Privacy policy

As of: October 2, 2026

1. Privacy at a glance

This policy describes what happens to your personal data on this website. Personal data is any data that can be used to identify you.

• The website sets no cookies for advertising or audience measurement and embeds no advertising or analytics services.
• Fonts, images and program code are loaded from the same internet address as the pages themselves, not from Google or other providers.
• YouTube videos that appear in some older articles are only loaded after you click.
• If you write to us through the contact form or by email, we process your details to answer your request.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

RIAS Berlin Commission
Funkhaus am Hans-Rosenthal-Platz
10825 Berlin
Germany

Authorized representative: Christoph Jumpelt, Executive Director
Phone: +49-(0)30-8503-6981
Email: info@riasberlin.org

Please direct questions about data protection and the exercise of your rights to info@riasberlin.org.

3. Hosting and service providers

The website runs on servers of STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. When you open a page, your IP address is processed technically so that the page can be delivered to your device. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

Images and documents of the website are kept in a storage service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, in the EU region. Visitors do not connect to this service; the files are delivered through the address of this website. Because Cloudflare is a company based in the USA, access from the USA cannot be ruled out completely. Cloudflare is certified under the EU-US Data Privacy Framework.

The service providers act on our behalf and on our instructions (Art. 28 GDPR).

4. Abuse protection (request limits and block list)

To protect this website from automated mass requests and misuse of forms, every rejected request is logged.

Data processed: the IP address of the request in shortened form (for IPv4 the last block is set to 0, for IPv6 everything below /48), plus a checksum of the address that cannot be reversed and is used to recognize repeats, the browser identifier (user agent), the requested path and the time. The content of forms is not stored.

Purpose: detecting and defending against misuse, spam and automated attacks on forms and sign-in.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is the secure and undisturbed operation of the website.

Retention: 30 days. The entries are then deleted automatically.

Disclosure: The logged data is not passed on to third parties. No profiles are built and no cookies are set.

5. Cookies and local storage

For visitors, this website sets only one cookie: pg_consent remembers your choice in the cookie notice and is kept for six months. It is technically necessary so that the notice does not appear again on every page view (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). It contains no identifier that tracks you across websites.

Staff who maintain the content of the website have a protected sign-in. Sign-in cookies are set for that. Visitors are not affected. An overview is in the cookie policy.

6. Contact form and email

If you use the contact form, we process the details you enter: name, email address, subject, chosen topic, optional details about your request and your message. The data is sent by email to the responsible office of the RIAS Berlin Commission, depending on the chosen topic to the general office or to the person responsible. The text of your message is not stored on the website.

The email is sent through the mail server of Hostinger Operations, UAB, Švitrigailos g. 34, 03230 Vilnius, Lithuania. The website keeps a log of each dispatch: recipient address, subject, time and delivery result. It is deleted automatically after 90 days.

The legal basis is Art. 6(1)(b) GDPR where your request aims at a contract or pre-contractual measures, otherwise our legitimate interest in handling inquiries (Art. 6(1)(f) GDPR). We keep your inquiry as long as needed to handle it and as long as statutory retention duties do not require otherwise. The same applies if you contact us directly by email or phone.

7. Embedded videos (YouTube)

Some older articles contain videos from YouTube. When you open such an article, only a placeholder is shown at first. Only when you click “Load video” does your browser connect to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA). Your IP address and details about your device are transmitted, and YouTube may set cookies. We use the privacy-enhanced embedding (youtube-nocookie.com). The legal basis is your consent by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google is certified under the EU-US Data Privacy Framework. If you do not click, nothing is transmitted.

8. Links to other websites

The website links to our pages on LinkedIn, Facebook, Instagram and YouTube. These are plain links, not embedded buttons or plugins. Data is only transmitted when you click a link and open the provider’s page. There, the provider’s privacy policy applies.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. Please contact info@riasberlin.org for this.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany.

10. Encryption

The website is delivered only in encrypted form (HTTPS). You can recognize an encrypted connection by the lock symbol in the address bar of your browser.

11. Changes to this policy

We update this policy when the website or the legal situation changes. The version published here applies.