Data Protection Statement

1. Information and legal basis for processing personal data

1.1 This data protection statement provides you with information about the processing of your personal data and your data protection rights when using our website. The object of data protection is personal data. Personal data means any information relating to an identified or identifiable natural person (a so-called data subject). This includes, for example, details such as the name, postal address, email address and phone number, though other details are also necessarily created while using our website, such as the beginning, end and extent of use.

1.2 The Data Processor as defined in data protection legislation is Stiftung Ordnungspolitik, Kaiser-Joseph-Str. 266, 79098 Freiburg, Germany (see  Imprint). Contact details of our commissioner for data protection Christoph Ehlers, ehlers(at)

1.3 When you contact us by e-mail, the provided data (your e-mail address as well as your first and last name and any other voluntary information) will be stored by us in order to answer your enquiries. The data collected in this context will be deleted after storage is no longer required, or the processing will be restricted if there are legal storage obligations.

2. Rights of data subjects

2.1 As a data subject you are entitled to the following rights:

  • Right to information
  • Right to rectification and erasure
  • Restriction of processing
  • Data portability
  • Objection to cookies
  • Revocation of consent

2.2 You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data has breached the latest applicable law.

3. Collection of personal data on our website

3.1 If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 Page 1 lit. f DS-GVO):

  • The user’s IP address
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content / the page requested
  • HTTP status code
  • Volume of transmitted data
  • Websites from where the user’s system arrives at our Internet page
  • Information about the browser type and version being used
  • Operating system and its interface
  • Language.

3.2 In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective.

3.3 Use of cookies:

3.3.1 This website uses the following types of cookies, the scope and functionality of which are explained below:

  • Transient Cookies
  • Persistent Cookies

3.3.2 You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

4. Newsletter

4.1 With your consent, you can subscribe to our newsletter, in which we inform you about analyses of current EU proposals and news about the work of the cep.

4.2 To subscribe to our newsletter, we use a double opt-in process. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted. In addition, we save the IP addresses you use and the dates of your registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

4.3 Your first name, name e-mail address are the only required informations for receiving the newsletter. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 Page 1 lit. a DS-GVO.

4.4 You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking on the link provided in every newsletter or by sending an e-mail to newsletter(at)

4.5 The newsletter is sent via "rapidmail", a newsletter distribution platform of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i. Br., Germany. Rapidmail is a German certified newsletter software provider which was carefully selected according to the requirements of the GDPR and the German Federal Data Protection Act (BDSG). Rapidmail, according to its own information, offers the highest level of data security and data protection as well as consistently DSGVO-compliant newsletter marketing.

4.6 The e-mail addresses of our newsletter recipients are stored on servers of rapidmail in Germany. Rapidmail uses this information to send and evaluate newsletters on our behalf within the meaning of Art. 28 DS-GVO. Furthermore, rapidmail may use this information for its own information to optimize or improve its own services, e.g. for the technical optimization of the dispatch and display of the newsletters or for economic purposes to determine from which countries the recipients come. Rapidmail is prohibited from using the data of our newsletter recipients for purposes other than sending the newsletters. Except in cases permitted by law, rapidmail is not entitled to pass the data of our newsletter recipients on to third parties.

4.7 You can find rapidmail’s Privacy Policy here

4.8 The newsletters contains a so-called "web-beacon", i.e. a file the size of a pixel, which is retrieved from the rapidmail server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected. These data are used for the purpose of the improvement of the product. For example, the reading behaviour, the retrieval location and the access time can be determined. In addition, it is recorded whether the newsletter was opened, when it was opened and which links to other pages from the newsletter were clicked on.

4.9 Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. It is, however, neither our aim nor that of rapidmail to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

4.10 On the website of rapidmail cookies are used and thus personal data are processed by rapidmail, its partners and service providers (e.g. Google Analytics). A newsletter may also contain links to the pages of rapidmail. We have no influence on this data processing. Additional information can be found in rapidmail’s privacy policy.

4.11 The legal basis for the use of rapidmail is Art. 6 Para. 1 Page 1 lit. a DS-GVO. With revocation of the consent according to 4.4, the use of rapidmail is also cancelled.

5. Statement on Data Privacy for the Use of Google Analytics

5.1 This website uses Google Analytics, a web analysis service provided by Google Inc. "("Google"). Google Analytics uses cookies, which enable an analysis of the use of the website by you. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

5.2 According to Google, the IP address transmitted by your browser as part of Google Analytics is not connected with other Google data.

5.3 You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by cookies and your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link:

5.4  Disable Google Analytics: This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in a shortened form, thus excluding the possibility of personal identification.

5.5 We use Google Analytics to analyse and regularly improve our website. The statistics obtained allow us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google relies on the EU standard contractual clauses for the data transfers,  Legal base for the use of Google Analytics is Art. 6 Para. 1 Page 1 lit. f DS-GVO.

5.6 Third Party Information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: Öffnet externen Link in neuem Fenster and Privacy Policies:  

6. Third-party applications: Twitter

6.1 Our website uses functions of Twitter. When you visit our site, no personal data is initially passed on to the provider. Only when you use the "Share" function to select the provider the provider receives the information that you have accessed the corresponding website of our online service.

6.2 We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing and the storage periods. We also do not have any information on the deletion of the collected data by the provider.

6.3 The provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or the design of its website. Such an evaluation takes place in particular (also for users who are not logged in) in order to present demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the provider to exercise this right. We would like to give you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis is Art. 6 Para. 1 Page 1 lit. f DS-GVO.

6.4 Further information on the purpose and scope of data collection and its processing by the provider can be found in the data protection declarations provided below. There you will also find further information on your rights in this matter and setting options to protect your privacy:

6.5 Third Party Information: Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA. More information: and

7. Google Maps

7.1 This website uses the map service Google Maps, which allows the display of interactive maps and the use of the map feature directly on our website.

7.2 When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Para. 3 of this statement will be transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

7.3 Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: Google also processes your personal data in the USA and relies on the EU standard contractual clauses for the data transfers,



opt out Google Analytics