Thank you for your interest in our company and our websites. We take the protection of your personal data and the protection of your privacy very seriously. We want you to know when we store which data and how we use it. Below we would like to inform you about how we handle your data. This privacy policy applies to our websites as well as our Facebook fan page, our Twitter channel, our Xing profile, our YouTube channel and our Instagram channel.

Responsible is the

Konrad-Adenauer-Stiftung e. V.
Klingelhöferstraße 23
10785 Berlin
Tel: +49 30 26996-0 (Zentrale)
Fax: +49 30 26996-3217 (Zentrale)
E-Mail: zentrale@kas.de

The data protection officer is:
Herr Markus Strauss
tacticx Consulting GmbH
Walbecker Straße 53
47608 Geldern
E-Mail: dsb@kas.de

When you use our offers, we process your personal data. We process your data strictly confidentially and only for the purpose we informed you about when collecting your data. Our standards for processing your data are the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection regulations.

1. Processing of your personal data when accessing our website

1.1. Umfang der Datenverarbeitung

Every time our website is accessed and every time a file is retrieved, data, including personal data, is collected by our systems and temporarily stored in a log file. The following of your personal data is processed:

• IP address (if applicable, in anonymized, shortened form)
• Date and time of access (timestamp)
• access details and destination address (protocol version, HTTP method, referer, UserAgent string)
• Name of the retrieved file and transferred data volume (requested URL incl. query string, size in bytes)
• Message whether the retrieval was successful (HTTP Status Code)
• Web page from which the request comes
• Browser type or app used
• Operating system and its interface
• Language and version of the browser software

1.2. Zwecke der Datenverarbeitung

1.2.1 We use the personal data collected during a visit to our websites to protect our IT systems from attacks and other illegal activities and to enable you to surf our websites as comfortably as possible. When processing this data, we do not draw any conclusions about your person. Neither a personal evaluation nor an evaluation of the data for marketing purposes or a profiling is carried out by us. Your data will be deleted after XX days at the latest.

1.2.2. Wenn Sie uns personenbezogene Daten z.B. im Rahmen einer Registrierung oder zur Vertragsdurchführung übermitteln, nutzen wir diese Daten zu den Ihnen genannten Zwecken. Darüber hinaus nutzen wir diese Daten zu Zwecken der Kundenverwaltung sowie gegebenenfalls zu Zwecken der Abrechnung etwaiger Geschäftsvorgänge, jeweils in dem dafür erforderlichen Umfang.

1.2.3. Soweit Sie uns im Rahmen unseres Consent Management Tools Ihre Einwilligung erteilt haben, verwenden wir und möglicherweise Dritte Ihre personenbezogenen Daten, um Ihnen personalisierte Inhalte oder Werbung, basierend auf Ihrem Nutzungsverhalten anzuzeigen. Hierbei können Analyseverfahren, wie z.B. Profiling oder Scoring eingesetzt werden. [Weitere Informationen und Einstellmöglichkeiten finden Sie hier […].]

1.2.4. Daneben verarbeiten wir Ihre Daten, soweit für uns eine rechtliche Verpflichtung dazu besteht, z.B. bei handels- oder steuerrechtlichen Aufbewahrungspflichten.

1.2.5. Wir verwenden Ihre Daten, um basierend auf Ihrem Nutzungsverhalten die Funktionalitäten unserer Webseiten anzupassen [sowie zu internen Abrechnungszwecken].

1.3. Weitergabe Ihrer personenbezogenen Daten

In order to optimize and secure our websites and to improve our business operations, we may use external service providers, e.g. data centers or IT service providers. These service providers are carefully selected by us and contractually obligated accordingly. As part of their service provision, it may be necessary for these service providers to process your personal data. However, we only pass on your data if this is necessary for the provision of our websites, to comply with our legal obligations or to protect our legitimate interests, or if we have your consent.

1.4. Datenübermittlung an Empfänger in Drittstaaten

In principle, the processing of your personal data takes place in Germany or within the European Union (“EU”) or within the European Economic Area (“EEA”). The use of external service providers or your consent may result in the transfer and processing of your personal data outside the EU or the EEA.

Please note that there may be a lower level of data protection in the respective recipient country than in the EU. For example, there may be no comparably effective legal remedies against data access by state authorities. However, a transfer of your personal data to a third country will only take place under the conditions laid down in Art. 44 et seq. GDPR. This ensures that the level of protection for you required by the GDPR is not undermined; this is done in particular by including so-called EU standard data protection clauses (SCCs) in the contractual relationship with the recipient.

1.5. Rechtsgrundlagen der Datenverarbeitungen

If you have consented to the processing of your personal data, Art. 6 (1) lit. a GDPR is the legal basis for the processing of your data.
If you access information from end devices (e.g. cell phones, desktop) or store it there, this is done on the basis of Section 25 (1) TTDSG.
If we process your personal data for the purpose of initiating or fulfilling a contract with you, the legal basis is Art. 6 (1) lit. b GDPR.

If we process your personal data to fulfill our legal obligations, Art. 6 (1) lit. c GDPR is the legal basis.

If we process your personal data to protect our legitimate interests or those of a third party, Art. 6 (1) f GDPR is the corresponding legal basis. We consider the type of personal data, the processing purpose, the processing circumstances and the interest in the confidentiality of the personal data in the context of a balancing of interests.

1.6. Dauer der Speicherung Ihrer personenbezogenen Daten

We delete your personal data as soon as the purpose of processing stated in this privacy policy ceases to apply. If necessary, storage will take place beyond this point in time, insofar as we are legally obliged to do so or it is necessary for the defense of legal claims. If deletion is not possible in individual cases, we will block the data in question from further processing.

2. Cookies and analytics technologies

We use cookies and comparable analysis technologies (“cookies”) on our websites. Cookies are stored on your computer and transmitted from it to our websites. A cookie contains a characteristic string of characters that enables your web browser to be uniquely identified when you return to our websites.

We distinguish between technically necessary cookies (section 2.1.), analytical and statistical cookies (section 2.2.).

We use analytical or statistical cookies exclusively with your consent pursuant to Art. 6 (1) a GDPR. Please note our information on data transfers to third countries (section 1.4.). The storage or retrieval of information in the terminal device only takes place with your consent in accordance with Section 25 (1) TTDSG. However, if the storage or retrieval is necessary for the provision of the offer of our websites (e.g. display of the shopping cart), no consent is required, see § 25 (2) No. 2 TTDSG.

We use the [name, address] consent management tool on our websites to manage consents and objections.

[Sie können Ihre erteilte Einwilligung jederzeit widerrufen oder Ihre Einstellungen im Umgang mit Cookies [hier] [You can withdraw the consent you have given at any time or configure your own settings for dealing with cookies [here]].

Likewise, you can configure the handling of cookies in your browser yourself. By changing the settings in your browser, you can disable or restrict the transfer of cookies. You can delete already stored cookies at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all functions to their full extent.

For more information, see the web pages of your respective browser provider:

Google Chrome	Cookies aktivieren oder deaktivieren – Computer – Google-Konto-Hilfe
Mozilla Firefox	Cookies und Website-Daten in Firefox löschen | Hilfe zu Firefox (mozilla.org)
Microsoft Edge	Cookies in Microsoft Edge löschen – Microsoft-Support
Opera	Webeinstellungen – Opera Help
Safari	Löschen von Cookies in Safari auf dem Mac – Apple Support (DE)

2.1 Technically required cookies

These cookies are technically necessary for the proper operation of our websites. Among other things, they ensure the technical stability of our websites and enable security-relevant functionalities. Also, the use of certain functions, such as our shopping cart or our contact form, are only made possible by technically necessary cookies. There is no possibility to use our websites without such processing of data, i.e. you have no possibility to withdraw.

We use this type of cookies to increase the security and functionality of our websites and offered web applications.

The processing of personal data using necessary cookies is based on Art. 6 (1) lit. f GDPR. With the use of technically necessary cookies, we aim to simplify the use of our websites for you. Some functions of our websites cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. Our legitimate interest also lies in these purposes. We do not use your user data collected through technically necessary cookies to create user profiles.

Here you can find an overview of the technically required cookies:

Cookie	Zweck	Löschfrist	Typ
cc_cookie_decline	Speichert die Information, ob Cookies abgelehnt wurden	1 Jahr	HTTP
cc_cookie_accept	Speichert die Information, ob Cookies akzeptiert wurden	1 Jahr	HTTP

2.2 Cookies for usage analysis services

Usage analysis cookies allow us to analyze how you use our websites. With the help of these cookies, we can test the effectiveness of our websites and detect errors. In addition, these cookies provide insights for optimizing our services and for web analytics. We can also use them to show you usage-based content and personalized advertising.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our websites or not being able to use them to their full extent.

The legal basis for the processing of personal data using cookies for usage analysis is your consent pursuant to Art. 6 (1) lit. a GDPR.

[Sie können Ihre Einwilligung zur Datenverarbeitung mithilfe unseres Consent Management Tool hier selbst verwalten.]

We use the cookies listed below for usage analysis:

Cookie	Anbieter	Zweck	Löschfrist	Typ
_gid [x4]	Google (Google Tag Manager) (sh. Ziff. 2.2.1)	Registriert eine eindeutige ID, die verwendet wird, um statistische Daten dazu, wie der Besucher die Website nutzt, zu generieren.	1 Tag	HTTP

2.2.1 WordPress Statistics

Our websites use the analysis tool WP Statistics from the provider Veronalabs (5460 W Mail St., Verona, NY 13478, USA) (“WP Statistics”). This plugin provides us with simple statistics on how you as a user use our website. This plugin is an analysis software specially developed for websites that use the WordPress consent management system. WordPress helps us to easily edit our website and make it more user-friendly. WP Statistics can collect data about how long you spend on our website, which subpages you visit, how many visitors there are on the website or which website you came to us from. No cookies are set by WP Statistics. It cannot be ruled out that information generated in this way will be transmitted to and stored on servers in the USA or in another third country.

The legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 lit. a GDPR. [Sie können Ihre Einwilligung zur Datenverarbeitung mithilfe unseres Consent-Management-Tools hier selbst verwalten.]

Right of withdrawal You have the right to withdraw your consent at any time without giving reasons with effect for the future. If you do not agree to the future transmission of your data to WP Statistics in the context of use our websites, you have the option of deactivating WP Statistics completely in your browser settings (see section 2 above). In this case, it is possible that not all functions of our websites will be fully available to you.

In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors in order to improve our offer technically and economically. With the help of WP Statistics, for example, we recognise errors on the website and can rectify them promptly. The legal basis for this is Art. 6 para. 1 lit. f GDPR.

Right to object (Art. 21 GDPR) You have the right to object to the processing of your personal data at any time with effect for the future, for example by  e-mail to XXX.  You can find further information on your options to object on the websites of the respective providers (see above).  We will not subsequently process your personal data further unless we can demonstrate compelling legitimate grounds for our processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims

Further information on data protection at wordpress can be found at: https://de.wordpress.org/about/privacy/

3. Social plugins

3.1 General information on social plugins

So-called social plugins are integrated on our websites, which are provided by third-party providers of social networks. These plugins can be interaction elements or other content (e.g. graphics, videos or text contributions). By means of social plugins, we try to increase the reach of our web offers as well as the availability of our website content.

Social plugins record each of your visits to a website based on your IP address, establish a connection with the servers of the operator of the respective social network and transmit your data there. The collection takes place even if you do not actively click on one of the integrated social plugin buttons.

If you are logged in to the respective social network of the third-party provider while visiting our websites, the third-party provider of the respective social network may be able to recognize the data collected from your specific visit and assign it to your personal profile or publish it via this. If you want to prevent the assignment, you must either log out of the respective social network before clicking on the social plugin or make the appropriate settings in your user account of the social network.

3.2 Legal basis

The legal basis for the processing is Art. 6 (1) lit. f GDPR. We have a legitimate interest in the best possible presentation of our offer and extensive visibility in social media.

Right to object (Art. 21 GDPR) You have the right to object to the processing of your personal data at any time with effect for the future, for example by sending an  e-mail to XXX.  You can find more information about your objection options on the websites of the respective providers (see above).  We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.  You may also exercise your rights in relation to processing activities concerning our joint responsibility with Facebook with us. In this case, we will forward your request to Facebook without delay in order to bring about a prompt clarification.

You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide such data could result in you not being able to use our websites or not being able to use them to their full extent.

3.3 Social plugins used

We use the social plugins of the following third-party providers:

3.3.1 Instagram

We use Instagram to give you insights into our daily business or to present new products or services. Instagram is a service of Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA. The Instagram social plugin is marked with the Instagram logo and allows you, for example, to share relevant content directly via our website. You can follow other users on the network, post pictures and videos, and like and comment on media from other users. We use the network as a marketing channel to serve our target group with relevant content and to acquire new customers. It cannot be ruled out that information generated in this process is transmitted to and stored on servers in the USA or in another third country.

At https://instagram.com/about/legal/privacy you will find more information about data processing by Instagram and your rights and protection options in this regard.

4. Rights of the data subject

If we process your personal data, you are a data subject according to Art. 4 No. 1 GDPR with the following rights towards us:

• Right of access (Art. 15 GDPR)
• Right of rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to information (Art. 19 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
• Right to withdraw your declaration of consent under data protection law (Art. 7 (3) GDPR)

You have the right to withdraw your consent to us at any time, e.g. by e-mail to e-mail address. The withdrawal of consent does not affect the lawfulness of the data processing carried out on the basis of the consent until the withdrawal.

Right to object (Art. 21 GDPR)  Pursuant to Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Art. 6 (1) lit. e or f GDPR; this also applies to profiling based on these provisions. You can address the objection to one of our specified contact addresses, for example to XXX.   We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If you wish to exercise a right, please contact our data protection officer at e-mail address.
We would like to point out that in certain cases we may request additional information from you in order to establish your identity. For example, when exercising the right to information, we can ensure that information is not released to unauthorized persons. Automated decision-making does not take place on our websites.

5. Safety

We use technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. We continuously improve our security measures in line with technological developments.

6. Responsibility for external content

Our websites contain links to websites of external providers. We have no influence on and do not control that other providers comply with the applicable data protection regulations. If you believe that linked external sites violate applicable law or have other inappropriate content, please let us know. We will check your notice and remove the external link if necessary. We are not responsible for the content and availability of linked external websites.

7. Validity of the privacy policy

Due to the further development of our websites or the implementation of new technologies, it may become necessary to change this data protection declaration. We reserve the right to change this privacy policy at any time with effect for the future. The version available at the time of your visit to the website will always apply.

Status: Oktober/2024