1. Information on the collection of personal data

a. In this declaration, we provide information on the collection of personal data when you use this website, or during the embassy's exercise of its functions. Personal data is all data that relates to you personally, for example your name, address, email addresses, user behaviour.

b. When you contact us, your details (name and/or email address, telephone number) and the information provided (including personal data) are stored in order to process the request and in case of any further questions. The storage of this data is governed by the statutory periods for retaining records laid down in the Registry Directive, which complements the . The legal basis for the processing of your personal data is Article 6 (1) e GDPR in conjunction with Article 3 of the Federal Data Protection Act. The processing of the personal data transmitted by you is necessary to establish contact and to address your request.

c. The embassy's Data Protection Commissioner can be contacted via email at DSB-1@prag.diplo.de.

2. Use analysis

a. Each time a user accesses the Federal Foreign Office website or retrieves a file, data on this process is temporarily stored and processed in a log file.
The tracking tool employed to analyse site use is configured to ensure that no personal data is collected.
User IP addresses are also anonymised, so that individual activity cannot be traced. The last two octets of IP addresses are replaced by zeros.
The tracking tool runs on our own servers in a secure network zone certified by the Federal Office for Information Security (BSI) to ensure that no tracking data can be accessed by third parties.
If you do not want your activity on the website to be registered or analysed, you can activate the Do Not Track setting on your browser. A browser variable is transmitted which tells the website whether the user wishes their activity to be tracked or not.
To find out how to do this with your browser, enter in a search engine, for example: “activate Do Not Track [browser name]”

b. The following data is collected by the Javascript tracking tool:

• Request (file name), date and time of the request
• Browser type and version (e.g. Internet Explorer 11)
• Browser language (e.g. German)
• Operating system used (e.g. Windows 10)
• Device type, device model, device brand
• Screen resolution
• Device type (e.g. desktop/smartphone)
• Plug-ins used (e.g. Flash, Java)
• Referrer URL (previous page accessed by the user)
• Anonymised IP address
• Country and region from which the request originated
• Downloads
• Clicks
• Number of forms sent (depending on the goals defined)

3. Use of cookies

Accessing individual pages generates so-called transient cookies to facilitate navigation. These session cookies contain no personal data and are erased at the end of the session. Cookies are also used for the shopping cart. These also expire after use.
Technology such as Java applets and activeX controls, which allows user access behaviour to be monitored, is not used.
Postal and email addresses which you supply us with in connection with enquiries or requests for information material are used solely for correspondence with you and for shipping.

4. Newsletter

a. You can subscribe to one of our newsletters to find out more about news and press releases from the Federal Foreign Office or travel and security information.

b. For subscriptions to our newsletters, we use the double opt-in procedure. This means that after you register, we send you an email to the specified email address in which we ask you to confirm that you would like the newsletter to be sent. Only after you confirm the link in the email is your email address stored for the duration of the use of our newsletter offer. Processing is carried out based on your consent pursuant to Article 6 (1) a GDPR. If you do not confirm your registration within 24 hours, your information is deleted automatically.

c. You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter by clicking on the link provided in each newsletter email .

5. Ordering printed products
If you order brochures, leaflets and other printed products via our website, we require the following personal data to process your order:

• surname, first name,
• street, house number,
• postcode and town/city
• email address.

If the order cannot be finally processed by us, the data you provide will be passed on to third parties (shipping company, if necessary other authorities or institutions if they are sending the material ordered). The legal basis for the processing of your data is your consent pursuant to Article 6 (1) a GDPR.
If the aforementioned data is not available, the order cannot be processed.
The data you provide will be deleted 90 days after completion of the order.

5. Use of social media plug-ins

a. We currently use the following social media plug-ins: Facebook, Twitter, Instagram and YouTube (Google). We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. Only if you click on the activation button on social networks the button with the logo or the first letter of the plug-in provider, will personal data be transferred from you to the respective plug-in provider and stored there (for US providers in the USA). We use the social media plug-ins to make the information we provide more interesting through interaction with you and other users. The legal basis for the use of plug-ins is Article 6 (1) e GDPR in conjunction with Article 3 of the Federal Data Protection Act.

b. We expressly point out that social networks store their users’ data (e.g. personal information, IP address etc.) in accordance with their own data usage guidelines and use this data for commercial purposes. You can find out more about how social networks process data by clicking on the following links:

c. The Federal Foreign Office has no influence on whether or what data is collected by social networks and how this data is used. We are unable to identify how much, where and for how long data is stored, to what extent the networks adhere to requirements to delete data, how the data is evaluated and linked, and to whom the data is forwarded.

d. We therefore ask you to check carefully which personal data you make available to the social networks when you use our site. If you do not want social networks to receive your personal data via your communication on our website, you should contact us in another way, for example through contact formular at our website.

6. Your rights

a. In dealings with us, you have the following rights regarding your personal data:

• Right of access, Article 15 GDPR
• Right to rectification, Article 16 GDPR
• Right to erasure (right to be forgotten), Article 17 GDPR
• Right to restriction of processing, Article 18 GDPR
• Right to object to processing, Article 21 GDPR
• Right to data portability, Article 20 GDPR.

b. If the processing of your personal data is based on your consent, you have the right to revoke this at any time. Such withdrawal of consent does not affect the lawfulness of any use on the basis of your consent prior to its withdrawal (Article 7 (3) GDPR).

c. You also have the right to complain to a data protection supervisory authority about our processsing of your personal data (Article 77 GDPR).