Privacy Policy

We process personal data only insofar as this is necessary for operating this website, providing its functions, communicating with users, managing protected areas or further developing the service.

Personal data means any information relating to an identified or identifiable natural person. This may include, in particular, name, email address, technical access data, submitted content or communication content.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act and other applicable legal requirements.

When this website is accessed, technically necessary access data is processed. This may include IP address, date and time of access, pages accessed, amount of data transferred, browser type, operating system, referrer URL and technical status messages.

This data is processed in order to deliver the website, ensure stability and security, analyse errors and prevent misuse.

The legal basis is Art. 6 (1) lit. f GDPR. The legitimate interest lies in the secure, stable and functional operation of the website.

This website is provided using technical service providers. Personal data, in particular technical access data, may be processed on servers of the respective hosting or platform provider.

Hosting, deployment, database, storage and authentication services may be used for operating the website. Processing takes place for the technical provision, security and maintenance of the service.

Where service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR or a comparable legal basis.

If you contact us by email, telephone or other contact options provided, we process the information you provide in order to handle your request. This may include name, contact details, message content and technical accompanying data.

The legal basis is Art. 6 (1) lit. f GDPR, insofar as processing is based on our legitimate interest in answering enquiries. If the contact is aimed at concluding or performing a contract, Art. 6 (1) lit. b GDPR may also apply.

DDR Leben may provide protected areas for members, moderation and administration. For registration, login and use of these areas, email address, user ID, role information, session data, profile details and voluntarily submitted content may be processed.

Processing serves authentication, access control, role management, platform security and the provision of protected functions.

The legal basis is Art. 6 (1) lit. b GDPR where processing is necessary to provide a user account or protected functions. Otherwise, processing is based on Art. 6 (1) lit. f GDPR for securing and properly managing the platform.

If users submit content such as memories, texts, notes, images or other contributions, the transmitted data is processed for review, moderation, editorial editing and, where applicable, publication.

Personal content is published only where an appropriate legal basis exists, in particular consent pursuant to Art. 6 (1) lit. a GDPR or a contractual or pre-contractual basis pursuant to Art. 6 (1) lit. b GDPR.

Users should not submit personal data of third parties unless they are authorised to do so.

This website may use cookies and comparable local storage technologies. Some of them are technically necessary, for example for language settings, sessions, security or the provision of protected areas.

Non-essential cookies or comparable technologies, in particular for advertising, reach measurement or personalised content, are used only where valid consent is required and has been obtained.

The legal basis for technically necessary storage is Art. 6 (1) lit. f GDPR. For technologies requiring consent, the legal basis is Art. 6 (1) lit. a GDPR in conjunction with the applicable rules on terminal equipment and consent.

DDR Leben is technically prepared to integrate advertising via Google AdSense or direct partner placements. Google AdSense is a service for displaying advertisements. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When Google AdSense is used, Google and its partners may use cookies, device identifiers or comparable technologies, process information about the use of this website and use that information to deliver, measure and personalise advertising. This may include IP address, browser and device information, page views, interactions with advertisements and other technical data.

Where personalised advertising or comparable processing requiring consent takes place, we obtain consent beforehand. The legal basis is then Art. 6 (1) lit. a GDPR. Where processing is necessary for non-personalised advertising or technical provision, it may be based on Art. 6 (1) lit. f GDPR if the legal requirements are met.

Google may also process data on servers outside the European Union or the European Economic Area. Further information on data processing by Google can be found in Google’s privacy policy: https://policies.google.com/privacy

You may withdraw your consent at any time with effect for the future once a corresponding consent or consent management system is provided on this website.

In addition to Google AdSense, DDR Leben may display direct partner notices or sponsored placements. Such content is labelled as an advertisement.

In the case of purely static direct advertisements without tracking, no additional personal data is usually processed by the advertisement itself. If a link to a partner offer is clicked, users leave this website. The respective provider is responsible for the data processing there.

Unless a more specific legal basis is stated in this privacy policy, the following applies:

Art. 6 (1) lit. a GDPR serves as the legal basis where consent is obtained.

Art. 6 (1) lit. b GDPR serves as the legal basis where processing is necessary for the performance of a contract or for pre-contractual measures.

Art. 6 (1) lit. c GDPR serves as the legal basis where there is a legal obligation.

Art. 6 (1) lit. f GDPR serves as the legal basis where processing is necessary to protect legitimate interests and no overriding interests or fundamental rights of the data subject oppose this.

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Data from contact enquiries is deleted once the enquiry has been finally processed and no statutory retention obligations prevent deletion.

Data from user accounts or protected areas is generally stored for as long as the user account exists or storage is required for platform administration.

Technical log and security data is stored only for as long as necessary for security, error analysis and prevention of misuse.

Personal data may be transmitted to technical service providers insofar as this is necessary for hosting, operation, security, maintenance, authentication, storage or other technical provision of the website.

Data is otherwise disclosed to third parties only if there is a legal basis, consent has been given or disclosure is necessary to enforce legal claims.

When using certain services, it cannot be excluded that personal data may be transferred to countries outside the European Union or the European Economic Area. This applies in particular to internationally operating providers such as Google.

Where such transfer takes place, it is carried out only on the basis of appropriate data protection safeguards, such as an adequacy decision, EU standard contractual clauses or other legally provided mechanisms.

Data subjects have the following rights, subject to the statutory requirements:

Right of access pursuant to Art. 15 GDPR

Right to rectification pursuant to Art. 16 GDPR

Right to erasure pursuant to Art. 17 GDPR

Right to restriction of processing pursuant to Art. 18 GDPR

Right to data portability pursuant to Art. 20 GDPR

Right to object to processing pursuant to Art. 21 GDPR

Right to withdraw consent pursuant to Art. 7 (3) GDPR

To exercise these rights, it is sufficient to contact us using the contact details provided in the legal notice or in this privacy policy.

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data violates data protection law.

In particular, the data protection supervisory authority of the German federal state of Saxony may be competent. Data subjects may also contact any other competent data protection supervisory authority.