Data protection and cookie usage policies

§ 1 Information on the processing of personal data

(1) In the following you will find information about how your personal data is processed when using our website. Personal data is defined as all data that refers to your person, e.g. your name, contact details and online behaviour.

(2) The controller responsible for processing your personal data as put forth in Art. 4 (7) General Data Protection Regulation (GDPR) is the Deutsche UNESCO-Kommission e.V. (German Commission for UNESCO), Martin-Luther-Allee 42, 53175 Bonn, Germany (for further information, please refer to our Legal notice).

You can contact our Data Protection Officer via email at info[at]benedikt-eprivacy.com or by post (see address above plus “Attn: Data Protection Officer”).

(3) You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure or a right to be ‘forgotten’ (Art. 17 GDPR)
  • Right to restriction of the processing of personal data (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR).

You also have the right to lodge a complaint regarding how we process your personal data with a data protection supervisory authority. You can find a list of all supervisory authorities at www.ldi.nrw.deExternal link:.

§ 2 Processing of personal data when visiting our website

(1) When visiting our website for information purposes only, i.e. if you choose not to register or otherwise provide us with information, we only process the personal data that is transmitted to our server via your browser. If you simply view the content of our website, we process the following technically necessary data so that we can display our website correctly and ensure stability and security (legal basis: Art. 6 (1f) GDPR):

  • IP address
  • Date and time of query
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of query (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the query originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

(2) If you send us a query by email or via the contact form, we process the data you provide in order to respond to your query. We store your query for a period of up to three years for verification purposes. Depending on the nature of your query, a longer storage period may be necessary. In such cases, we will provide information on the respective purposes of processing. The legal basis for data processing is Art. 6 (1f) GDPR.

§ 3 Processing of online data (‘cookie usage policy’)

(1) In addition to the data listed above, cookies are stored on your computer while visiting our website. Cookies are small text files saved onto your hard drive. They are assigned to the browser you are using and provide the website controller (in this case, us) with specific information concerning how you use our website. Cookies cannot execute programmes or transfer viruses to your computer. Their only purpose is to make the website more user-friendly and effective overall.

(2) Use of cookies:

a) Our website uses the following types of cookies, the scope and function of which are explained below:

  • Session (temporary) cookies (see b)
  • Persistent cookies (see c)

b) Temporary cookies are automatically deleted when you close your browser. These include session cookies in particular. Session cookies contain a so-called ‘session ID’, with which various queries from your browser can be assigned to the session in question. This allows us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete these cookies at any time in your browser’s security settings.

d) Required functions which are technically necessary to display the website: The technical structure of our website requires the use of certain technologies, and cookies are one of them. Without these tools, our website cannot be displayed (entirely) correctly or support key functions. These are basically temporary cookies that are deleted at the end of your website visit, or at the latest, when you close your browser. You cannot opt out of these cookies if you wish to visit our website. The individual cookies can be viewed in the Consent Manager. The legal basis for cookie processing is Art. 6 (1f) GDPR.

e) Optional functions: We only use other cookies or technologies with your explicit consent, which you can select via the consent tool. The corresponding functions are only activated with your consent. They enable us to analyse and improve visits to our website, make it easier for you to use different browsers or terminal devices, recognise you during a visit and assess the effectiveness of advertisements on our website. The legal basis for this processing is Art. 6 (1a) GDPR. You may revoke your consent at any time without affecting the legality of consent-based processing conducted prior to withdrawal. Functions, for which we require your consent, and from which you may opt out via the Consent Manager, are described below. 

(3) Below you will find an overview of the functions that require your explicit consent, which you may choose to grant upon visiting our website. These functions use cookies and serve advertising purposes.

(a) Use of Matomo: Our website uses the web analysis software Matomo (www.matomo.orgExternal link:), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (‘Matomo’) which collects and stores statistical analyses of user behaviour for optimisation and marketing purposes based on the consent you have given in accordance with Art. 6 (1a) GDPR. Pseudonymised user profiles can be created and evaluated based on this data for the same purpose. Cookies can be used for this purpose. All data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

Information generated by the cookie in the pseudonymised user profile cannot be used to personally identify visitors of the website and is not aggregated with personal data which could reveal the user’s identity.

You may withdraw your consent at any time without this affecting the legality of processing conducted up to the point of withdrawal. The easiest way to withdraw consent is through our Consent Manager or by installing the Google browser add-on (https://tools. google.com/dlpage/gaoptout?hl=en/External link:). In this case, a so-called opt-out cookie is stored in your browser, which prohibits Matomo from collecting session data. Please note that deleting all cookies saved in your browser also removes the opt-out cookie, which you will have to reactivate if desired.

(b) Use of Google Analytics: This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The tool enables us to analyse your user interactions on our website and in apps and to use the statistics and reports obtained to improve our services and make them more interesting for you as a user.

Interactions between our website’s users and our website are normally recorded using cookies, device/browser data, IP addresses and website or app activities. Google Analytics also records your anonymised IP addresses to ensure the security of the service and to provide information about the respective user’s region (so-called ‘IP location tracking’). With the anonymisation function (‘IP masking’), Google abbreviates IP addresses to the last octet within the EU/EEA.

Google acts as a processing contractor, with whom we have concluded a corresponding contract. As a rule, the information obtained concerning your use of this website and the anonymised IP addresses are transferred to a Google server in the USA and processed there. Google is subject to the EU-US Privacy Framework in such cases.

The legal basis for processing this information is your explicit consent (Art. 6 (1a) GDPR).

You may revoke your consent at any time without affecting the legality of processing conducted up to the point of withdrawal. The easiest way to withdraw your consent is through our Consent Manager or by installing the Google browser add-on: tools.google.com/dlpage/gaoptout.

You can find more details on the scope of services provided by Google Analytics at https://marketingplatform.google.com/about/analytics/terms/de/External link:. For more information on data processing when using Google Analytics, visit: https://support.google.com/analytics/answer/6004245?hl=de/External link:.

General information on data processing, which according to Google also applies to Google Analytics, is provided in Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy/External link:.

(c) Use of YouTube videos: 

We have integrated YouTube videos into our website which are stored on YouTube.com and can be viewed directly from our website. The videos are integrated in ‘extended data protection mode’, i.e. no data about you as a user is transferred to YouTube if you do not view the videos. Personal data, specified in § 5 (2), is only transmitted to YouTube should you play the videos. We have no influence on this data transfer. The legal basis for playing YouTube videos is Art. 6 (1a) GDPR, i.e. data sharing only takes place with your consent.

When a YouTube video is clicked, YouTube receives notification that you have accessed the corresponding subpage of our website, as well as the core data mentioned above, e.g. IP address and timestamp. This occurs regardless of whether the user is currently logged into a YouTube account or not. If you are logged into Google, your data is linked directly to your account. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. YouTube processes your data (even for users who are not logged in) as user profiles and uses them for market research purposes, customised advertising, website design and/or to inform other users of the social network about your activities on our website.

You have the right to object to having a user profile created by YouTube, whereby you must contact YouTube to exercise this right.

The collected information is processed on Google’s servers, some of which are located in the USA. In such cases, Google is obliged to comply with the EU-US Privacy Framework.

Please refer to Google’s privacy policy for further information on the purpose and scope of data collection and its processing by YouTube. There you will also find more details on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacyExternal link:.

§ 4 Use of “Zoom”

The German Commission for UNESCO uses the ‘Zoom’ software to conduct online meetings, video/telephone conferences and webinars (hereinafter referred to as ‘online meetings’). ‘Zoom’ is a service provided by Zoom Video Communications, Inc. based in the USA.

Zoom Video Communications is responsible for the technical implementation of Zoom meetings and the associated data processing procedures with respect to data protection. For more information about Zoom, contact: Zoom San Jose Headquarters, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA, phone: +1 (888) 799-9666 | email: info@zoom.us

1) Processing of personal data by the German Commission for UNESCO in connection with Zoom: When using Zoom, various types of data are processed by the German Commission for UNESCO. The scope of the processed data depends on what information the German Commission for UNESCO declares to be necessary for organising the individual ‘online meeting’ or what additional data you might voluntarily provide before or during participation in an ‘online meeting’. You will receive specific information on the data processing procedures before participating in the meeting. 

2) Processing of personal data in connection to recorded Zoom meetings: In some cases, our webinars are recorded as audio or video files. In such cases, we will inform you about the recording in the confirmation of participation and ask you to consent to the respective data processing procedures. You will receive further information on this together with your confirmation of participation.

§ 5 Social media (Facebook and YouTube)

(1) The German Commission for UNESCO maintains an online presence on the social media networks Facebook, YouTube, Threads, X, Instagram and Linkedin in order to communicate and share information with its users and other interested parties. Below you will find the contact details and links to the privacy policies of the respective providers:

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://policies.google.com/privacyExternal link:

Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy: https://www.facebook.com/privacy/policy/External link:

Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/controller_addendum?_rdrExternal link:

threads: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy: https://privacycenter.instagram.com/policyExternal link:

Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy: https://privacycenter.instagram.com/policyExternal link:

X: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Privacy policy: https://x.com/de/privacyExternal link:

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy policy: https://de.linkedin.com/legal/privacy-policyExternal link:

(2) We use the providers’ technical platforms and services to deliver these information services. We should note that you (as the user) assume full responsibility for how you engage with and use these social media platforms and their functions. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our channels, the providers of the respective social media platforms collect, among other things, your IP address and other information that is stored on your device in the form of cookies. This information is used to provide us, as the channel’s operator, with statistical information about your interaction with us.

(3) Your personal data is processed in this context by the platforms and may be transferred to countries outside the European Union, in particular the USA. The collected information is stored on the providers’ servers, including outside Europe. In such cases, the provider is subject to the provisions of the EU-US Privacy Framework or standard contractual clauses which may apply. We do not know how the social media platforms use the data collected during your visit to our channel, nor the purposes of interactions with our posts, nor how long this data is stored and or whether data is forwarded to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your terminal device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your terminal device can be used to track your movements on the network. Buttons integrated into websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to offer you customised content or advertising. If you wish to avoid this, you should log out or deactivate the ‘stay logged in’ function, delete the cookies on your device and restart your browser.

(4) As the provider of the information service, we only process data related to your use of our service which you have shared with us or requires interaction. If, for example, you ask a question that we can only answer by email, we will store your information in accordance with our general data processing principles, described in this data protection policy. The legal basis for the processing your data on social media platforms is Art. 6 (1f) GDPR.

(5) To exercise your rights as a data subject, you may contact us or the provider of the social media platform. If one party is not responsible for responding or requires additional information from the other party, we or the provider will forward your query to the respective partner. Please contact the operator of the social media platform directly for questions about profiling and the processing of your data when using the website.

If you have any questions about how your interactions are processed on our site, please contact us via the contact details provided above.

(6) The nature of the information the social media platform receives and how it is used is described in detail by the social media providers in their respective privacy policies (see links above). There you will also find information about contact options and the settings for customised advertisements. For more information on social networks and how you can protect your data, visit www.youngdata.deExternal link: (in German only).

§ 6 Newsletter

(1) You can subscribe to our newsletter and press mailing list to receive press releases and information about current issues and events and our volunteer programme. We offer newsletters with customised content for this purpose. The respective newsletter and the corresponding topics of interest are specified in the declaration of consent.

(2) We use a double opt-in procedure for newsletter subscriptions. This means that after you have registered, we send you an email to the email address you provided, in which you are asked to confirm that you are indeed the holder of the account and that you wish to receive newsletters. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of the double opt-in procedure is to enable us to verify your intention to subscribe and, if necessary, clarify possible misuse of your personal data.

(3) The only information which you must provide in order to receive the newsletter is your email address. Any additional information that you wish to provide is voluntary and allows us to address you personally. After confirming your wish to subscribe, we save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 (1a) GDPR.

(4) You may revoke your consent to receiving our newsletters, i.e. unsubscribe, at any time. You can indicate your wish to cancel your subscription either by clicking on the cancellation link included in every newsletter email, by sending an email to or contacting us via the contact details provided in the Legal Notice.

§ 7 Supplementary data protection statement for third parties whose personal data is processed in photo, audio and film recordings

We, the German Commission for UNESCO, maintain a register in accordance with the UNESCO Convention for the Safeguarding of the Intangible Cultural Heritage. For this purpose, the information submitted to us is made available to the public (via an online database at www.unesco.de/ike) and submitted to the UNESCO Secretariat in Paris at regular intervals in the form of national reports. The legal basis for processing these is Art. 6 (1f) and (1c), (2) GDPR in conjunction with Art. 12, 16 of the UNESCO Convention for the Safeguarding of the Intangible Cultural Heritage. Our legitimate interest in processing such personal data, in particular photo, audio and film recordings, is to increase public awareness of Germany’s intangible cultural heritage and to present it online. We receive personal data, in particular photo, audio and film recordings, from groups, communities and individuals who have applied for inclusion in the Federal Register of Intangible Cultural Heritage. Processing continues as long as the requirements for inclusion in the Intangible Cultural Heritage Register are met.

§ 8 Supplementary data protection statement for application procedures

(1) Purpose of processing 

We process your personal data exclusively for the following purposes:

  • processing applications
  • initiating and establishing employment relationships
  • contacting you should you submit an unsolicited application or be considered for an alternative position

(2) Scope of processing 

We process the following personal data in connection with your application:

  • last name, first name, title (if applicable)
  • date of birth
  • address
  • telephone number
  • email address
  • special requirements/skills
  • previous/current employers
  • other information contained in the application documents, e.g. letter of application, CV, references, certificates, proof of severe disability (if applicable) etc.
  • our assessments in the application procedure, in particular notes on the interview and the decision-making process

(3) Legal basis for data processing 

We collect and process your personal data in order to offer advertised positions and carry out the selection process. This is done in accordance with:

  • Art. 6 (1b) GDPR in conjunction with § 26 (1) BDSG (Federal Data Protection Act)
  • Art. 6 (1c) GDPR in conjunction with § 26 BDSG
  • Art. 6 (1f) GDPR, in conjunction with § 26 (1) sent. 2 BDSG (if applicable)
  • Art. 9 (2b) GDPR in conjunction with § 26 (3) BDSG, insofar as special categories of personal data are processed.

Furthermore, we process your personal data insofar as is necessary to defend ourselves against legal claims related to the application process. The legal basis for this is Art. 6 (1f) GDPR. Our legitimate interest is, e.g., meeting the burden of proof in proceedings under the General Equal Treatment Act (AGG).

If you have consented to having your application data stored for an extended period of time, the processing is carried out in accordance with Art. 6 (1a), or in the case of special categories of personal data, in accordance with Art. 9 (2a) GDPR.

(4) Recipients 

No personal data is shared or transferred to third parties.

(5) Duration of storage

We store your personal data for a period of six months. The period begins at the end of the application procedure, i.e. after a suitable applicant has been selected. The period is determined on the basis of our legitimate interest to defend ourselves against potential claims as described in § 15 (4) AGG, taking into account possible delays in the delivery of judicial pleadings.

If you have granted your consent to having your application data stored for a longer period time in accordance with Art. 6 (1a) GDPR, we will store your personal data for 12 months. You may revoke your consent at any time. The withdrawal of consent does not affect the legality of consent-based processing conducted prior to withdrawal.

§ 9 Supplementary data protection policy for events

(1) Purpose and scope of processing

We use your contact details (including first name, last name, email, organisation) for administrative purposes related to sending invitations to our events.

Our press and PR activities include making photo, audio and film recordings of these events. The recordings may be published in our print media, on our website at www.unesco.deExternal link: and on the following social media channels:

We process these photo, audio and film recordings for as long as we maintain and operate the above-mentioned social media channels and our website. We regularly check whether it is necessary to delete photo, audio and film recordings. This particularly applies to recordings that are no longer required for press and PR activities on account of having taken place too far in the past.

(2) Legal basis for data processing

The legal basis for data processing associated with photo, audio and film recordings is Art. 6 (1f) GDPR and § 23 KUG (Art Copyright Act). Our legitimate interest lies in conducting press and PR activities.

The legal basis for the processing of your registration data is Art. 6 (1f) GDPR. Our legitimate interest lies in organising the respective event.

(3) Recipients / Forwarding of data

The respective websites mentioned above in (1) are freely accessible on the Internet and can therefore be accessed worldwide. It should be noted that the subpages, including any photo, audio and video recordings, can be found via search engines. The providers of the (social media) platforms may process and use data posted on the platforms for their own purposes. This data processing does not take place within the scope of our responsibility.

(4) Your additional rights

You may speak directly to the persons taking photos or filming at any time and declare that you do not wish to be recorded. You may also contact us at any time after the event at presse[at]unesco.de and object to having photo, audio or film recordings of your person processed due to your particular situation. In all other respects, the rights of data subjects mentioned under § 9 apply.