Privacy Policy

– –

Within the use of this website we, as the data controller, collect and store the data you provided as long and so far this is necessary to fulfil the specified purposes and legal obligations. In the following we will inform you what data is involved, how the data is processed and what rights you have in this regard.

According to Article 4 no. 1 General Data Protection Regulation (GDPR) personal data means any information relating to an identified or identifiable natural person (in the following „person concerned or user“).

Name and contact data of the data controller

This Data Protection Policy covers data processing on the website by:

Tu was für Europa e.V.
Jonas Hirschnitz
Bülowstraße 49
10783 Berlin

(in the following „Tu was für Europa e.V.“)

Telephone:       +49 151 23458914

You can always reach out to us directly if you have any questions about data protection law or about your rights as a data subject.

2. Collection and storage of personal data and also nature and purpose and their use

a) Webhosting

For the provision of this website, we use the web hosting service RAIDBOXES GmbH, Friedrich-Ebert-Straße 7, 48153 Münster (in the following “RAIDBOXES”).

The offer of the website requires the commissioning of a webhosting service. The legal foundation for the utilisation of RAIDBOXES is Art. 6 Subs. 1 Sentence 1 lit. f GDPR due to our legitimate economic interest to make our offer available on this website. In connection with the hosting RAIDBOXES collects data in our behalf, which accrues while the use of the website.

We have concluded a data processing agreement with RAIDBOXES. Through this agreement the service provider ensures, that he processes the data in accordance with the General Data Protection Regulation and ensures the protection of the data subject rights.

b) When visiting the website

You can access the website without disclosing your identity. The browser on your end device automatically sends information to our website server (e.g. IP address of the querying computer, date and time of the access, name and URL of the accessed file, browser type and version and also further information sent by the browser (such as your computer’s operating system, the name of your access provider, geographical origin, etc.).

This information, which also includes your IP address, is temporarily stored in a log file. The following information is collected without any action on your part and deleted automatically after 4 weeks.

We process these data to ensure trouble-free connection to the website, comfortable use of our website, for evaluating system security and stability and also for further administrative purposes.

The legal foundation for the data processing is Art. 6 Subs. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from the above purposes for the data collection.

Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we also use cookies and analytics services during visits to our website. Further explanations can be found under section 4 and 5 of this Data Protection Policy.

c) When registering for our newsletter

In so far as you have expressly consented under Art. 6 Subs. 1 Sentence 1 lit. a GDPR, we will use your email address to regularly send you our personalized newsletter. Providing an email address is sufficient for receiving the newsletter.

Cancellation is possible at any time, e.g. via a link at the end of every newsletter. Alternatively, you can cancel at any time by sending an email to

d) When using flag generator

You can upload a picture in our flag generator so that you can create and use your motif in the desired colours with your respective statement. Data processing within the scope of processing your picture motif is covered by legitimate interest pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR. The photos uploaded by you are not transferred to our server, but are only temporarily stored in your browser for creation.

3. Transfer of data

Your personal data will only be transferred to third parties, if:

  • you have expressly given your consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a GDPR;
  • in cases where transfer of your data is necessary for compliance with a legal obligation pursuant to Art. 6 Para. 1 Sentence 1 lit. c GDPR;
  • in cases where transfer of your data is covered by our legitimate interest pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

4. Cookies and Pixel-Tags

We use cookies on our website. These are small files that your browser automatically creates and saves on your end device (laptop, tablet, smartphone or suchlike) when you visit our website. Cookies do not cause any harm to your computer and do not contain any viruses, trojans or other malware.

The cookie stores information which arises in conjunction with the specifically used end device. This does not mean, however, that this gives us direct knowledge of your identity.

Cookies are used on the one hand so that we can make the use of our offerings more pleasant for you. Therefore, we use session cookies to recognise that you have already visited individual pages of our website.

In addition, we use temporary cookies saved on your end device for a certain defined period to optimise user friendliness. If you visit our website again to use our services, it is automatically recognised that you were already here before and which entries and settings you made so that you do not have to repeat them.

On the other hand, we use cookies to compile statistics on the use of our website and to evaluate the optimisation of our offerings for you (see section 5). These cookies enable us to automatically recognise that you were here before the next time you visit our website. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are required for the stated purposes to protect our justified interests and also of third parties under Art. 6 Subs. 1 Sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. You can configure your browser, however, so that no cookies are saved on your computer or a message always appears before a new cookie is created. Complete deactivation of cookies can, however, lead to you not being able to use all the functions of our website.

5. Analytic tools

The following tracking and targeting measures which we use are carried out on the basis of Art. 6 Subs. 1 Sentence 1 lit. f GDPR.

With the deployed tracking measures we want to ensure an appropriate design and continuous optimisation of our website. On the other hand, we use tracking measures to compile statistics on the use of our website and to evaluate the optimisation of our offerings for you. Via the deployed targeting measures we want to ensure that you only see advertising tailored to your actual or presumed interests on your end devices. These interests are to be considered as justified within the meaning of the aforementioned regulation.

We use Google Analytics, a web analytics service provided by Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) for the purpose of creating a website experience tailored to users’ needs and continuing optimisation of our website. In this context, pseudonymised user profiles are created and cookies (see sect. 4) are used. The information generated through the use of cookies about your usage of this website (such as web browser type / version, operating system used, referrer URL (the previously visited website), host name of the accessing computer (IP address), time of server request) are transmitted to and stored on a server belonging to Google in the USA. Google is subject to the EU-US Privacy Shield so that an adequate level of data privacy is ensured. We have also concluded a data processing contract with Google for the use of Google Analytics. In this contract Google undertakes to process data in accordance with the General Data Protection Regulation and to ensure that the rights of the persons concerned are protected.

The information will be used for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the purposes of market research and ensuring an internet experience tailored to users’ needs.

Furthermore, this information may be transferred to third parties to the extent that this may be legally required or those third parties process these data on our behalf. Under no circumstances will your IP address be associated with any other data held by Google. The IP addresses will be anonymised so that attribution is not possible (IP masking).

You can block the installation of cookies by selecting the appropriate settings in your web browser software; however, please note that if you do so, you may not be able to use the full functionality of this website.

You can also block the collection of the data generated by the cookie and relating to your usage of our website (including your IP address) and the processing of such data by Google by downloading and installing a web browser add-on.

As an alternative to the web browser add-on, in particular for web browsers installed on mobile end devices, you can also block tracking by Google Analytics by clicking on the link below.

An opt-out cookie is created which prevents the tracking of your data when you visit this website in the future. The opt-out cookie applies only to the web browser you are using and only to this website and will be stored on your end device. If you delete the cookies on this web browser, you will have to set another opt-out cookie.

More information on data privacy in relation to Google Analytics can be found on the Google Analytics Help page.

6. Youtube

With consent pursuant to the first sentence of Article 6(1), point (f) GDPR, we use components (videos) of YouTube, LLC, 901 Cherry Avenue, 94066 San Bruno, CA (USA) (hereinafter referred to as ‘YouTube’), a company of Google Inc., Amphitheatre Parkway, 94043 Mountain View (USA), (hereinafter referred to as ‘Google’).

We use the ‘extended data protection mode’ option provided by YouTube.

Upon requesting an Internet page with embedded video, our website connects to the YouTube servers and renders the content on the Internet page using your browser.

According to the information provided by YouTube, in the ‘extended data protection mode’, your data will be transferred to the US YouTube servers only while you watch the video. The transferred data include the Internet page you just viewed and device-specific data including your IP address. By clicking ‘run’ on the video you agree to this transfer.

Should you be logged into your YouTube account at the same time, YouTube will associate these collected data with your member account. You may prevent this by logging out of your YouTube account prior to visiting our website.

Google complies with the data protection regulation of the US Privacy Shield and is registered with the US Privacy Shield Program of the US Department of Commerce.

You may find further information on data protection in context with YouTube in Google’s Data Protection Regulations.

7. Data subject rights

You have the right:

  • pursuant to Art. 7 Subs. 3 GDPR to withdraw your consent to us at any time. This means that we may no longer continue processing the data based on that consent for the future;
  • pursuant to Art. 15 GDPR to demand information about your personal data we process. In particular, you can demand information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data were or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction or revocation of processing, the existence a right to lodge a complaint, the origin of your data, in so far as not collected by us, and also about the existence of automated decision-making including profiling and where appropriate meaningful information about to details thereof;
  • pursuant to Art. 16 GDPR to demand immediate rectification of inaccurate or completion of your personal data saved with us;
  • pursuant to Art. 17 GDPR to demand deletion of your personal data saved with us, in so far as the processing is not required for exercising the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
  • pursuant to Art. 18 GDPR to demand restriction of processing of your personal data, in so far as you contest the accuracy of the data, the processing is unlawful but you oppose deletion and we no longer need the data but you do to establish, exercise or defend legal claims or you have objected to processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR to receive your personal data you have provided us in a structured, commonly used and machine-readable format or to demand transmission to another controller;
  • pursuant to Art. 77 GDPR to lodge a complaint to a supervisory authority. As a rule, you can contact the supervisory authority for your habitual residence or place of work or our registered offices.

8. Right to object pursuant to Art. 21 GDPR

In so far as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Subs. 1 Sentence 1 lit. e and Art. 6 Subs. 1 Sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, in so far as there are grounds arising from your particular situation or it relates to objection to direct marketing. In the latter case, you have a general right to object which we shall heed without the stating of a particular situation; This also applies to profiling based on those provisions as defines in Art. 4 no 4 GDPR.

If you submit an objection we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is necessary for the establishment, exercise or defence of legal claims.

If your objection is to the processing of data for direct marketing purposes, we shall cease processing immediately. In this case it is not necessary for you to assert a particular situation. This also applies to profiling to the extent that it is related to such direct marketing.

If you want to exercise your right to object, simply send an email to

9. Data Security

All the data you personally transfer will be sent encrypted with the customary and secure TLS standard (Transport Layer Security). TLS is a secure and proven standard, which is also used for online banking, for example. You can recognise a secure TLS connection inter alia by the “s” appended to the http (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, de-struction or against unauthorised access by third parties. Our security measures are continually monitored and improved to reflect technological developments.

10. Actuality of and changes to this Data Protection Policy

This Data Protection Policy is the latest version and was last amended as of Mai 2019.

The further development of our website and offers on it or changes in statutory or public-authority requirements many render it necessary to amend this Data Protection Policy. The latest version of Data Protection Policy can be downloaded and printed out at any time from the website under