Source: https://www.openpetition.eu/cz/content/data_privacy
Timestamp: 2019-04-26 16:52:02+00:00

Document:
As a political dialogue platform, we have a high responsibility in dealing with your particularly sensitive data on political attitudes and opinions. We want to explain to you openly and comprehensibly which data we collect and how we handle it securely. This fulfils our duty to provide information when collecting personal data at openPetition in accordance with Article 13 of the General Data Protection Regulation (GDPR).
Your data is stored on servers in ISO/IEC 27001 certified data centers in Germany. The data transfer to our servers is encrypted with SSL throughout.
Mandates are created by the user and verified by openPetition or researched directly by openPetition.
We use your address to determine the assigned administrative levels and constituencies at all levels.
We use your address to recommend petitions from the administrative levels assigned to you.
We use the category of your last signed petition to recommend petitions with similar topics.
We represent public signatures with name, place and country.
We show the distribution of signatures on geographical maps with the maximum resolution of the postal code districts.
We show you signatures of neighbours in your area who have signed the same petition. Via a contact form we enable networking among each other. The e-mail address of the recipient of a message is hidden from the sender. The e-mail address of the sender of a message is visible to the recipient.
We allow the petitioner to contact his supporters via our platform (if you have agreed).
We will send you recommendations of petitions (if you have agreed) signed in your neighbourhood.
We will send you newsletters about the work of openPetition (if you have agreed).
We occasionally send you petition recommendations (if you have agreed) from our openPetition minority shareholder Campact e.V., which financially supports us.
We may occasionally send you petition recommendations from cooperating partner NGOs (if you have agreed). The increased reach of the petitions will be charged to the partner NGOs.
We enable the petitioner to generate and download signature lists with all signatures and collective forms.
Who can see what of your data and for how long?
Petent: The petitioner must provide the full name, address and a valid e-mail address. Only the name and location of the petitioner is publicly visible on the website and to search engines. One year after the petition is closed, the name of the petitioner will be made anonymous on the website.
Unterstützer: Als Unterstützer einer Petition durch eine Unterschrift muss der vollständige Name sowie die vollständige Anschrift angegeben werden. Um über die Petition informiert zu bleiben, ist die Angabe einer gültigen E-Mail-Adresse Voraussetzung. Sollte ein Pro- oder Contra-Argument für den Debattenraum einer Petition erstellt werden, muss der Unterstützer eine gültige E-Mail-Adresse eingeben. Von Unterstützenden wird bei öffentlichen Unterschriften nur der Name und der Ort auf der Webseite abgezeigt. Drei Tage nach Unterzeichnung wird für Suchmaschinen der Nachname auf einen Buchstaben verkürzt angezeigt. Sechs Monate nach Zeichnungsende sind die Daten von Unterstützenden nicht mehr öffentlich einsehbar. Fünf Jahre nach Abschluss der Petition werden die Unterschriften gelöscht.
Supporters of non-public signatures are at no time publicly visible on the website or to search engines.
Petitioners and petition recipients can see the name, the postcode, the city and a street and house number (adressline 2) abbreviated to 4 characters and, if applicable, the comment provided by all supporters, including non-public signatures.
Unterschriftenlisten und Sammelbögen dürfen vom Petenten, außer an den Petitionsempfänger, an niemanden weitergeleitet werden.
After the petition has been handed over, the petitioner is obliged to destroy all signature data made available to him in digital or printed form.
After the decision on a petition request, the petitioner is obliged to destroy all signature data made available to him digitally or in printed form.
Cooperating partner NGOs that collect signatures on their own page using the openPetition widget can export their signature data and contact you directly (if you have agreed). We have no influence over the frequency and content with which the cooperating partner NGO contacts you.
Profile pictures and profiles of mandate holders are publicly visible on the website and to search engines.
Statements are publicly visible on the website and to search engines with the name of the mandate holder, the name of the political group/party and the time of the statement or the last processing of the statement.
Profile pictures and profiles of petitioners are visible to the public on the website and not visible to search engines.
Profile pictures and profiles of supporters are visible on the website through a hidden link. Profiles are never visible to search engines.
Comments from supporters of public signatures are visible with name and location on the website, but not to search engines.
Comments from supporters of non-public signatures are only visible with the location on the website, but not to search engines.
How can you determine your data?
If you have entered an e-mail address, you can have a confirmation link sent to you. Confirm your email address and you will become a confirmed supporter.
You will be recognized as a confirmed supporter by a cookie. You can enter a password to log in to openPetition at any time.
As a confirmed supporter, you can edit the visibility of your signatures or revoke your signature during the subscription period.
You can register at any time with your signature email to be able to process your signature.
As a confirmed supporter or registered user you can edit your profile.
As a confirmed supporter or registered user, you can edit your notification settings.
As a petitioner, you can transfer your petition to a new spokesperson (see FAQ).
As a mandate holder, you can edit your mandates and resign prematurely if necessary.
As a mandate holder, you can take on mandates already created by openPetition or proposed by users after you have verified yourself to openPetition as a mandate holder.
With openPetition it is not possible to determine whether the owner of this e-mail address has an account on openPetition or has signed a petition by entering a different e-mail address.
openPetition only sends newsletters and other e-mails to people who have actively agreed to receive them. We check every stored e-mail address by a so-called double opt-in procedure. We will send you a confirmation e-mail. Only after you have activated the confirmation link contained therein will we use the e-mail address for further communication with you. In this way we effectively ensure that we do not send unsolicited e-mails to people.
Users have the opportunity to recommend petitions to friends by e-mail. As a recipient you will only ever receive the first recommendation mail for each petition.
The recipient can permanently block the further receipt of recommendation mails for all petitions by means of a unsubscribe link in the recommendation mail.
Die Social-Media Buttons sind auf openPetition einfache Share-Links oder Links auf die openPetiton-Seiten des jeweiligen Portals.
However, it is possible to associate information with you if you are signed in to YouTube or another Google service. If you don't want to, please sign out of your Google Account before clicking an embedded video to play.
Cookies are small files that are stored on a visitor's hard drive. They allow information to be held for a certain period of time and to identify the visitor's computer. For better user guidance we use permanent cookies. We also use session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies.
For local caching of form input, openPetition uses the local storage of your web browser. The form entries are protected in the local storage against accidental deletion until the form is sent or you log off.
Attention: If you delete your cookies, the opt-out cookie will also be deleted and you as a user may have to tick this box again.
For reasons of legal security, the IP address of the visitor in combination with the date and time is stored whenever he or she participates in the content of openPetition. As a rule, the visitor's Internet provider can be inferred from the IP address. The identity of the connection owner can be inferred from the Internet provider at any time. In accordance with the German Data Storage Act (Vorratsdatenspeichergesetz, VDS), connection holders can be identified retroactively on the basis of their IP address for up to 10 weeks.
According to §14 paragraph 2 TMG, we will provide information on personal data in individual cases by order of the responsible authorities, insofar as this is necessary for the purposes of criminal prosecution, for the prevention of danger by the police authorities of the Länder, for the fulfilment of the legal tasks of the Federal and State Office for the Protection of the Constitution, the Federal Intelligence Service or the Military Counter-Intelligence Service or for the enforcement of intellectual property rights.
Every time you visit the openPetition platform or pages containing an openPetition banner or petition widget, visitor browser information is automatically forwarded to us. This includes information on browser type, operating system, IP address, time and the last previously visited page (referrer). With openPetition, this data is not assigned to specific persons. The log files are statistically evaluated and help to ensure error-free operation of the pages.
For our online donation option we use the FundraisingBox service. FundraisingBox guarantees complete data protection and legally compliant data storage. FundraisingBox takes over the payment processing for us. The data of the donation transactions are transmitted securely encrypted via SSL at any time and stored in European data centers. Further information on data protection at FundrainsingBox can be found here: https://www.fundraisingbox.com/datenschutz.
We operate an official Facebook page under the URL https://www.facebook.com/openPetition on the basis of Art. 6 para. 1 lit. f GDPR. We do not collect, store or process personal data of our users on this site at any time. Furthermore, no other data processing is carried out or initiated by us. The data you enter on our Facebook page, such as comments, videos or pictures, will never be used or processed by us for any other purpose.
Facebook uses so-called web tracking methods on this page. Please be aware that Facebook may use your profile information to evaluate your habits, personal relationships or preferences. We have no influence on the processing of your data by Facebook.
We operate under the URL https://twitter.com/oPetition an official Twitter page on the basis of Art. 6 Abs. 1 lit. f GDPR. We do not collect, store or process personal data of our users on this site at any time. Furthermore, no other data processing is carried out or initiated by us. The tweets you enter on Twitter will be published by Twitter and will never be used or processed by us for any other purpose.
Twitter uses so-called web tracking methods on this site. Please be aware that Twitter may use your profile information to evaluate your habits, personal relationships or preferences. We have no influence on the processing of your data through Twitter.
Right to correction: You have the right to immediately request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
Right to limitation of processing: You have the right to request a restriction on processing for the duration of any examination if one of the conditions listed in Art. 18 GDPR is met, for example, if you have filed an objection to the processing.
Right to data transferability: In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transmission of this data to a third party.
Right of appeal to a supervisory authority: According to Art. 77 GDPR, you have the right of appeal to a supervisory authority if you believe that the processing of data concerning you violates data protection regulations.	The responsible supervisory authority for data protection issues is the Berliner Beauftragter für Datenschutz und Informationsfreiheit.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Für den Fall, dass die Verarbeitung für die Wahrnehmung einer Aufgabe erforderlich, die im öffentlichen Interesse liegt oder in Ausübung öffentlicher Gewalt erfolgt, die dem Verantwortlichen übertragen wurde, dient Art. 6 Abs. 1 lit. e DSGVO als Rechtsgrundlage.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
This data protection declaration applies to all content on our pages openPetition.de and openPetition.eu. It does not include the websites linked on our site.
New technical developments and developments on the Internet make adjustments or additions to the openPetition data protection declaration necessary from time to time. You will be informed about the new features at this point.
Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

References: §14
 Art. 6
 Art. 6
 Art. 18
 Art. 20
 Art. 77
 Art. 6
 Art. 6
 Art. 6
 Art. 6