consent you have given via the consent management system pursuant to Art. 6 (1) a) GDPR.

For more information on how user data is handled, please see Google's privacy policy: policies.google.com/privacy?hl=de&gl=de

10.4 Elfsight and Instagram

On this website, clicking the corresponding button allows you to integrate an Elfsight plugin. Activating the plugin will transmit your IP address to the USA and load a cookie (session_id). According to Elfsight, this cookie is solely used to prevent the view counter from being counted more than once every 15 seconds (more information can be found in Elfsight's privacy policy ). This data processing takes place in the USA. In these cases, data is transferred to Elfsight without appropriate safeguards as defined in Article 46 of the GDPR. In its judgment of July 16, 2020, Case C-311/18 ("Schrems II"), the European Court of Justice ruled that the USA does not guarantee an adequate level of data protection. There is a risk of access to the transferred data by US security authorities without effective legal remedies, and enforceable data subject rights are lacking. Therefore, the transfer only occurs within the scope of the consent given by clicking the button, pursuant to Article 6, Paragraph 1, Sentence 1, Letter a) of the GDPR.

The plugin displays content from Instagram by establishing a direct connection to the provider. More information can be found here: Instagram | Terre des Hommes (tdh.de)

10.5 Brevo/Sibforms

We use the service Brevo (formerly Sendinblue), France, to provide and analyze our newsletter subscriptions and selected online forms. When you use the forms (e.g., via Brevo forms "sibforms"), the data you enter (e.g., email address, name, organization if applicable, preferences), interaction data within the newsletter (e.g., opens and clicks), technical metadata (e.g., IP address, timestamp, device/browser used), and proof of your consent within the double opt-in process are processed. Depending on the content of the form, we process your data to carry out pre-contractual or contractual measures, to process your request (Art. 6 para. 1 lit. b GDPR), based on our legitimate interests in secure, efficient communication and fraud prevention (Art. 6 para. 1 lit. f GDPR), or – in the case of newsletters and similar information – based on your consent (Art. 6 para. 1 lit. a GDPR), which you can revoke at any time with effect for the future (e.g., via the unsubscribe link or by sending us a message). Brevo processes the data as a data processor on the basis of a data processing agreement pursuant to Art. 28 GDPR; processing generally takes place within the EU. A transfer to third countries cannot be ruled out in individual cases; in these cases, we ensure an adequate level of data protection through recognized safeguards (in particular, EU Standard Contractual Clauses). Brevo may use cookies or similar technologies for providing the forms (e.g., for spam prevention and to store the registration status). These will only be used – unless technically necessary – after you have given your consent in the consent banner. We only store your data for as long as it is necessary for the respective purposes or until you withdraw your consent; statutory retention obligations remain unaffected.

10.6 Linguistics

To make our content more accessible and available worldwide, we provide parts of this website in additional languages. For this purpose, we use the translation service "Linguise." Linguise processes the HTML content of our pages for machine translation, stores the generated translations in a cache, and delivers them via its own infrastructure. The processed content may contain personal data if it appears on our pages (e.g., names on team pages, in quotes, or project reports). Linguise sometimes uses subcontractors for translation (including neural machine translation providers such as Google Cloud Translation).

Categories of data processed:
- Usage and communication data (e.g., IP address, time of request, requested URL, referrer, user agent, browser language settings),
- Page content of the accessed page (if it contains personal data),
- Technical identifiers for delivery/error analysis,
- If applicable, cookie/local storage entries to store your language preference.

Purposes and legal basis:
- Provision of multilingual content and improvement of user-friendliness (Art. 6 para. 1 lit. f GDPR – legitimate interest).
- Storing/reading your language preference on your device, insofar as technically necessary, is based on Section 25 para. 2 no. 2 TTDSG. If, in addition, non-essential cookies/similar technologies are used for statistics/marketing, this only occurs with your consent (Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG). You can revoke your consent at any time with effect for the future via our consent management tool.

Recipients and transfers to third countries:
- Recipients: Linguise (data processor) and its sub-processors (e.g., translation infrastructure providers/CDNs). Transfers to third countries outside the EEA (including the USA) may occur. In these cases, we base the transfer on appropriate safeguards (in particular, standard contractual clauses pursuant to Art. 46 GDPR) and implement additional safeguards where necessary.

Storage duration:
Translations are cached by Linguise until the original content is changed or the underlying service terminates. Log and system data are deleted according to the provider's policy.

Information on data minimization and your rights:
- We configure the system so that sensitive areas and forms are not automatically translated where possible. You can object to the processing of your data based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Furthermore, you have the rights described in Section A (e.g., access, rectification, erasure, restriction of processing, right to lodge a complaint with a supervisory authority).

 

C. Information for donors, online shop customers, interested parties, supporters, and business partners

1. Categories of personal data

The categories of personal data processed by Terre des Hommes depend largely on the reason for and context of a contact or contractual relationship. A distinction is made, for example, between (supporting) members, donors, online shop customers, supporters, interested parties, and business partners. In the context of a membership, donation, participation in a campaign, inquiry, order, or other contract Terre des Hommes generally processes the following categories of personal data, depending on the specific relationship. The respective forms used to collect personal data indicate which data is mandatory and which data can be provided voluntarily.

  • Name, first name, address, contact details (telephone, email), place of birth; member and donor ID; further data on family members, e.g., in the case of family memberships or for emergencies, affiliation with a regional Terre des Hommes group;
  • Company name, possibly also consisting of name, first name, address, contact details (telephone, email), industry, contact person in the company with name, first name, function, contact details (telephone, email);
  • Legitimation data (e.g. ID card data), authentication data (e.g. signature sample), tax ID;
  • Payment transaction and order data (e.g. bank account/credit card details, payment orders, SEPA direct debit mandates), credit score (payment behavior with business partners);
  • Order history and sales with business partners;
  • Data in the context of conducting legal disputes (e.g., regarding the parties involved, legal representatives, courts);
  • Member and donor histories, histories of prospective bequests.

If direct contact with you occurs during your membership, donor and prospect support for participatory campaigns or a business relationship, further data such as date of birth, marital status, industry/profession, information about contact channel, date, occasion and result and copies of correspondence will be processed.

2. Purposes of data processing and legal bases

Terre des Hommes processes the aforementioned personal data and categories of personal data for the performance of the respective contract (e.g., membership, donation, orders in the donation shop, other business relationships), including related information provision, or for carrying out pre-contractual measures (e.g., contact requests, paid information orders) in accordance with Article 6(1)(b) GDPR. For these purposes, contact details are also used, for example, in the context of providing specific information and answering inquiries. Member data is transmitted on this legal basis to the regionally responsible Terre des Hommes group and regional coordinators.

Terre des Hommes is also subject to various legal requirements (e.g., anti-money laundering laws, tax laws) and therefore processes personal data based on legal obligations pursuant to Article 6(1)(c) or in the public interest pursuant to Article 6(1)(e) GDPR. The purposes of processing include, among other things..

  • the application and documentation requirements in the context of grants from public bodies;
  • fulfillment of social security obligations (e.g. statutory accident insurance);
  • Fraud and money laundering prevention;
  • fulfilling tax-related control and reporting obligations and audit requirements;
  • the fulfillment of official and judicial instructions and orders;
  • as well as the assessment and management of risks at terre des hommes .

Where necessary, Terre des Hommes processes personal data based on the balancing of interests pursuant to Art. 6 (1) f) GDPR to safeguard the legitimate interests of Terre des Hommes or third parties. The following data processing activities, among others, are based on this balancing of interests:

  • Measures for club management and further development of statutory tasks;
  • Assertion of legal claims and defense in legal disputes;
  • Ensuring IT security and IT operations at Terre des Hommes ;
  • Prevention of crime;
  • Measures for building and plant security (e.g. access controls);
  • Use of the guest Wi-Fi;
  • Data exchange with credit agencies to determine creditworthiness and default risks of business partners.

In the context of contact requests and free information requests, data processing is carried out in accordance with Article 6 (1) f) GDPR. For these purposes, contact details are also used, e.g., for providing specific information and answering follow-up questions.

Also within the framework of the balancing of interests pursuant to Art. 6 (1) f) GDPR for the purposes of safeguarding the legitimate interests of Terre des Hommes Terre des Hommes processes personal data, e.g., on the basis of membership, donation relationships, participation in campaigns, existing contracts, or requests for needs-based information tailored to the respective interests within the framework of the statutory purposes of Terre des Hommes (self-promotion/fundraising) according to the following provisions and provided that no objection has been raised:

  • Postal (donation) advertising;
  • Donation appeals and information about Terre des Hommes sent to members via email;
  • Telephone solicitation (of donations) to companies in the case of presumed consent for this.

Objections to this processing can be raised at any time with effect for the future using the contact details above (see A.1.).

Terre des Hommes does not share your data with third parties for advertising purposes.

If you have given us your consent to process your personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) a) GDPR. You can withdraw your consent at any time with effect for the future using the contact details above (see A.1.). Consent can be given, among other things, for

  • Sending you the Terre des Hommes newsletter, tailored to your interests (e.g., in response to information requests), via email;
  • the use of the occasion/content of participation in petitions for the interest-oriented, content-related design of the newsletter;
  • Telephone advertising within the scope of the statutory purposes of Terre des Hommes also for donations in favor of Terre des Hommes .

3. Recipients and categories of recipients of the data

Within Terre des Hommes only those departments that need your data to fulfill our contractual and legal obligations have access to it. Service providers contracted by Terre des Hommes may also receive data for these purposes if they are commissioned as data processors in accordance with Article 28 of the GDPR.

Possible recipients of personal data include, for example:

  • the regionally responsible Terre des Hommes (members) group as well as internal committees and groups;
  • Cooperation partners with whom joint actions and projects (e.g., participatory actions) are carried out online or via print products;
  • Public authorities and institutions (e.g., tax authorities, accident insurance institutions, Federal Central Tax Office) if there is a legal or official obligation;
  • other credit and financial services institutions;
  • Courts and legal representatives in the context of legal disputes;
  • Data processors, for example, for member and donation recruitment, for the support/maintenance of EDP/IT applications, archiving, document processing, call center services, compliance services, controlling, data screening according to legal requirements, the printing and mailing of personalized letters, email sending, data destruction, auditing services and payment transactions;
  • Credit agencies as part of a credit check on companies;
  • Other data recipients based on your consent.

4. Transfer of data to a third country or an international organization

Data transfers to countries outside the EU or the EEA (so-called third countries) only occur if this is necessary for the execution of your orders, legally required (e.g., tax reporting obligations), if you have given us your consent, or within the framework of commissioned data processing. If service providers in third countries for which there is no adequacy decision by the European Commission pursuant to Art. 45 (III) GDPR are used, they are obligated to comply with the European level of data protection through appropriate measures (e.g., agreement of the EU Standard Contractual Clauses) in addition to written instructions.

5. Duration of data storage

Terre des Hommes processes and stores your personal data for as long as it is necessary to fulfill contractual and legal obligations, as well as based on a balancing of interests, taking into account the respective data category. If the data is no longer required for these purposes, it is routinely deleted, unless its further processing – for a limited time – is necessary, e.g., in a separate archive with restricted access rights, for the following purposes:

  • Compliance with commercial and tax law retention periods (e.g., German Commercial Code, German Fiscal Code) with the retention or documentation periods specified therein for a period of two to ten years, calculated from the dates specified in the respective laws, e.g., for business letters, contracts, orders, invoices, and donation receipts);
  • Preservation of evidence for a period of 30 years according to § 197 BGB, e.g. in the context of legally established claims, claims arising from enforceable settlements or enforceable documents;
  • Preservation of evidence for a period of 3 years according to § 195 BGB for evidentiary purposes and any necessary clarification of judicial or extrajudicial claims (e.g. correspondence in the context of processing data subject rights, documents from membership with terre des hommes unless longer retention obligations exist, e.g. according to the Tax Code).

6. Obligation to provide data

Within the framework of a contractual relationship (e.g., (supporting) memberships, donation processing, other contracts), you must provide the personal data necessary for establishing and maintaining a business relationship and fulfilling the associated contractual obligations, or which we are legally obligated to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order, or we may no longer be able to perform an existing contract and may have to terminate it.

Information on data processing for visitors to our social media accounts

Notice for parents or guardians:
Parents or guardians are responsible for protecting their children's privacy. We ask that you talk to your children about the safe and responsible handling of their personal data online.

Developments in the internet or legislation may necessitate adjustments to our privacy policy. We will always post any changes to our privacy policy here and recommend that you review it periodically.

Last updated: December 2025

Your contact person at Terre des Hommes

Sandra J. Fenkl, Terre des Hommes

Sandra J. Fenkl

Fundraising Consultant

0541 7101-127

s.fenkl@tdh.de