Website Privacy Statement

Introduction

As the operator of this website, we, the Bertelsmann Stiftung, are responsible for processing the personal data of those using it. Our contact details can be found in the website’s “imprint.” The contact persons for questions regarding the processing of personal data are named directly in this privacy policy.

We at the Bertelsmann Stiftung take the protection of your privacy and your personal data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

With this privacy policy, we want to inform you of the extent to which we process personal data when our website is used and the purposes for which we process that data.

Personal data

Personal data is information about an identified or identifiable natural person. This includes all information relating to your identity, such as your name, email address or postal address. Information that cannot be linked to your identity (such as statistical data, e.g. the number of people using the website) is not considered personal information.

You can generally use our website without disclosing your identity and without providing personal data. In this case, we will only collect general information about your visit to our website. However, for some of the services we offer, we will collect personal data from you. We will only process this data for purposes related to using these services, in particular to provide any requested information. When collecting personal data, only data that is absolutely necessary must be provided. Additional information may also be provided, but this is voluntary. We indicate which information is mandatory and which is optional. Specific details are given in the relevant section of this privacy policy.

When you use our website, no automated decision-making takes place based on your personal data.

Processing personal information

Your data is stored by us on specially protected servers within the European Union. The servers are protected by technical and organizational measures against loss, destruction, access, modification and distribution of your data by unauthorized persons. Access to your data is only possible for a few authorized persons. These persons are responsible for the technical, commercial and editorial support of the servers. Despite regular checks, however, it is not feasible to provide complete protection against all possible dangers.

Your personal data is encrypted when transmitted over the Internet. We use TLS encryption (Transport Layer Security) for data transmission.

Disclosure of personal data to third parties

We only use your personal information to provide the services you have requested. If we use external service providers to provide these services, they only have access to the data for the purpose of providing the relevant services. We use technical and organizational measures to ensure compliance with data protection regulations and we require our external service providers to do the same.

Furthermore, we will not disclose your data to third parties without your express consent, especially not for advertising purposes. Your personal data will only be disclosed if you have consented to the disclosure of the data or if we are entitled or obliged to do so on the basis of legal provisions and/or official or court orders. This may include the provision of information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

If we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the specific requirements of Art. 44 ff. GDPR and we require our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union in keeping with the level of protection guaranteed by the GDPR. This level of protection is ensured in particular by an adequacy decision of the EU Commission or by appropriate safeguards in accordance with Art. 46 GDPR.

Legal basis for data processing

Insofar as we obtain consent for the processing of your personal data, Art. 6 (1) (a) GDPR serves as the legal basis for data processing.

If we process your personal data because this is necessary for the performance of a contract or in the context of a quasi-contractual relationship with you, Art. 6 (1) (b) GDPR serves as the legal basis for data processing.

When we process your personal data to fulfill a legal obligation, Art. 6 (1) (c) GDPR serves as the legal basis for data processing.

Article 6 (1) (f) GDPR also serves as a legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our foundation or of a third party, and your interests, basic rights and freedoms do not require the protection of personal data.

In this privacy policy, we always indicate the legal basis that we use for the processing of your personal data.

Data deletion and storage period

We always delete or block your personal data when the reason for which it must be stored no longer applies. However, storage may continue if this is required by legal provisions to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we will delete or block your personal data once the corresponding requirements no longer apply.

Using our website

Information about your computer

Every time you access our website, we automatically collect information that your browser transmits to our server, regardless of whether you are registered. This includes:

• the IP address or host name of the accessing computer,
• the date and time of the server request, including the time zone difference to Greenwich Mean Time (GMT),
• the specific page or content of the request,
• the access status (HTTP status code) and the amount of data transferred,
• the referrer URL (the previously visited page),
• information about the browser software used (language and version),
• the operating system used and its interface.

This data is needed for technical reasons to ensure the stability and security of our website. The IP address is only stored for a period of up to seven days and is then deleted or anonymized by truncation. The other listed data is only stored for a limited period of time.

We use this data to operate our website, in particular to detect and eliminate errors, to determine the extent of the site’s utilization and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.

Use of cookies

Like many others, our website uses cookies. Cookies are small text files that are stored on your computer and save certain settings and data for exchange with our website via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognize your computer and make any pre-settings and preferences immediately available. The cookies we use are, as far as possible, so-called session cookies, which are automatically deleted at the end of the browser session. In some cases, cookies with a longer storage period may also be used so that your pre-settings and preferences can be taken into account the next time you visit our website.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to manually delete cookies that have already been stored via your browser settings. Please note that you may only be able to use our website and online services to a limited extent or not at all if you refuse to accept cookies or delete necessary cookies.

If cookies are not necessary for accessing our website, we will ask for your consent to use them when you first visit the website. With regard to non-essential third-party cookies, you will find a more detailed description of the third-party services we use below. The legal basis for the associated data processing, including any data transfer, is your consent in keeping with Art. 6 (1) (a) GDPR. Once given, consent can be revoked at any time with effect for the future, in particular by changing the selected settings.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online services in keeping with Art. 6 (1) (f) GDPR and – insofar as contracts are concluded or fulfilled via our website – the fulfillment of the contract in keeping with Art. 6 (1) (b) GDPR.

Registration

You can register to use our online services. To do so, you must provide the information requested during registration, such as your name, street address and email address. We also record the date and time of registration. During the registration process, we obtain your consent to use your data. This has the advantage that you do not have to re-enter this information each time you use our website or place an order.

The legal basis for processing your registration data is Art. 6 (1) (a) GDPR, pursuant to consent being given. If you register with us for the purpose of fulfilling or initiating a contract, Art. 6 (1) (b) GDPR also applies.

When you register, an account is created for you. The data in the account is stored by us for as long as active contact is maintained. If no activity is detected over a period of three years, the status of the contact is set to inactive. You can request the deletion of your account at any time.

Use of third-party services

We use third-party services for some of our website’s features. These services are predominantly optional functions that you must explicitly select or explicitly use. We have contractual agreements with the respective parties for the provision and use of their services and, to the extent possible, we try to ensure that third-party suppliers also provide transparent information about the scope of the processing of personal data and that they comply with data protection regulations.

etracker

We use the analytic services of etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, for our website. etracker’s technologies make it possible to analyze your user behavior. We have chosen etracker’s no-cookie option, meaning cookies are not used in the online process. With the help of etracker’s technologies, we collect and store the following data:

• Frequency of page views
• Search terms
• Use of website functions
• Truncated IP address
• Date and time of the request
• Access status/HTTP status code
• Amount of data transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

When user data is retained, IP addresses and data on visitors’ devices and domains are also stored, but only in truncated form or encrypted so that it is not possible to identify individual users. The data collected is never merged with other data sets, e.g. to identify individual users.

The IP address is shortened automatically and at the earliest possible point in time, without you as a user having to make any special changes or adjustments.

We use etracker to improve and optimize the quality of our website and its content, as well as to check and improve the reach and findability of our online offerings. These purposes also constitute our legitimate interest in keeping with the legal basis for data processing pursuant to Art. 6 (1) (f) GDPR.

Further information on etracker’s data protection policy can be found here: https://www.etracker.com/en/data-protection-by-etracker/ 

Use of YouTube

We provide videos on our website that are integrated via YouTube (a Google company). These videos are not stored on our own servers.

To protect your data to the greatest extent possible, we only load a locally stored preview image of the respective video when you first visit the relevant pages. No information is transmitted to YouTube. Only when you actively click on the preview image is a connection to YouTube established and the video content loaded.

By clicking on the image, you give your consent in accordance with Art. 6 (1) (a) GDPR to load content from YouTube. In this context, YouTube (Google) may receive information about your visit to our website along with technically necessary user data. YouTube may also use tracking technologies such as cookies or similar methods. We have no influence on the type and scope of the data processing undertaken by YouTube.

Please note: By accessing embedded YouTube videos, your data may be transferred to countries outside the EU or the European Economic Area (EEA), such as the USA. In some of these countries, there is a risk that government agencies may access your data without you being informed or being able to take effective legal action against it. If you are logged into your Google account, you enable Google or YouTube to assign your surfing behavior directly to your personal Google profile. We therefore recommend that you only view embedded YouTube videos if you agree to the relevant data being processing by Google. You can prevent the data from being identified with your Google profile by logging out of your YouTube account. For more information on how user data is handled, please refer to Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

Job applicants

Job vacancies are published on our website, where you can apply for a position with us. Your application, including your IP address, will be forwarded to our application management system, where you can apply for the relevant position using your personal login details and can upload all the necessary information and documents. When an application is received via the application management system, your documents are forwarded electronically to the responsible employees within the company. Further details on data processing during the application process can also be found in the data protection information provided by the application management system. If you have applied for an advertised position, your documents will be automatically deleted six months after the recruitment process has been completed, provided there are no other legitimate interests that prevent deletion. Legitimate interests in this sense include obligations to provide evidence in proceedings under Germany’s antidiscrimination law (Allgemeines Gleichbehandlungsgesetz, AGG). If an application has been submitted without a position being advertised (unsolicited application), the application will be retained for as long as there is a possibility that the application may be of interest. You have the option of requesting the deletion of your application via your applicant profile at any time, even before the end of the specified retention periods. In the event of a successful application, the data transmitted will be stored in compliance with legal requirements for processes related to your employment at the foundation. In all other cases, the legal basis for storing your application data is your consent in accordance with Art. 6 (1) (a) GDPR.

Processing orders

We use your personal information only for orders submitted to Verlag Bertelsmann Stiftung, our publishing house, and for processes involving companies commissioned to handle orders.

Storage and data transfer for orders

To fulfill orders, we work with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with privacy regulations. We pass on your details (name and address) to the respective transport and payment processing company that will deliver the products you have ordered. Payment is carried out exclusively on account. The legal basis for this is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary for fulfilling our contract with you.

We store the data for as long as it is necessary to fulfill the contract. In addition, we store the data for the fulfillment of post-contractual obligations and to comply with the retention period laid out in commercial and tax law. This retention period is usually 10 years from the end of the respective calendar year.

Communicating with us

You can contact us in various ways, including via the contact form on our website. We are also happy to provide you with regular information on various topics by emailing you one or more of our newsletters.

Contact form

If you use the contact form on our website, we collect the personal data you provide on the form, in particular your name and email address. We also store the date and time of your inquiry. We process the data transmitted via the contact form exclusively for the purpose of responding to your inquiry or request.

You can decide for yourself what information you want to send us via the contact form. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR.

After we have finished handling your inquiry or request, the data will be stored for an initial period in case there are any follow-up questions. You can request that the data be deleted at any time, otherwise it will be deleted once the matter has been fully resolved. Statutory retention requirements remain unaffected in each case.

Newsletter

When you subscribe to our newsletter, your email address will be used by the Bertelsmann Stiftung for informational purposes until you unsubscribe. You will receive regular emails about current topics addressed by our projects as well as special emails, such as those related to new studies and events. The emails may be personalized and customized based on the information you have provided us about you.

Unless you have consented in writing, we use the double opt-in procedure to register for our newsletter, i.e. we will only send you a newsletter by email if you have expressly confirmed to us beforehand that you want the newsletter dispatched. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in the email.

If you have registered to receive the newsletter, we will record and analyze when you open or click on content. We receive information about the extent to which the newsletters or links sent are opened and used, whether emails have been rejected and whether customers receive an email and then unsubscribe from the newsletter. The recorded information is used to personalize and customize the newsletter, e.g. based on the data or preferences provided. It is not possible to subscribe to the newsletter without having the relevant information recorded. If you do not want information to be recorded, you can unsubscribe from the newsletter altogether.

If you have expressly subscribed to the newsletter, the legal basis for processing your data is your consent pursuant to Art. 6 (1) (a) GDPR. In keeping with the legal requirements, you also might receive our newsletter without giving your express consent because you ordered publications from us, we thus received your email address and you did not object to being emailed information. In this case, the legal basis is our legitimate interest in sending direct marketing in accordance with Art. 6 (1) (f) GDPR.

If you no longer wish to receive newsletters from us, you can revoke your prior consent at any time with effect for the future or can inform us you do not want to receive further newsletters. No costs ensue other than transmission costs at basic rates. Simply use the unsubscribe link included in every newsletter or send a message to us or our data protection officer.

Comments

You have the option of commenting on our online posts. To do so, you must provide your name, although you may also use a pseudonym. You must also provide your email address. Providing your address is necessary so that we can contact you in the event of complaints about your comments and ask you for a response. We also store your IP address. Without this information, you will not be able to post comments. However, only the name or pseudonym you have chosen will be displayed when the comment is published. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR.

Social media

Our website contains links or plugins to the social networks Facebook, LinkedIn, Soundcloud, Twitter, Xing and YouTube. You can recognize the links by the respective provider’s logo.

Clicking on the links will open the corresponding social media pages, to which this privacy policy does not apply. For details on the provisions applicable there, please refer to the respective privacy policies of the individual providers. You can find them at:

Facebook: http://www.facebook.com/policy.php 

LinkedIn: https://www.linkedin.com/legal/privacy-policy 

SoundCloud: https://soundcloud.com/terms-of-use 

Twitter (X): https://x.com/en/privacy 

Xing: https://www.xing.com/privacy 

YouTube: https://policies.google.com/privacy?hl=en 

Instagram: https://about.instagram.com/blog/announcements/instagram-community-data-policy 

Bluesky: https://bsky.social/about/support/privacy-policy 

No personal information is transmitted to the respective providers before you click on the corresponding links or plugins. Your visit to the linked site is also the basis for data processing by the relevant provider.

We would also like to point out here that Germany’s Federal Office for Information Security (BSI) provides general information on the safe use of social networks on its website at https://www.bsi.bund.de/EN/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Onlinekommunikation/Soziale-Netzwerke/soziale-netzwerke_node.html.

The following information regarding the processing of your personal data also applies to our use of social media channels.

Facebook fan page

In addition to our own website, we also maintain a fan page on the social network Facebook. We use the fan page to provide information about our activities and offer a channel for communication. Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Meta”). In this respect, we use Meta’s technical platform and services.

Disclaimer

Please note that use of the fan page and its functions is at your own risk, especially with regard to interactive functions such as commenting, sharing and rating. Alternatively, you can access the information offered on the fan page on our homepage.

We try to ensure the protection of your privacy and your private data to the extent it is possible using the relevant capabilities on Facebook. Insofar as your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Please note that personal data is also processed by Meta due to the integration of our fan page within Facebook’s site. When you visit the fan page, Meta collects a range of data, including your IP address and other information that may be stored in the form of cookies on the device you are using or in the respective browser. We have no influence on the data processing by Meta; in particular, Facebook does not act as a processor on our behalf in the areas under our auspices. According to Meta, Facebook’s guidelines – which are available at www.facebook.com/privacy/policy/ – apply to the data processing done by Facebook. Please note that the data collected about you by Meta in this context may also be transferred outside the European Union.

From a privacy perspective, Meta and we are jointly responsible for the operation of the fan page and the evaluation of user data in the context of visits to the fan page. In accordance with privacy regulations, we have entered into an internal agreement with Meta to delineate our respective responsibilities.

Facebook Insights

Through the Page Insights function, Meta offers fan page operators an overview of how the page is used and by whom. Page Insights can be used primarily to access and evaluate statistical data. We use the data from Page Insights to make the fan page as attractive and efficient as possible. To that end, Meta provides us with data that Meta itself has generated. Further information on how Page Insights works and who is responsible for it is available from Facebook at https://www.facebook.com/legal/terms/page_controller_addendum.

Messenger

Users who are registered with Facebook also have the option of communicating directly via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of customer inquiries, the evaluation of those inquiries and the prevention of misuse.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Additional information about Facebook

If you have any questions about our use of personal data in connection with our fan page on Facebook, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on Facebook, please contact Meta directly.

Instagram account

We also have an account on the social network Instagram. We use our Instagram account to post about our activities and provide another channel for communicating with us. Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Meta”).

Please note that use of Instagram and its functions is at your own risk, especially with regard to interactive functions such as commenting, sharing or rating.

Responsibility for data protection

We try to ensure the protection of your privacy and your private data to the extent it is possible using the relevant capabilities on Instagram. Insofar as your personal data is processed by us in connection with your visit to our Instagram account, the explanations in this privacy policy apply without restriction. Please note that personal data is also processed by Meta due to the integration of our account within Meta’s services. When you access our Instagram content, Meta collects a range of data, including your IP address and other information that may be stored in the form of cookies on the device you are using or in the respective browser. We have no influence on the data processing by Instagram; in particular, Meta does not act as a processor on our behalf in the areas under our auspices. According to Meta, Meta’s guidelines – which are available at https://www.facebook.com/help/instagram/155833707900388 – apply to the data processing done by Facebook. Please note that the data collected about you by Meta in this context may also be transferred outside the European Union.

From a privacy perspective, Meta and we have two separate responsibilities for the operation of the Instagram account and the associated communication and evaluation options. Insofar as your personal data is processed by us in connection with your visit to our Instagram page and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is usually the case when you communicate directly with us via the Instagram Direct Messaging function and transmit your data to us in the process. Insofar as your personal data is processed by Meta and Meta alone decides on the purposes and means of data processing, Meta is solely responsible for this data processing. This applies in particular to the evaluation of user behavior by Meta for its own purposes.

Instagram Insights

Meta offers Instagram account operators the option of using the Instagram Insights feature to gain an overview of the account’s use and users. Instagram Insights makes it possible to access and evaluate primarily statistical data. We use the data from Instagram Insights to make our Instagram account as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated on its own. The data we receive from Meta is mostly anonymized data and statistics. Insofar as we receive personal data in this context, we are the ones responsible for any further processing of it we undertake to evaluate the use of our Instagram account.

Meta provides further information on Instagram Insights at https://help.instagram.com/1533933820244654.

Instagram Direct Messaging

On Instagram, you can communicate with us directly using Instagram Direct Messaging. If you contact us via Instagram Direct Messaging, we will store and use the data transmitted exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of customer inquiries, the evaluation of those inquiries and the prevention of misuse.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Additional information about Instagram

If you have any questions about our use of personal data in connection with our Instagram account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on Meta’s social network Instagram, please contact Meta directly.

X account

In addition to our own website, we also operate an account with the short message service X (formerly Twitter), which currently we are not actively using. The deactivated X account is used solely to monitor when our studies and experts are mentioned on the platform. X is operated by Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (hereinafter: “X”).

We would like to point out that use of X and its functions is at your own risk. This applies in particular to the use of interactive functions (e.g., sharing, rating).

Processing of personal data

The data collected about you when you use its services is processed by X and may be transferred to countries outside the European Union. The data processed includes your IP address, the application used, information about the device you are using (including device ID and application ID), information about websites visited, your location and your mobile phone provider. This data is assigned to your X account data. We have no influence on the type and scope of data processed by X, the type of processing and use, or the transfer of this data to third parties. Information about which data is processed by X and for what purposes can be found in X’s privacy policy at x.com/en/privacy. You can view your own data at https://help.x.com/en/managing-your-account/accessing-your-x-data.

We process the data you enter on X, in particular your username and the content published under your account, insofar as we may retweet your tweets, respond to them, or compose tweets that refer to your account. The data you freely publish and distribute on X is thus included in our offering and made available to our followers in order to make our channel more attractive.

You can restrict the processing of your data in the general settings of your X account and under “Privacy and Security.” In addition, on mobile devices, you can restrict X’s access to contact and calendar data, photos, location data, etc. in the settings. However, this depends on the operating system used. Further information on these points is available on the following X support pages: https://support.twitter.com/articles/105576#.

X Analytics

X offers operators of X accounts the option of using the “X Analytics” function to obtain an overview of the account’s use and users. X Analytics primarily allows statistical data to be accessed and evaluated. For this purpose, X provides us with data that X has generated on its own. The data we receive from X is mostly anonymized data and statistics. Insofar as we receive personal data in this context, we are the ones responsible for any further processing of it we undertake to evaluate the use of our X account. Further information on X Analytics is available from X at https://business.twitter.com/de/advertising/analytics.html.

Direct Messages

On X, you can communicate with us directly using Direct Messages. If you contact us using Direct Messages, we will store and use the transmitted data exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of inquiries, the evaluation of those inquiries and the prevention of misuse.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In terms of your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

X buttons, X widgets

X can track your visits to websites and link them to your X account through X buttons or X widgets embedded in the websites and through the use of cookies. The information generated by the cookies is sent to an X server and stored there. It is possible that data could be sent to the United States, where government agencies might be able to access it. The data collected by the cookies can be used to tailor content or advertising to you. Information on this and the available settings can be found at https://help.x.com/en/safety-and-security/privacy-controls-for-tailored-ads and https://help.x.com/en/rules-and-policies/x-cookies.

Additional information about X

If you have any questions about our use of personal data in connection with our X account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on X, please contact X directly.

YouTube channel

In addition to our own website, we also operate a channel on the YouTube video platform. We use this channel to provide information about our activities and as a means of communication. The YouTube video platform is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Please note that use of the video platform and its functions is at your own risk. This applies in particular to the use of interactive functions (e.g., discussion, comments).

Processing of personal data

The data collected about you when you use its services is processed by Google and may be transferred to countries outside the European Union. The data processed includes the data you voluntarily provide, such as your name, username, email address, and phone number; the content you create, upload or receive, such as photos, videos, documents, spreadsheets and comments; your IP address; information about the device you are using; information about the websites and content you access; and your location and mobile phone provider. We have no influence on the type and scope of data processed by Google, the type of processing and use, or the transfer of this data to third parties. Information about what data is processed by Google and for what purposes can be found in Google’s privacy policy at https://policies.google.com/?hl=en&gl=de.

We process the data you enter on YouTube, in particular your username and the content published under your account, insofar as we may link to or respond to your posts or write posts that refer to your account. The data you freely publish and distribute on YouTube is included in our offering in this way and made available to our followers.

You can restrict the processing of your data in the general settings of your Google account. In addition, you can restrict Google’s access to contact and calendar data, photos, location data, etc. in the settings options on mobile devices. However, this depends on the operating system used. In addition to these tools, Google also offers privacy settings specifically for YouTube. You can find out more at: https://policies.google.com/privacy?hl=en&gl=de#infochoices.

YouTube Analytics

Google offers operators of YouTube channels the option of using YouTube Analytics to obtain an overview of the account’s use and users. YouTube Analytics allows primarily statistical data to be accessed and evaluated. We use the data from YouTube Analytics to make our YouTube channel as attractive and efficient as possible. For this purpose, Google provides us with data that Google has generated on its own. The data we receive from Google is mostly anonymized data and statistics. Insofar as we receive personal data in this context, we are the ones responsible for any further processing of it we undertake to evaluate the use of our YouTube channel. Further information on YouTube Analytics is available from Google at https://support.google.com/youtube/answer/9002587?hl=en&sjid=6865246580315943802-EU, among other locations.

Additional information about YouTube

If you have any questions about our use of personal data in connection with our YouTube channel, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Google, please contact Google directly.

Bluesky

We also operate an account on the Bluesky social network. We use our Bluesky account to provide information about our activities and offer a channel for communication. The platform is operated by Bluesky PBLLC, Seattle, Washington.

Please note that use of Bluesky and its features is at your own risk, especially with regard to interactive features such as commenting, sharing or rating.

Processing personal data

When you visit our Bluesky profile, personal data is processed by the platform operator and may be transferred to countries outside the European Union. The type, scope, and purposes of this data processing are largely determined by Bluesky’s privacy policy. When you access our Bluesky content, Bluesky processes a range of data, including your IP address and other information that may be stored in the form of cookies on the device you are using or in the respective browser. We have no influence on the data processing carried out by Bluesky. Further information on data processing by Bluesky can be found in Bluesky’s privacy policy, available at https://bsky.social/about/support/privacy-policy#data-use. 

We process the data you provide to Bluesky, in particular your username and the content published via your account, insofar as we repost your posts, respond to them or publish posts ourselves that refer to your account. The data you freely publish and distribute on Bluesky is included in our offering in this way and made available to our followers in order to make our channel more attractive.

Bluesky allows you to configure additional privacy settings for your account. For more information, please visit: 
https://bsky.social/about/support/privacy-policy#privacy-choices.

Bluesky Direct Messaging

At Bluesky, you can communicate with us directly using Bluesky Direct Messaging. If you contact us using Bluesky Direct Messaging, we will store and use the transmitted data exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of customer inquiries, the evaluation of those inquiries and the prevention of misuse.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Additional information about Bluesky

If you have any questions about our use of personal data in connection with our Bluesky account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Bluesky, please contact Bluesky directly.

Xing

In addition to our own website, we also operate an account on the Xing career network. We use this account to provide information about our organization and our activities and to offer a channel for communication. The Xing career network is operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (“New Work”).

Please note that use of Xing and its functions is at your own risk. This applies in particular to the use of interactive functions (e.g., liking, sharing, commenting).

Processing personal data

The data collected about you when you use its services is processed by New Work. It cannot be ruled out that data may also be transferred to countries outside the European Union. The data processed includes the data you voluntarily provide, such as your name, username, email address, telephone number; information about your professional career; profile data; content you create, upload, or receive; as well as comments, your IP address, information about the device you use; information about websites and content you visit; and your location. We have no influence on the type and scope of data processed by New Work, the type of processing and use, or the transfer of this data to third parties. Information about which data is processed by New Work and for what purposes can be found in New Work’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

We process the data you enter on Xing to the extent that we may like, comment on or share your posts, or contact and interact with you. The data you freely publish and distribute on Xing is included in our offering in this manner.

You can restrict the processing of your data in the general settings of your Xing account. In addition, on mobile devices, you can restrict New Work’s access to your contacts and calendar data, photos, location data, etc. in the settings options. However, this depends on the operating system used. You can find out more about the privacy settings on Xing at: privacy.xing.com/de/ihre-privatsphaere.

Analysis

New Work offers Xing account operators the opportunity to obtain an overview of the account’s use and users. The analysis functions can be used to call up and evaluate primarily statistical data. We use the data to make our account as attractive and efficient as possible. For this purpose, New Work provides us with data that New Work has generated on its own. The data we receive from New Work is mostly anonymized data and statistics. Insofar as we receive personal data in this context, we are the ones responsible for any further processing of it we undertake to evaluate the use of our Xing account. Further information can be found in Xing’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

Communication

Xing gives you the opportunity to communicate with us directly. If you contact us via Xing, we will store and use the data transmitted exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of inquiries, the evaluation of those inquiries and the prevention of misuse.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Additional information about Xing

If you have any questions about our use of personal data in connection with our Xing account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Xing, please contact New Work directly.

LinkedIn Account

In addition to our own website, we also operate an account on the LinkedIn career network. We use this account to provide information about our organization and our activities and to offer a channel for communication. The LinkedIn career network is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: “LinkedIn”).

Please note that use of LinkedIn and its functions is at your own risk. This applies in particular to the use of interactive functions (e.g., liking, sharing, commenting).

Processing personal data

The data collected about you when you use its services is processed by LinkedIn. It cannot be ruled out that data may also be transferred to countries outside the European Union. The data processed includes the data you voluntarily provide, such as your name, username, email address, telephone number; information about your professional career; profile data; content you create, upload or receive; as well as comments, your IP address, information about the device you use; information about websites and content you visit; and your location. We have no influence on the type and scope of data processed by LinkedIn, the type of processing and use, or the transfer of this data to third parties. Information about what data is processed by LinkedIn and for what purposes can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy.

We process the data you enter on LinkedIn to the extent that we may like, comment on or share your posts, or contact and interact with you. The data you freely publish and distribute on LinkedIn is included in our offering in this manner.

You can restrict the processing of your data in the general settings of your LinkedIn account. In addition, on mobile devices, you can restrict LinkedIn’s access to contact and calendar data, photos, location data, etc. in the settings options. However, this depends on the operating system used. You can find out more about LinkedIn's privacy settings at: https://de.linkedin.com/legal/privacy-policy.

Analysis

LinkedIn offers LinkedIn account operators the opportunity to obtain an overview of the account’s use and users. The analysis functions can be used to call up and evaluate primarily statistical data. We use the data to make our account as attractive and efficient as possible. For this purpose, LinkedIn provides us with data that LinkedIn has generated on its own. The data we receive from LinkedIn is mostly anonymized data and statistics. Insofar as we receive personal data in this context, we are the ones responsible for any further processing of it we undertake to evaluate the use of our LinkedIn account. Further information can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy.

Communication

LinkedIn gives you the opportunity to communicate with us directly. If you contact us via LinkedIn, we will store and use the data you provide exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of inquiries, the evaluation of those inquiries and the prevention of misuse.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Additional information about LinkedIn

If you have any questions about our use of personal data in connection with our LinkedIn account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at LinkedIn, please contact LinkedIn directly.

Your rights – Contacting us

At the Bertelsmann Stiftung, it is very important to us that we explain as transparently as possible how we process your data and what your rights are in this regard. If you would like more information or wish to exercise your rights, please contact us at any time so that we can address your concerns.

Rights of data subjects

You have wide-ranging rights when it comes to the processing of your personal data. First, you have a comprehensive right to receive information and, if necessary, you can request the correction, deletion or blocking of your data. You can also request that your data be processed in a more limited way, and you have a right of objection. In terms of the personal data you have provided us, you also have a right to data portability.

If you wish to exercise any of your rights and/or receive further information about them, please contact us using the contact form. Alternatively, you can contact our data protection officer.

Revoking consent, right of objection

Once you have given your consent, you can revoke it at any time with effect for the future. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation. The contact persons for revoking consent are also our team members via the contact form and our data protection officer.

If the processing of your personal data is not based on consent but on another legal basis, you may object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the outcome of the review and, if the data processing is to continue, you will receive further information from us as to why the data processing is permissible.

Data protection officer and contact details

We have appointed an external data protection officer who supports us in data protection matters and whom you can also contact directly. If you have any questions regarding our handling of personal data or would like further information on data protection issues, please do not hesitate to contact our data protection officer and his team:

RA Dr. Sebastian Meyer, LL.M.
c/o BRANDI Rechtsanwälte
Adenauerplatz 1
33602 Bielefeld
Germany
Telephone: +49 521 96535-812
E-mail: datenschutz@bertelsmann-stiftung.de

If you would like to contact our data protection officer personally by email, you can also reach him at sebastian.meyer@brandi.net

Complaints

If you believe that our processing of your personal data is not in accordance with this privacy policy or applicable data protection regulations, you can lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation. You also have the right to lodge a complaint with a supervisory authority.

Additional information and changes

Links to other websites

Our website may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are upheld on the linked websites. We therefore recommend that you inform yourself about the data protection policies used by the relevant websites.

Changes to this privacy policy

The status of this privacy policy is indicated by the date (below). We reserve the right to change this privacy policy at any time with future effect. Changes will be made in particular in the event of technical adjustments to our website or changes to data protection regulations. The current version of the privacy policy is always available directly via our website. We recommend that you revisit this privacy policy at regular intervals to learn of any changes.

This is a translation of the German privacy policy, which is solely legally binding.

Last updated: January 2026