Privacy Policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data collection on this website
Data processing on this website is carried out by the website operator. You will find their contact details in the section “Information on the controller” in this privacy policy.
Your data is collected in two ways: firstly, when you provide it to us (e.g. by email or via a form); secondly, automatically by our IT systems when you visit the website. This mainly concerns technical data (e.g. internet browser, operating system or time of page access). Such data is collected automatically as soon as you enter this website.
2. Hosting and server log files
External hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, metadata and communication data, website access data and other data generated via a website.
Recipient of the data / host:
IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
Legal basis:
The host is used in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6 (1) (f) GDPR).
Data processing agreement:
We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the provider named above.
Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. Our host stores the log files for a maximum of eight weeks and then deletes them automatically.
The legal basis for the processing is Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free and secure operation of the website).
Backups
To protect against data loss, we create regular backup copies of the website. These backups may also contain data submitted via forms and are automatically overwritten after a defined period. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in data security).
3. General information and mandatory disclosures
Information on the controller
The controller responsible for data processing on this website is:
Werkstatt DER BEVÖLKERUNG gGmbH Linienstraße 150 10115 Berlin Germany
Telephone: +49 30 609 766 59 Email: werkstatt@derbevoelkerung.de
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. An informal notification by email to us is sufficient. The lawfulness of any data processing carried out before the withdrawal remains unaffected.
Access, rectification, erasure and restriction of processing
Within the scope of the applicable law, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the processing (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR). Please contact us at the address given above.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format (Art. 20 GDPR).
Right to object
Where data processing is based on Art. 6 (1) (f) GDPR, you may object to that processing at any time on grounds relating to your particular situation (Art. 21 (1) GDPR). We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing.
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information) Alt-Moabit 59–61, 10555 Berlin, Germany Telephone: +49 30 13889-0 Email: mailbox@datenschutz-berlin.de
This right to lodge a complaint applies without prejudice to any other administrative or judicial remedy.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.
No automated decision-making
Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.
4. Cookies
This website uses only technically necessary cookies. These include cookies that store the selected language version, ensure that forms function correctly (protection against misuse) and enable login to the editorial area. We do not use cookies for analytics, marketing or tracking purposes. A cookie banner is therefore not required.
The legal basis is Section 25 (2) no. 2 TDDDG (German Digital Services Data Protection Act) in conjunction with Art. 6 (1) (f) GDPR.
You can set your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis. If you disable cookies, the functionality of this website may be limited.
5. Data collection on this website
Participation form (“Participate”)
If you use the form offered on this website to take part in the project (donation of soil), the data you enter there will be processed.
Data processed:
- name of the Member of the German Bundestag (MdB)
- party, federal state and constituency / origin of the soil
- email address and, where applicable, telephone number (for coordination purposes)
- optional: comments and a personal statement on your participation
Purpose of the processing:
The data is used to coordinate the delivery of the soil, to verify eligibility to participate and to document participants by name as part of the art project.
Publication:
By taking part, you consent to your name, your constituency and, where applicable, your statement being published as part of the project documentation on this website and in project-related publications.
Legal basis:
Processing for coordination purposes is based on Art. 6 (1) (b) GDPR (contractual or quasi-contractual relationship regarding participation in the project). Publication of the data is based on Art. 6 (1) (a) GDPR (consent) or Art. 6 (1) (f) GDPR (legitimate interest in documenting parliamentary history and the artwork).
Storage period:
The data is stored for as long as is necessary for the documentation of the ongoing art project, or until you request its erasure – unless statutory retention obligations require otherwise.
Newsletter
If you would like to receive the newsletter offered on this website, we require your email address as well as your first and last name. We use this data exclusively to send the requested information and do not pass it on for any other purpose.
Registration procedure:
Registration takes place using the double opt-in procedure: after signing up you will receive an email in which you confirm your registration. This ensures that no one can be registered using someone else’s email address.
Legal basis:
Art. 6 (1) (a) GDPR (consent).
Withdrawal:
You may withdraw your consent at any time, for example via the unsubscribe link in every newsletter email or by sending a message to werkstatt@derbevoelkerung.de. The lawfulness of data processing already carried out remains unaffected by the withdrawal.
Storage period:
Your data is stored with the email service provider until you unsubscribe and is then deleted from the newsletter distribution list. Data stored by us for other purposes remains unaffected.
Email service provider:
The newsletter is sent using Brevo, a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (parent company: Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France). The data is processed on servers within the European Union. We have concluded a data processing agreement pursuant to Art. 28 GDPR with Brevo. Further information can be found in Brevo’s privacy policy: https://www.brevo.com/legal/privacypolicy/
Statistical analysis:
The newsletters we send contain so-called tracking pixel technology. This allows us to record whether an email has been opened and which links in it have been clicked. This analysis is carried out in pseudonymised form and serves solely to improve the content and the timing of the newsletter. You can object to this analysis by unsubscribing from the newsletter. The legal basis is Art. 6 (1) (a) GDPR (consent), which you give when you subscribe to the newsletter.
Enquiries by email or telephone
If you contact us by email or telephone, your enquiry including all resulting personal data will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.
Our email accounts are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. This provider also processes the data on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place.
Legal basis:
Art. 6 (1) (b) GDPR, where your enquiry is connected with a contract or is necessary for the performance of pre-contractual measures; in all other cases Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries) or Art. 6 (1) (a) GDPR, where you have given your consent.
Storage period:
The data remains with us until you ask us to erase it, withdraw your consent, or the purpose for storing it no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.
6. Webcam images
On the “Webcam” page we publish a still image of the artwork in the Nordlichthof courtyard of the Reichstag building twice a day. The images document the growth of the plants and serve to communicate the art project.
There is no live streaming and no continuous video recording. The field of view is chosen so that individual persons are not identifiable. No facial recognition is used and the images are not analysed in order to identify individuals; the images are not passed on to third parties.
Legal basis:
Art. 6 (1) (f) GDPR (legitimate interest in documenting and communicating the artwork).
Storage period:
The images form part of the project documentation and are archived permanently. The view on the website shows the images from the last 30 days.
7. Archive and press documentation
In the archive and press documentation section of this website we publish names, quotations, photographs and press reports that document the history of the art project.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in documenting a work of art and parliamentary history) and, in the case of photographs of individuals, Section 23 of the German Art Copyright Act (KUG). In the case of public figures acting in their official capacity – in particular Members of the German Bundestag – publication is additionally based on the public interest in information.
You may object to the publication of material concerning you at any time. Please contact us at the address given above.
8. External links
This website contains links to external websites (e.g. bundestag.de). We have no influence over their operators’ compliance with data protection regulations. No third-party content is loaded when you access this website; a connection to the external providers is only established when you click a link.
9. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to reflect changes to our services. The new privacy policy will then apply to your next visit.
Last updated: August 2026