Libereco Logo
Libereco Logo
Donate Now ❤

Privacy Policy

The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

LIBERECO – Partnership for Human Rights e.V.
Brunnenstraße 9
10119 Berlin

Tel.: +49 163 9724 885
Email: info@libereco.org

If you have any questions or require a point of contact regarding data protection, our management team is available at any time via the email address provided above. For further details about our company, please refer to the legal notice on our website.

Collection and processing of your data

We process your personal data solely for the purposes set out below:

Collection of general information when visiting our website

When you access our website, anonymous information is collected from you and statistically analysed in order to optimise our website and the technology behind it. This information includes:

  • Details of the website from which you are visiting us;
  • the web browser and operating system used;
  • your IP address;
  • files requested by you, the amount of data transferred and downloads
  • Details of the pages you visit on our site, including date and time.

The processing of this data is necessary to safeguard our legitimate interests in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies in particular in the technical security of our websites, specifically in defending against attempted attacks on our web server.

Contacting us by email

If you contact us by email, we will process the personal data provided in the email solely for the purpose of handling your enquiry. No further data will be collected.

Insofar as your enquiry relates to an existing contractual relationship with you, or you are interested in entering into a contract – for example, membership with us or the purchase of one of our products – and contact us, the processing of this data is necessary pursuant to Article 6(1)(b) of the GDPR for the performance of a contract or for the implementation of pre-contractual measures. Otherwise, the processing of this data is necessary pursuant to Article 6(1)(f) of the GDPR to safeguard our legitimate interest in being able to respond to your enquiry with the information relevant to you. If you voluntarily provide optional information, the processing of your corresponding personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR.

Newsletter and press distribution list

You can subscribe to both a newsletter and a press distribution list on our website. The email address provided when registering for the newsletter, your first and last names, the language, the federal state and the country, as well as, where applicable, the organisation for which you work (if specified) will be used for sending the newsletter.
The email address, first name and surname provided when registering for the press distribution list, as well as the organisation you work for (if specified), will be used to send the press distribution list.

We require a valid email address for your registration to be effective. To verify that a registration has actually been made by the owner of an email address, we use the “double opt-in” procedure. To this end, we log the subscription to the newsletter or press distribution list, the sending of a confirmation email and the receipt of the reply requested therein. No further data is collected. The data is used exclusively for sending the newsletter or press distribution list and is not passed on to third parties. By confirming your registration, you consent to us sending you, as the owner of this email address, the newsletter or press distribution list containing information about the organisation and our latest press releases.

You may withdraw your consent to the storage of your personal data and its use for sending the newsletter or press distribution list at any time. A link to do so is included in every newsletter and every email in the press distribution list. You may also unsubscribe directly on this website at any time or inform us of your wish to do so via the contact details provided in this privacy policy.

We use the tool provided by the service provider Brevo GmbH to send our newsletter and press distribution list and to process the aforementioned data in connection with this. This enables us to evaluate the success of our newsletter campaigns and press distribution list through statistical analysis and to optimise our newsletter and press distribution list, for example to present topics and offers that are better suited to your interests. Certain usage data (e.g. log data, clicking on a link) is therefore transmitted to Brevo GmbH (Köpenicker Straße 126, 10179 Berlin). Brevo GmbH is prohibited from using your data for any purpose other than sending the newsletter or press distribution list and carrying out the analysis. Brevo GmbH is not permitted to pass on or sell your data.

The processing of this data takes place in accordance with Article 6(1)(a) of the GDPR on the basis of your consent.

Membership form and volunteer form

Registration forms are available on our website, which you can use to register with us either as a member or as a volunteer. If you register with us via one of these forms, we process the data you provide in the relevant registration form for the purpose of admitting you as a member or as a volunteer of our organisation.

We process the following data as part of the membership registration process: first name and surname, email address, address, postcode, town/city, country, telephone number (if provided), date of birth (if provided) and the organisation you work for (if provided).
We process the following data when you register as a volunteer: first name and surname, email address, town/city, interests (if provided), skills (if provided) and motivation (if provided).

For the administration of our members and volunteers, as well as the associated processing of the aforementioned data, we use the tool provided by the service provider Brevo GmbH and the VereinOnline software provided by the service provider GRITH AG. This enables us to centrally manage all our association data, including data on members and volunteers. Certain usage data (e.g. log data, clicking a link) is therefore transmitted to Brevo GmbH

(Köpenicker Straße 126, 10179 Berlin) and to GRITH AG (Von-Poschinger Str. 32, 85737 Ismaning). These service providers are prohibited from using your data for any purpose other than the central management of the aforementioned data. The service providers are not permitted to pass on or sell your data.

Insofar as this relates to the processing of mandatory information for the registration process, the processing of this data is necessary for the performance of a contract or for the implementation of pre-contractual measures in accordance with Article 6(1)(b) of the GDPR. If you voluntarily provide optional information, the processing of your corresponding personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR.

We ask that you do not provide us with any special categories of personal data within the meaning of Article 9(1) of the GDPR in the free text fields without being asked to do so. Should you do so nevertheless, we will process such data, if at all, only on the basis of your explicit consent in accordance with Article 9(2)(a) of the GDPR, which you have given us prior to submitting the registration form.

Donations

You can make donations in various ways on our website. You can either make a one-off or recurring donation as part of a fundraising campaign, make a one-off or recurring donation independently of a fundraising campaign, or support us by purchasing our products in the online shop. When you make a donation, we process the following data: first name and surname, email address, organisation, street, postcode, town/city, country, gender, payment details.

This data is processed in accordance with Article 6(1)(b) of the GDPR for the performance of a contract or the implementation of pre-contractual measures. To process your donation, certain personal data will be transferred to our service providers in accordance with the following information:

  • The personal data we collect from you via the donation form will be passed on to the transport company commissioned to deliver the products ordered in our online shop or the donation receipt, insofar as this is necessary for the delivery of the goods.
  • We pass on your payment details to the designated bank as part of the payment processing, insofar as this is necessary for the payment to be processed.
  • On our website, we use the donation form provided by twingle GmbH. twingle GmbH provides the technical platform for the donation process via this donation form. The data you enter when making a donation (e.g. address, bank details, etc.) is therefore transmitted to twingle GmbH (Prinzenallee 74, 13357 Berlin) and stored on their servers in Germany.

These service providers are prohibited from using your data for any purpose other than processing the donation. The service providers are not permitted to pass on or sell your data. Your data will not be passed on to third parties in any other way without your express consent.

Cookies

We use so-called “cookies” in several places on our website. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive). Most of the cookies we use are so-called “session cookies”. These are automatically deleted after your visit. Persistent cookies are automatically deleted from your computer once their expiry date (usually six months) has been reached, or if you delete them yourself before they expire.

Technically necessary cookies are those that are absolutely essential for the operation of our website. We only use non-technically necessary cookies after obtaining your explicit consent, which you may, of course, withdraw at any time.

You can adjust your cookie settings at any time under “Edit cookie settings”.

Social Media

General Information

We maintain publicly accessible social media profiles on various social networks to offer you further options, alongside our website, to get in touch with us or receive information from us. When you visit our social media pages, your personal data is collected, used and stored not only by us but also by the operators of the respective social network. This occurs even if you do not have a profile on the respective social network yourself. The specific data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily transparent to us. For details regarding the collection and storage of your personal data, as well as the nature, scope and purpose of its use by the operator of the respective social network, please refer to the privacy policies of the respective operator:

When visiting our social media pages, personal data is processed for both registered and unregistered visitors on the respective social network. You use the respective social network and its functions at your own risk. This applies in particular to the use of interactive functions (e.g. sharing, rating).

We process the following data from registered visitors to our social media pages:

  • User ID or username under which you have registered;
  • profile data made public (e.g. name, occupation, addresses, contact details, and, where applicable, special categories of personal data such as religious affiliation, health data, etc.);
  • data generated when sharing content, exchanging messages and communicating;
  • Data required for the initiation or processing of a contract at the request of registered visitors.

Otherwise, we only process pseudonymised data such as statistics and insights into how our social media pages and the content provided on them are interacted with, as well as analyses of the success and background of our advertisements. We are unable to link this pseudonymised data ourselves with the corresponding identifying characteristics (e.g. name details). This means we cannot identify individual visitors, who therefore remain anonymous to us.

We process this data on the following legal bases:

  • if you use our social media profiles on social networks to contact us, we process the data you provide to us solely for the purpose of being able to contact you. The legal basis for data collection is therefore either your consent pursuant to Article 6(1)(a) of the GDPR or Article 6(1)(b) of the GDPR, provided that your enquiry relates to an existing contractual relationship with you or you are interested in entering into a contract and contact us;
  • Furthermore, data processing pursuant to Article 6(1)(f) of the GDPR is based on our legitimate interest in simplifying communication and data exchange, as well as in optimising our social media presence.

We ask that you do not send us any special categories of personal data within the meaning of Article 9(1) of the GDPR without being asked to do so. Should you do so nonetheless, we will process such data, if at all, only on the basis of your explicit consent in accordance with Article 9(2)(a) of the GDPR or if you have manifestly made it public in accordance with Article 9(2)(e) of the GDPR.

Access to the data we process is restricted to our employees and service providers who manage our social media presence and require the data for the purposes mentioned above. Where data subjects post their data publicly on our social media platforms, this data may be accessed by other registered and, where applicable, unregistered visitors, including those from third countries.

Joint controllers

When you visit our social media pages, we are jointly responsible for the processing of your data with the respective platform operators in accordance with Article 26 of the GDPR. To safeguard your rights and in accordance with the requirements of the GDPR, we have entered into an agreement in each case that sets out rules regarding the processing of your personal data, provided that the respective social network has made such an agreement available.

You may contact each participating company individually regarding the processing of your data and exercise your rights. You will find more detailed information on your rights further down in this privacy policy. Furthermore, in accordance with Article 22(1) of the GDPR, you generally have the right not to be subject to automated individual decision-making. Where such automated individual decision-making is permitted under Article 22(2)(a) to (c) of the GDPR, you are granted the right, under Article 22(3) of the GDPR, to obtain human intervention from the controller, to express your point of view and to contest the decision.

Further information on our joint responsibility can be found in the respective agreements within the meaning of Article 26(1) of the GDPR via the following links:

Deletion or blocking of data

We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the various retention periods stipulated by law. Please note that numerous statutory retention obligations require data to continue to be stored (e.g. under the German Commercial Code or the German Fiscal Code).
Provided there are no further retention obligations, the data will be routinely blocked or deleted in accordance with legal provisions once the relevant purpose has ceased to apply or these periods have expired. Your personal data will also be deleted following the effective exercise of your right to object to processing, as well as following the withdrawal of your consent, provided there is no other legal basis for processing.

Recipients of the data and categories of recipients

Within our organisation, we ensure that only those persons who require your personal data to fulfil their duties receive it. In many cases, we are supported by the service providers mentioned in this privacy policy, whom we have carefully selected and commissioned under a data processing agreement in accordance with Article 28 of the GDPR. These service providers are bound by our instructions and are regularly monitored by us. Otherwise, no data is disclosed to third parties, unless we are obliged to do so by mandatory legal provisions, in particular to external bodies such as supervisory authorities or law enforcement agencies.

Transfers to third countries

We transfer your personal data to service providers in the following countries outside the European Economic Area (“third countries”): Switzerland and the United States. Data is only transferred to third countries where this is necessary for the performance of a contractual obligation, required by law, or where you have given us your consent to do so.

The European Commission certifies that certain third countries have a level of data protection comparable to that of the European Economic Area through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).

Your data subject rights

You may exercise the following rights at any time using the contact details provided above:

  • Right to access information about your data stored by us and its processing,
  • Right to rectification of inaccurate personal data,
  • Right to erasure of your data stored by us,
  • Right to restriction of data processing,
  • Right to data portability,
  • Right to object to the processing of your data by us: Where we process your personal data on the legal basis of a balancing of interests pursuant to Article 6(1)(f) of the GDPR and this is done for the purposes of direct marketing, you have the right to object to this at any time; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process your data for these purposes. Where we process your data on the basis of a balancing of interests for other purposes, you have the right to object on grounds relating to your particular situation. We will then no longer process the personal data for these purposes, unless
    we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
  • If you have given us your consent, you have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
  • You may lodge a complaint with a data protection supervisory authority at any time if you believe that the processing of your personal data violates the GDPR. The contact details of the supervisory authority responsible for us are: Berlin Commissioner for Data Protection and Freedom of Information, Meike Kamp, Alt-Moabit 59-61, 10555 Berlin.

Online services for children

Persons under the age of 16 may neither transmit personal data to us nor submit a declaration of consent without the consent of their legal guardians. We would like to encourage parents and legal guardians to actively participate in their children’s online activities and interests.

Changes to our privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Modified: 28.03.2026