— Legal

Privacy Policy

How Democracy Forum processes personal data in accordance with the GDPR. See also our Legal Notice.

01

Controller

The controller responsible for processing personal data on this website is:

Democracy Forum e. V.Werner-Eckert-Str. 9
81829 Munich
Germany

Email: Contact@democracy-forum.org

If you have any questions regarding data protection, you may contact us at the contact details above.

02

General Information on Data Processing

We process personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person. This may include, for example, your name, email address, phone number, IP address, organizational details, or any information you submit through our website forms.

We process personal data only where there is a valid legal basis for doing so. Depending on the context, this may include:

03

Website Access and Technical Provision of the Website

When you visit our website, certain technical data may be processed automatically in order to display the website and ensure its stability and security. This may include:

This processing is necessary to provide the website securely and efficiently.

Legal Basis
Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and functional operation of our website.
04

Hosting and Website Infrastructure

Our website may be hosted or technically operated using external service providers. In this context, personal data may be processed on our behalf to the extent necessary for hosting, security, technical maintenance, or website delivery.

Where such providers act as processors on our behalf, they are engaged in accordance with applicable data protection law.

Legal Basis
Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and efficient provision of our online services.
05

Contacting Us

If you contact us by email or through a contact form, we process the information you provide in order to handle your request and communicate with you. This may include:

Legal Basis
Art. 6(1)(b) GDPR, where the communication relates to pre-contractual steps or a requested cooperation or membership-related exchange. Art. 6(1)(f) GDPR, where the processing is necessary for our legitimate interest in responding to inquiries and managing communication.
06

Join Forms for Individuals and Organizations

If you submit one of our join forms, we process the personal data you provide in order to review your application, assess potential membership or cooperation, communicate with you, and manage related follow-up.

Depending on the form, this may include:

Legal Basis
Art. 6(1)(b) GDPR, where processing is necessary to take steps at your request prior to possible membership, cooperation, or related engagement. Art. 6(1)(f) GDPR, based on our legitimate interest in reviewing and managing applications, organizing our network, and maintaining meaningful communication with applicants.
07

Email Communication and Follow-Up

If you apply through our forms or otherwise contact us, we may use your contact details to reply to your inquiry, continue the application process, or provide relevant follow-up communication relating to your request.

If you separately opt in to receive updates, invitations, or other information from us, we will process your data for that purpose based on your consent.

Legal Basis
Art. 6(1)(b) GDPR for requested follow-up communication. Art. 6(1)(a) GDPR where you have given consent. Art. 6(1)(f) GDPR where applicable for legitimate follow-up connected to your request.
08

Recipients and Service Providers

Your personal data may be disclosed to external service providers where this is necessary for website hosting, form handling, email communication, IT administration, or related organizational processes. Such providers may include:

Where required by law, such providers are engaged as processors and are contractually bound to process personal data only in accordance with our instructions.

09

Transfers to Third Countries

If we use service providers located outside the European Union or the European Economic Area, or if personal data is otherwise transferred to a third country, such transfers will only take place where permitted under applicable data protection law. This may be the case, for example, where:

Where required, further information on such safeguards can be requested from us.

10

Cookies and Similar Technologies

Our website may use cookies or similar technologies.

We use technically necessary cookies only to the extent required for the proper functioning and secure operation of the website, unless you have separately consented to the use of additional cookies or similar technologies.

Where consent is legally required before storing information on your device or accessing information already stored there, we will request that consent before doing so.

11

Analytics, Embedded Content, and Optional External Services

We may use optional external services such as analytics tools, embedded media, maps, or social media integrations only where permitted and, where necessary, based on your consent.

If such services are used, additional information about the specific provider, the nature of the data processed, and the relevant legal basis will be provided in this Privacy Policy or in the corresponding consent layer.

12

Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected or as long as legal retention obligations require. As a general rule:

13

Provision of Data

The provision of personal data through our forms is generally voluntary. However, fields marked as mandatory are necessary in order for us to process your inquiry or application.

If you do not provide the required information, we may not be able to review your application or respond properly to your request.

14

Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal conditions:

If you wish to exercise any of these rights, please contact us using the contact details provided above.

15

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

16

No Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, within the meaning of Art. 22 GDPR, unless expressly stated otherwise in a specific case.

17

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect legal, technical, or organizational developments. The version published on this website is the current version.

Last updated: May 13, 2026