Sector Programme
    Extractives and Development

    Legal information Privacy statement

    The Federal Ministry for Economic Cooperation and Development (BMZ) is committed to protecting the privacy of your personal data. Therefore, we collect and process the personal data of our users only to the extent necessary.

    We need to collect certain information when you visit our website so you can fully use the services available.

    This privacy statement contains information about the type of data we collect about you, how we use that data, when we delete that data and what your rights are in this regard.

    All personal data collected in connection with the use of our website is processed in accordance with the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

    1. General information

    Data controller, data protection officer, complaints office

    The data controller responsible for the processing of personal data in line with the European General Data Protection Regulation (GDPR) is the

    Federal Ministry for Economic Cooperation and Development (BMZ)
    Dahlmannstrasse 4
    53113 Bonn
    Germany
    E-mail: poststelle@bmz.bund.de

    If you have any specific questions concerning the protection of your data, please contact the data protection officer at the BMZ.
    E-mail: Datenschutzbeauftragter@bmz.bund.de

    Personal data

    Personal data means any information relating to an identified or identifiable natural person. A natural person is deemed to be identifiable if he or she can be directly or indirectly identified, especially by being assigned to an identifier such as a name, an identification number, location data, or online identification data. The type of data collected, the purpose for which and the basis on which it is collected and processed depends largely on the type of service used by you, or on the purpose for which it is needed.

    Protection of minors

    Anyone younger than 18 should not submit personal data to the BMZ without the consent of a parent or guardian. If such data is required for a visit to the BMZ, the rules given at number 3 (Quiz) apply.

    Your rights

    You have the following rights: right of access (Article 15 GDPR), right to rectification (Article 16 GDPR), right to erasure (Article 17 GDPR), right to restriction of processing (Article 18 GDPR), right to data portability (Article 20 GDPR), right to object vis-à-vis the BMZ (Article 21 GDPR) and the right to withdraw consent (Article 7(3) GDPR).

    You also have the right to lodge a complaint with the

    Federal Commissioner for Data Protection and Freedom of Information
    Husarenstr. 30,
    53117 Bonn
    Germany
    Phone +49 (0)228 99 7799-0
    E-mail: poststelle@bfdi.bund.de
    Internet: http://www.bfdi.bund.de

    In order to perform its public relations tasks and provide information to the general public via the website, the BMZ uses personal data collected during website use. This also includes data that data subjects have submitted to the BMZ or that the BMZ has collected on them via third parties. To inform you about the processing of data and your rights and comply with our duty to provide information (Articles 13 and 14 GDPR), we have compiled an overview of the different types of data and how it is processed:

    2. Processing of data when this website is visited

    Data collection

    Whenever you visit the BMZ’s website, we process data that is needed for statistical evaluation, The following data is stored:

    • the IP address used
    • the type and version of your Internet browser
    • the operating system used
    • the date and time of retrieval
    • the amount of data transmitted
    • the file path

    The legal basis for such temporary data storage is Article 6 (1) (e) GDPR.

    The data is used for optimising the website.

    Server log files are deleted after 6 months.

    Use of cookies and other end device information

    For information on the use of cookies and other terminal information, see “Cookie settings”.

    Web analytics service Matomo

    BMZ uses the web analytics software Matomo for statistical evaluation of visitor accesses to make our website better and more user-friendly. “Matomo” is an open-source software that enables statistical evaluations on our website, in particular on visitor accesses and page views. The analysed information and statistics are processed exclusively on our own web servers or databases. The tool “Matomo” collects, analyses and categorises incoming information generated by the user's terminal equipment about the use of our website and interactions with our website as well as access data, in particular IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of statistical analytics using technologies such as cookies and fingerprinting. The legal basis for the processing is Art. 6 (1) Sentence 1(a) GDPR. We use “Matomo” with an extension, whereby the IP addresses are processed in abbreviated form to make it more difficult to relate them directly to individuals. The storage period is six months.

    You can withdraw your consent to the processing at any time under “Cookie settings”.

    Embedding of YouTube videos

    The BMZ has plug-ins on the website of the video platform “YouTube.de” or “YouTube.com”, a service of YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, US; hereinafter “YouTube”). Responsible party within the EU: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

    By processing data through the plug-ins, BMZ pursues the purpose of integrating visual content (videos) published on “Youtube.de” or “Youtube.com” on this website. The videos are all embedded in “extended data protection mode”, i.e. no data about you as a user is transmitted to “YouTube” if you do not play the videos. While playing videos on our website, “YouTube” receives the information that you have accessed the corresponding sub-page of our website. In addition, some of the data mentioned in the section “Data processing by visiting this website” is transmitted to “Google”. This takes place regardless of whether “YouTube” provides a user account via which you are logged in or whether no user account exists. If you are logged in to “Google”, your data will be directly assigned to your account. If you do not wish to have your data associated with your “YouTube” profile, you must log out before activating the button. “YouTube” stores your data as usage profiles and processes them independently of the existence of a user account with “Google” for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is your consent under Art. 6 (1) Sentence 1(a) GDPR. “Google” also processes the data in part in the US. There is no adequacy decision of the EU Commission for a data transfer (third country transfer) to the US. The legal basis for the transfer to the US is your consent under Art. 49 (1) Sentence 1(a) GDPR. For more information on the purpose and scope of processing by “YouTube” and the storage period at “YouTube”, please see the data protection declaration at https://policies.google.com/privacy?hl=en.

    You can withdraw your consent to the processing and the third country transfer at any under “Cookie settings”.

    Integration of videos of the German Bundestag

    The BMZ has integrated plug-ins of the website of the German Bundestag (Platz der Republik 1, 11011 Berlin, Germany) into its own website.

    We are using plug-ins of the German Bundestag on our website, which enable videos to be played directly on our website. The purpose of the processing of data is to integrate into our website visual content (videos) published by the German Bundestag. The videos are embedded in “extended privacy mode”, which means that no user data will be transferred to the German Bundestag if no videos are played. When a video is played on our website, the German Bundestag receives the information that the corresponding subpage of our website has been accessed. Information will then also be stored on the users’ end devices by means of technologies such as cookies or browser fingerprinting, or such information will be accessed. The German Bundestag collects the data, especially the IP address, by means of the web analysis service “Matomo”. The data collected in this way will then be processed in an anonymised form for statistical purposes. The legal basis for processing the data is your consent pursuant to Article 6 (1) (a) GDPR. For further information on the purpose and scope of data processing via the German Bundestag's website and the storage period at the German Bundestag, please refer to the privacy policy available at https://www.bundestag.de/en/service/privacy.

    You may revoke your consent for the processing of data and third-country transfer at any time by changing the cookie settings at Cookie settings.

    Integration of scientific visualisations with “Tableau”

    BMZ uses the business intelligence software Tableau to visualise data for website visitors. The provider is Tableau Software LLC, NorthEdge 1621 N 34th St. Seattle, WA 98103, USA (hereinafter “Tableau”). Tableau Software LLC is a subsidiary of Salesforce Inc, USA.

    Tableau is used exclusively on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. The consent can be revoked at any time. Tableau/Salesforce has Binding Corporate Rules (BCR). These are binding internal company rules that legitimise internal company data transfer to third countries outside the EU and EEA. Details can be found here:

    https://www.salesforce.com/news/stories/salesforces-binding-corporate-rules-reflect-highest-data-protection-standards/

    Explanations of Tableau Software LLC's data transfers are available at the following links:

    https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/tableau-security-privacy-and-architecture.pdf

    https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/tableau-notices-and-license-information.pdf

    3. Processing of data in the context of providing information

    How personal data is processed depends on the form in which information is provided. In the following, we distinguish between the provision of information through newsletters and through brochures and other media.

    Newsletter


    The BMZ newsletter is distributed by e-mail. It contains the latest news on German development cooperation and the BMZ and interesting background information.

    If you are asked for any personal details when using our services, it is entirely at your discretion whether to provide them or not. The BMZ will store the personal data collected in connection with the newsletter (last name, first name, company/organisation, e-mail address, date and time you signed up for the newsletter) on a server for the purpose of handling the newsletter and answering your queries. The legal basis for the storage of such data is Article 6 (1) (a) GDPR. No data will be passed on to third parties. Your data will not be processed or used for the purpose of advisory services, advertising or market research.

    If you do not consent to the storage and use of your data, this data will automatically be deleted after 30 days. If you explicitly confirm your subscription, the data will be stored permanently until you cancel your subscription.

    If you unsubscribe, all personal data will be deleted from our database.

    Registering for press information


    If you are a journalist and would like to be kept informed about all important dates, press conferences and other BMZ events, you can request inclusion in our e-mail list. The personal data collected in connection with the e-mail list (last name, first name, e-mail address) will be stored on a server for the purpose of sending you e-mails. The legal basis for the storage of this data is Article 6 (1) (a) GDPR. No data will be passed on to third parties. Your data will not be processed or used for the purpose of advisory services, advertising or market research.

    Your data will be stored permanently until you explicitly ask to be deleted from the e-mail list.

    Ordering brochures and other media


    The personal data collected through this website (contact data) is used for the purpose of handling your order and processing your enquiry. The legal basis for the storage of such data is Article 6 (1) (e) GDPR. Two service providers dispatch brochures and other ordered media on our behalf. To this end, the personal data we collect when you place your order will be passed on to these service providers. Beyond that, your data will not be passed on to any other third party. Your data will not be processed or used for the purpose of advisory services, advertising or market research.

    In compliance with the data minimisation principle, personal data is processed only to the extent necessary to implement the processes described above.

    This data is stored by our internet service provider Babiel GmbH for a maximum of 7 days in the event that quantities need to be approved by the BMZ. In all other cases, no data is stored by Babiel GmbH. Once the order form has been sent, the data provided will be passed on to our dispatch service provider (IBRo Versandservice GmbH, Kastanienweg 1, 18184 Roggentin). The transmitted data is deleted three months after completion of the order.

    Visitors


    The BMZ regularly receives visitor groups who register using our contact form for information visits and individual visitors for specific occasions. The mandatory information to be provided in the contact form (last name, e-mail address, office address, telephone number, group size (15-55 people)) and any information submitted voluntarily (simulation game for groups of pupils from grade 9 upwards, programme for primary school pupils from grade 3 upwards, requests for topics to be covered during the visit, preferred date and time of visit) is used to individually prepare and organise the visit to the BMZ. The legal basis for the processing of such data is Article 6 (1) (a) GDPR. By ticking the box, you give your consent that we may use this data. After the visit has ended, your data will be deleted.

    Quiz

    If you wish to participate in the BMZ’s quiz games (e.g. the advent calendar quiz), you need to register first. The registration is not complete until you have explicitly confirmed it.

    Your personal data will be stored and processed in accordance with the GDPR. The personal data collected in connection with the quiz competition will be used to run the raffle and will be stored permanently until you explicitly revoke your consent to data storage.

    The legal basis for storing this data is Article 6 (1) (a) GDPR. No data will be passed on to third parties. Your data will not be processed or used for the purpose of advisory services, advertising or market research.

    4. Information on data processing when using the BMZ’s social media platforms

    The Internet platforms of the social media channels provide an excellent opportunity for federal authorities to communicate, network and engage with the general public. Therefore, the BMZ has decided to set up its own accounts on Facebook, Twitter, YouTube and Instagram. We would be delighted to have you visit these platforms to obtain information on our work and to share your opinions with us.

    We take the current discussions about data privacy in social networks very seriously. Whether and to what extent all networks are offering their services in compliance with European provisions on data privacy has not yet been fully clarified from a legal perspective.

    We therefore wish to explicitly point out that the services used by the BMZ, such as YouTube (terms of use), Facebook (terms of use), Facebook (Page controller addendum = information on page insights/analytics services), Twitter (terms of use) and Instagram (terms of use) store user data in accordance with their own data processing terms and guidelines, and use such data for commercial purposes. The BMZ does not have any influence over the collection and further use of data by social networks. For example, we have no information about data storage (extent, location, length of time), compliance with deletion requirements, analysis and linking of data, and recipients of transmitted data.

    It can be assumed, however, that your data will be passed on to third parties. The BMZ has no influence over this.

    For now, we ask you that you yourself consider carefully what personal data you reveal when using social media. Please check your privacy settings regularly when using social networks.

    5. Information on the processing of personal data when you contact the BMZ

    Contact by e-mail

    You can contact the BMZ by e-mail either using the personal e-mail addresses of BMZ staff members, the e-mail addresses of the organisational units of the BMZ, or the central e-mail address poststelle@bmz.bund.de. All personal data stored in this context (contact data: e-mail address, last name, first name, address) will be deleted once it has been forwarded to the appropriate organisational unit of the Ministry.

    For the purpose of contacting you and processing your request, the data you have transmitted will be stored in the respective organisational units in line with the periods for the retention of records set out in the Registry Guidelines.

    The legal basis for processing this data is Article 6 (1) (e) GDPR in conjunction with section 3 BDSG.

    Contacting non-BMZ entities via e-mail

    The BMZ website also lists e-mail addresses of non-BMZ entities (e.g. Engagement Global, Agency for Business and Development, GIZ; without @bmz.bund.de as part of their e-mail address). If you use these e-mail addresses to get in contact with any of these third parties, the BMZ has no responsibility for the processing of your personal data. If you have any questions about how your personal data is processed by such third parties, please contact them directly.

    Contacting us via the contact form on the BMZ website

    You can also contact the BMZ via our contact form. If you use the contact form, you need to enter your last name, your e-mail address, the topic you are interested in and your message, and consent to the forwarding of your request. Your request cannot be processed without this data. If your data is forwarded, it will be stored in line with the periods for the retention of records set out in the Registry Guidelines. If you send us a message using the contact form or by e-mail, we will assume that we are authorised to answer by e-mail. Otherwise, you must expressly specify another type of communication.

    The legal basis for processing the transmitted data is Article 6 (1) (a) GDPR.

    This data is processed by the BMZ Internet Editors. The data is stored exclusively for processing your request and in compliance with the legal provisions. Once your query has been processed, the data will be deleted immediately.

    6. Video surveillance

    To prevent trespassing and for the purposes of averting danger and for law enforcement, the BMZ property surrounding its buildings is monitored by video cameras. The cameras are in constant operation The video recordings are stored on internal film servers subject to strict access restrictions until the storage capacity has been reached. Subsequently, the oldest data is overwritten. All video recordings are deleted after 10 days unless they are needed to avert an immediate danger or to prosecute a criminal offence or a misdemeanour.

    For video surveillance, the following data is stored:

    • video without sound
    • time of the recording
    • file namefile type
    • size and date of recording
    • client/owner.

    7. Events

    In order to carry out its public tasks, the BMZ regularly hosts events with internal and external participants.

    Personal data is processed for the purpose of participant management. Participant lists may be on display at the event venue, and photos/video recordings may be made of people attending BMZ events.

    Photos/videos commissioned by the BMZ are used in our public relations work. Participants who do not wish to be photographed/recorded on video are kindly requested to avoid areas where photos are being taken/filming is in process and/or communicate their wishes to the photographer/videographer as appropriate. The photos/videos are made available as part of our public relations work both to the general public (especially via publications and the BMZ’s website) and internally to BMZ staff (intranet, shared hard drives). N.B.: please note that we have no influence over any videos/photos made or taken by members of the press and media representatives. Press and media representatives are data controllers in their own right within the meaning of the GDPR.

    The legal basis for the data processing is Article 6 (1) (e) GDPR in conjunction with section 3 BDSG.

    Such personal data relating to you is contact data and photos/videos.

    There is no intention to transfer your data to a recipient in a third country or to an international organisation.

    Your data will be deleted after 5 years.

    Participation in BMZ events is not possible unless you provide your contact data.