DATA PROTECTION

1. WE ARE RESPONSIBLE FOR YOUR DATA

As a visitor to our website, you not only expect a high level of quality and competence from our political work, but also from the processing of your personal data. We are responsible for handling your data, which we process according to your wishes and in accordance with the provisions of German and EU data protection laws. We will only process your personal data if this is permitted by law or if you have given your prior consent. We, that is the Social Democratic Party of Germany (party executive), Wilhelmstraße 141, 10963 Berlin, and our service providers who process your data on our behalf for the purposes specified below (hereinafter: SPD, we). The SPD regional organization Hamburg, Kurt-Schumacher-Allee 10, 20097 Hamburg is responsible for the websites of the SPD Hamburg. Our service providers include, for example, printers, letter shops, logistics companies, e-mail service providers, data centers, payment and donation service providers. In addition to the above postal address, you can also reach us by e-mail at party board[at]spd.de. It is important to us that you can find out at any time from the following information which personal data is collected during your visit to our website and when you use our services and how we process it afterwards.

​

2. HOW SECURE IS YOUR DATA?

We take technical and organizational security precautions to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany. The measures taken are intended to ensure the confidentiality and integrity of your data as well as the long-term availability and resilience of the systems and services when processing your data. They should also quickly restore the availability of data and access to them in the event of a physical or technical incident. Our security measures also include the encryption of your data. All information that you enter online is technically encrypted and only then transmitted. As a result, this information can never be viewed by unauthorized third parties. Our data processing and our security measures are continuously improved in line with technological developments. Of course, our employees are bound in writing to confidentiality (data secrecy).

​

3. OUR DATA PRIVACY OFFICER

If you have a question about data protection or data security, you can reach our data protection officer by email at datenschutzbeauftragter[at]spd.de or by post at Social Democratic Party of Germany, Party Executive, Data Protection Officer, Wilhelmstraße 141, 10963 Berlin. If you have a question about data protection or data security with regard to the websites of the SPD Hamburg, you can reach the data protection officer by e-mail at datenschutz-hamburg[at]spd.de or by post at SPD state organization Hamburg, data protection officer, Kurt-Schumacher-Allee 10 , 20097 Hamburg.

​

4. WHAT IS PERSONAL DATA?

Personal data is data by which you are identified or identifiable. This includes data that you provide to us, such as your address data, telecommunications data, registration data, donation data, account data, application data or your interests, but also data that is automatically processed when you use our website, such as your IP address.

​

5. WHAT ARE MANDATORY INFORMATION OR REQUIRED FIELDS?

If certain data fields are mandatory during the collection, the provision of this data is either required by law or contract, or we need this data for the conclusion of the contract, the desired service or the stated purpose. The specification of the data is of course also in the mandatory fields at your discretion. Failure to provide such information may mean that we cannot fulfill the contract or provide the desired service or the stated purpose cannot be achieved.

​

6. WHAT IS YOUR DATA PROCESSED FOR?

a. Requests If you have any questions or requests, we are at your disposal. We process your information to answer your inquiries (Article 6 Paragraph 1 b, f GDPR). The communication of address and telecommunications data marked as mandatory is necessary in order to be able to process and answer your request. The voluntary provision of further data makes it easier for us to process your request. As a rule, we store the information from your inquiry for twelve months after answering the inquiry in case of further inquiries, if it is not a question of commercial or business letters, we store these for at least six years.

​

b. Registration With your consent, which can be revoked at any time for the future, we process your required registration information (mandatory information, e.g. name, e-mail address, user name and password), the additional data voluntarily provided as part of your registration or use (e.g. membership number, date of birth), your details from your previous registrations on our websites and, if applicable, your tasks and your membership in the SPD - also as far as your political opinion is concerned - for the provision and your use of the functions in our password-protected areas in support of the SPD (Art.6 Para.1 a, Art.9 Para.2 GDPR). Your SPD membership may give you access to additional features within the password-protected area. The granting of consent is required for the use of the password-protected areas. If it is revoked, these areas can no longer be used. We store the registration information for your online account until you close your online account again, provided there are no other storage purposes to the contrary. This can, for example, be your membership (see point c.).

​

c. membership Your data, which you provide to us when you apply online for your membership in the SPD or which we learn from you in the course of your membership, will be processed in accordance with the SPD data protection guidelines . There you will find more information.

​

d. Donate The required address, telecommunications, donation and account data from your donation will be used by the Social Democratic Party of Germany (party executive) and its service provider (Altruja GmbH, Augustenstraße 62, 80333 Munich) to process your donation - also insofar as your political opinion is affected processed (Article 6 Paragraph 1 b GDPR). One or more donations from a person to the party, the sum of which exceeds the amount of 10,000 euros in the calendar year, are published in our annual statement of accounts with the name and address of the donor and the total amount of the donation. Donations that exceed the sum of 50,000 euros in individual cases are immediately reported to the President of the Bundestag, who publishes them promptly as a Bundestag printed matter. (Article 6 Paragraph 1 c GDPR). We also store your data relevant to the donation and the associated documents (e.g. commercial letters, donation receipts, donation confirmations) for at least 10 years in accordance with the legal requirements of the statutory provisions.

e. Online contribution receipt Your required data (membership number, name and address, amount of the contribution, status of membership and IP address with date and time) - also insofar as your political opinion is affected - by the Social Democratic Party of Germany (party executive) and its service provider (Mediakom GmbH & Co KG, Kampenwandstraße 81 83229 Aschau i. Ch.) to process the online contribution receipt (Art.6 Para.1 b GDPR).

f. Information by e-mail or SMS With your express consent, which can be revoked at any time for the future, we and, if specified, our sections will inform you by e-mail or SMS about our political topics and events as well as about more detailed regional political information and/or our press releases (Art. 6 Para. 1 a GDPR). We process your mandatory information when you give your consent in order to send you the e-mail messages you have selected and to be able to address you personally. To obtain your consent, we use the so-called double opt-in procedure online to prevent our e-mail messages from being sent to e-mail addresses of people who have not requested them. In accordance with the specifications of the data protection supervisory authorities, your IP address is also recorded and stored for documentation purposes. (Art.7 Para.1, Art.6 Para.1 c GDPR).
We only store your data collected for the purpose of SMS/email information as long as the advertising purpose exists and can be reached legally, in particular only until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes (see Section 7 .). If e-mail information is commercial or business letters, we store this for at least six years.

g. Press Registrations When you register for an event, we process your required address and telecommunications data and your information about your editorial team or your function for your access to the event and the provision of a workplace (Article 6 (1) b GDPR). We store your data relevant to the registration and the associated documents (e.g. commercial letters, confirmations) in accordance with the legal requirements under the statutory provisions for at least six years or ten years.

h. Online application If you apply for one of our job offers, we process your address, telecommunications and application data to process your application and to the extent permitted by law for the purposes of your possible subsequent employment relationship (§ 26 BDSG, Art. 9 Para. 2 DSGVO). The information you provide is voluntary and enables us to assess your employment or, if necessary, to contact you about your application. If the application process ends without employment, your data will be stored for a further six months for documentation purposes and then deleted or destroyed along with the documents sent to us, unless you have given us your consent to use the data for future application processes (Art. 6 Para. 1 a, Art. 9 Para.2 GDPR). i. Extended Storage Periods The specified storage periods can be extended accordingly if, in individual cases, especially if the data is processed for different purposes, there is a longer statutory or contractual storage period or option.

​

7. RIGHT OF OBJECTION AND WITHDRAWAL AT ANY TIME

You have the right to object to the processing of your data at any time for reasons arising from your particular situation if the legal requirements are met (Article 21 (1) GDPR). If you object to the processing of your data for advertising purposes (Article 21 (2) GDPR) or would like to revoke your consent, a short message to our data protection officer by e-mail to datenschutzbeauftragter[at]spd.de or by post to Social Democrats is sufficient at any time Party of Germany, party executive, data protection officer, Wilhelmstraße 141, 10963 Berlin. Your data will then no longer be processed for the advertising purposes covered by the objection to advertising or the revocation of consent. This does not affect the lawfulness of the processing that took place up until the objection or revocation. After your objection to the processing of your personal data for advertising purposes or the revocation of your consent, we are obliged under data protection law in accordance with the specifications of the German data protection supervisory authorities to include the data required for this (name, address, e-mail address) in our internal advertising blocking list and to store (block) it permanently - only for this purpose - and to use it for comparison with our future advertising files. (Art.21 Para.3, Art.17 Para.3 b, Art.6 Para.1 c GDPR). In this way, the observance of your objection to advertising or the revocation of your consent can be permanently ensured.

​

8. LOG DATA Every time a user accesses a page from this website, data about this process is temporarily stored in a log file and processed. These are:

• Information on the browser and operating system used

• Referrer URL (the previously visited page)

• Host name of the accessing computer (IP address)

• Date and time of the server request

• Amount of data transferred

• Status message about whether the retrieval was successful

• session number.

The temporary storage of this so-called server log data is necessary to provide the service for technical reasons and then to ensure system security or for documentation purposes (Article 6 Paragraph 1 f, c GDPR). The data will be anonymized after seven days at the latest by shortening the IP address for processing for technical purposes or to ensure system security, provided that further storage of the IP address is not required for documentation purposes. (Art. 6 Para. 1 c, Art. 5 Para. 2, Art. 7 Para. 1 GDPR). The further evaluation of this data takes place anonymously for statistical purposes.

​

9. WHAT ARE COOKIES AND WHAT ARE THEY USED FOR?

a. cookies Cookies are small text files that are sent to your end device by your web browser or other programs. These are stored locally on your end device and kept ready for later retrieval. We use cookies and similar technologies to enable and ensure the necessary technical functions (e.g. login recognition) (Art.6 Para.1 b, f GDPR), to determine the range of our content with the help of an anonymous range analysis with the web analysis service Matomo (range analysis) (Article 6 (1) f GDPR), to observe the rejection of cookies or the revocation of consent ("opt-out" cookies). Under certain conditions, third-party cookies are also set (in the case of embedded YouTube videos, see Section 12).

​

c. consent If you continue to use our website after the information on our initial website, you are also declaring your consent to the use of cookies and similar technologies to optimize website use and to evaluate website visits (pseudonymized web tracking). You can revoke your consent at any time.

​

d. Refusal of cookies You can declare the general rejection of cookies via the settings of your web browser. You can set your web browser so that it notifies you when cookies are set or generally rejects cookies. However, if you deactivate cookies using your browser, you will no longer be able to use various functions on our website. You can use the following links to find out more about this option for the most commonly used browsers:

• Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

• Firefox: support.mozilla.org/de/kb/cookies-information-websites-on-your-computer

• Google Chrome: support.google.com/chrome/bin/answer.py

• Safari: support.apple.com/kb/PH21411

• Opera: help.opera.com/Linux/12.10/en/cookies.html.

Under certain conditions, cookies are also set by third parties (see below 14).

​

10. WEB TRACKING Our website uses Matomo (formerly Piwik), an open source software. This is used to collect data to optimize website usage and for statistical evaluation of website visits. Pseudonymous usage profiles are also created. Cookies are used for this purpose, which are stored on your computer and which enable a pseudonymous analysis of your use of our website. The IP address is shortened immediately after collection and before it is stored. You can decide below whether you object to the use of Matomo described. If you withdraw your consent, a Matomo deactivation cookie will be stored in your browser ("opt-out" cookie). Please note that your browser must accept cookies in order to be able to store this cookie. If you delete the deactivation cookie, you may have to revoke it here again. DEACTIVATE MATOMO

​

11. SOCIAL MEDIA BUTTONS So-called social plugins from the social networks Facebook and Twitter are used on our website. With the standard use of so-called "social plugins" from social networks on websites, which enable content to be shared or liked, data from visitors to these websites is transmitted to the respective social network (e.g. Facebook, Google, Twitter) - regardless of whether the visitor clicked on the button of the respective social network or is even logged in as a user in the social network. To protect your privacy, however, we use the Sharrif solution developed by Heise Online on our website for sharing or liking content. With Shariff, the connection between you and the server of the social network is only established when you actually click on the respective button ("button") of the social network (Article 6 (1) a GDPR). Then your browser establishes a direct connection to the respective social network (USA) and the social network receives the information that and when you accessed the corresponding page of our online offer, as well as your IP address, information on the browser used, on the operating system and the language settings. By clicking the button, you consent to the transfer of data to the USA. The USA does not have a data protection level that corresponds to that of the EU General Data Protection Regulation and is therefore not a safe third country in this sense. If you do not want the social network to collect data about you through this online offer, you must not click the buttons. If you are logged into the social network, the social network can also assign the information directly to your social network account after activating the button.

​

We use the following buttons accordingly with the Shariff solution: "f-buttons" for sharing or liking on the social network of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find more information about data processing by Facebook and setting options to protect your privacy at http://www.facebook.com/about/privacy/. "Twitter buttons" for sharing or liking on the social network of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter"). You can find more information about data processing by Twitter and setting options to protect your privacy at https://twitter.com/privacy?lang=de.

12. DOOR-TO-DOOR APP The following information is intended to provide information on how we process data in connection with the door-to-door survey or our door-to-door app. The door-to-door app is available at https://tzt.spd.de and can be installed via the Google Play Store and the Apple App Store.

a. How is respondent data processed? data from questionnaires Responses from respondents to our questions are only collected anonymously by us in relation to the respondents and processed to create exclusively anonymous statistics. Any non-participation in the survey will also be recorded anonymously at best.

information by email With his consent, the Social Democratic Party of Germany and its branches (only available online) will inform the respondent by email about their political topics and events as well as more detailed political information from his region (Art.6 Para.1 a DSGVO). The processing of data for advertising purposes can be objected to at any time and any consent given can be revoked at any time. This does not affect the lawfulness of the processing until the objection or revocation. More information on the right to object or withdraw at any time. We store data collected for the purpose of this e-mail information only as long as the information purpose exists and can be lawfully reached, in particular only until we receive a revocation of consent or an objection to the processing of the data for advertising purposes. A combination of e-mail address (and possibly collected name) with the questionnaire does not take place.

​

b. How is your data processed as a supporter? With your consent, the SPD processes your personal data from your registration at www.aktion.spd.de, your support of the SPD, your other personal data that you provide as part of your work as a supporter, your activity (doorstep visits and surveys carried out, respectively only recorded at street section level via individual input or by means of an automated location determination that you have released separately) for the processing of your activity for the SPD, for your access to the app functions for door-to-door surveys, for identifying and eliminating sources of error the surveys you carry out and to award the most active supporters (Art. 6 Para.1 a, Art. 7, Art. 9 Para.2 a GDPR). You can revoke your consent at any time, but it will then no longer be possible to use the app functions for door-to-door surveys. This does not affect the lawfulness of the processing until the objection or revocation. More information on the right to object or withdraw at any time. The data is always deleted or made anonymous as soon as you revoke your consent, but the data for recognizing and eliminating sources of error in the surveys you have carried out are already 60 days after they have been collected.

​

c. Is data otherwise processed when using the door-to-door app? To install, enable and provide the app functions and to identify and eliminate sources of error, we process your IP address, date and time of use, the amount of data transferred when using the door-to-door app if there is an online connection, the device identifier (e.g. UDID, DeviceID), the device designation, the operating system version of your end device and, if the app is downloaded from a store, the installed app version (Art.6 Para.1 b, f GDPR). In addition, we use technically required cookies and comparable technologies for these purposes (Art.6 Para.1 b, f GDPR). More information on cookies and similar technologies. We will delete this data no later than 60 days after it was collected, with the exception of cookies, which you can delete as described here. However, if you downloaded the app from a store, you can only delete cookies and similar technologies by uninstalling the app. Web tracking or similar analysis methods do not take place in the door-to-door app.

d. What happens when you download the app from the Playstore or App Store? When downloading the app, the required information is transmitted to the respective app store (Google Play / Apple App Store, USA), i.e. in particular user name, email address and customer number of your Google/Apple account, time of download and an individual device identifier. We have no influence on data processing by Google or Apple and are not responsible for it.

​

13. MESSENGER BROADCAST We use the service of Whappodo.com GmbH to provide the messenger broadcast. Whappodo.com GmbH will use your telephone number for the service in order to provide you with the messenger broadcast service. Furthermore, Whappodo.com GmbH can collect other personal data stored at Telegram, in particular the first and last name stored at Telegram, the end device, profile picture and messages/pictures that you send to us via the corresponding messenger. The data remains stored until you unsubscribe from the broadcast (see above). Further information and the data protection declaration of Whappodo.com GmbH can be found here: https://www.whappodo.com/de/datenschutz/ Whappodo.com GmbH uses the messenger service Telegram to provide the broadcast service. Telegram independently collects data for the provision of the WhatsApp broadcast service. The purpose and scope of data collection by Telegram and the further processing and use of your data there as well as your rights in this regard and setting options for protecting your privacy can be found in Telegram's data protection information. Telegram's privacy policy can be found here: https://telegram.org/privacy Responsible within the meaning of the GDPR for the Messenger Telegram is Telegram Messenger LLP, the responsible supervisory authority according to the GDPR is the British data protection supervisory authority. We would like to point out that Telegram also stores user data in third countries outside the EU when using the broadcast and exchanges it with other services of the provider. We have no influence on this. If you have registered for our broadcast, we only see your first and last name stored in Telegram. Your mobile number will only be used for the Messenger broadcast. We will not send you any advertising, never call you or give your number to third parties. Your mobile phone number is not visible to other subscribers to our newsletter and they cannot send you messages either, as this is not a group but a broadcast list.

​

14. THIRD PARTY CONTENT We also display content from third-party providers on our website. This is separately marked as recommended content. Since the display of third-party content may result in the transmission of your personal data to the third-party provider, the content will only be displayed with your consent.

​

a. YouTube YouTube videos are integrated on our website, which are stored on YouTube (Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA) but can be played on our website in order to be able to present and explain corresponding reports on our website. (Article 6 paragraph 1 a GDPR). If you consent to playing the videos, cookies can be set by YouTube or DoubleClick (Google, USA) and data can be transmitted to them in the USA, such as your IP address and cookie ID, the specific address of the page you called up , system date and time of access, identifier of your browser. By clicking on the button to display the content, you consent to the data being transferred to the USA. The USA does not have a data protection level that corresponds to that of the EU General Data Protection Regulation and is therefore not a safe third country in this sense. If you do not want the data to be transmitted, you must not click the buttons. The purpose and scope of data collection and processing by YouTube and DoubleClick can be found in the information on Google: https://www.google.de/intl/de/policies/privacy/. The data transfer takes place regardless of whether you have a user account with YouTube or Google through which you are logged in, or whether you do not have a user account. If you are logged in, this data can be directly assigned to your account.

​

b. SoundCloud Plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, Great Britain.) may be integrated on our website. You can recognize the SoundCloud plugins by the SoundCloud logo on the affected pages. A connection to the SoundCloud servers is only established when you click on this symbol. After activating the plugin, a direct connection is established between your browser and the SoundCloud server. SoundCloud receives the information that you have visited our site with your IP address. If you click the “Like button” or “Share button” while logged into your SoundCloud user account, you can link and/or share the content of our pages with your SoundCloud profile. This allows SoundCloud to associate your user account with your visit to our site. We would like to point out that as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by SoundCloud. For more information, see SoundCloud's privacy policy at: https://soundcloud.com/pages/privacy. If you do not want SoundCloud to associate your visit to our site with your SoundCloud user account, please log out of your SoundCloud user account before activating the content of the SoundCloud plugin or do not click on the corresponding icon.

​

c. Spotify Plugins from the Spotify music service (Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden) may be integrated on our website. You can recognize the Spotify plugins by the Spotify logo on the affected pages. A connection to the Spotify servers is only established when you click on this symbol. After activating the plugin, a direct connection is established between your browser and the Spotify server. Spotify receives the information that you have visited our site with your IP address. If you click the "Like" or "Share" button while logged into your Spotify user account, you can link and/or share the content of our pages with your Spotify profile. This allows Spotify to associate your user account with your visit to our site. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how Spotify uses it. For more information, see Spotify's privacy policy at: https://www.spotify.com/de/legal/privacy-policy. If you do not want Spotify to associate your visit to our site with your user account, please log out of your user account before activating Spotify plugin content or do not click on the corresponding icon.

15. VIDEO CONFERENCES AND ONLINE MEETINGS VIA CISCO WEBEX We use Cisco Webex for video conferences and online meetings. In this context, to conduct the video conference, the personal data of the user required for the use of the service will be sent to our processor, the provider Cisco International Ltd. and its affiliates. There is an order processing contract with Cisco International Ltd. including its affiliates. In video conferences, both the signaling and the content of the conversation are encrypted. The following personal data is processed when using the service:

Usage Information:

• IP address

• User Agent Identifier

• hardware type

• Operating system type and version

• client version

• IP addresses along the network path

• Endpoint MAC address (if applicable)

• service version

• Measures taken

• Meeting session information (title, date and time, frequency, average and actual duration, count, quality, network activity and network connectivity)

• Number of sessions and non-screen sharing sessions

• number of participants

• hostname

• screen resolution

• join method method

• Performance, troubleshooting, and diagnostic information

​

The processing of the above personal data serves in particular to provide the service, register, diagnose technical problems, carry out analyzes and statistical analyzes in aggregate form in order to improve the technical performance of the service. User Generated Information: where applicable, meeting and call recordings possibly uploaded files A recording of the video conference using the recording options of the Cisco Webex Meetings service by the SPD party executive will take place after prior notice. Any user can request the deletion of their personal data stored on the Cisco Webex platform by sending a request to privacy(at)cisco.com. You can also find other relevant information on data protection at Webex in the Cisco Trust Center here.

16. HOW CAN YOU EXERCISE YOUR PRIVACY RIGHTS? If you have any questions about the processing of your personal data by us, we will of course be happy to provide you with information about the data relating to you (Article 15 GDPR). In addition, if the legal requirements are met, you have the right to rectification (Article 16 GDPR), deletion (Article 17 GDPR), restriction of processing (Article 18 GDPR) and objection (Article 21 GDPR) and data portability (Article 20 GDPR). In all of these cases, please contact our data protection officer (see 3. above) at the communication addresses given there. Finally, you have the right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR, Section 19 BDSG).

17. CHANGES From time to time it is necessary to adapt the content of this data protection notice for future data collected. We therefore reserve the right to change this information at any time. We will also publish the amended version of the data protection information here. If you visit us again, you should therefore read the data protection information again.

Status: January 2022