data protection and privacy

Data Protection and Privacy Thank you for visiting our website and taking data protection and privacy as seriously as we do. Data and technology issues are one of CIJ’s main focus areas. We aim to foster public debate on and contribute ideas for protecting online security, digital rights and privacy through better policymaking. While we encourage you to check out our work in this area, this page provides information on our digital presence and how it abides by both the German Federal Data Protection Act and the European General Data Protection Regulation (GDPR).

In presenting our data protection policy, we want to be as clear as possible. It should not be a chore to understand how your data is used and what your rights are. To help you do so, the following sections detail the different ways in which we collect, use and handle your data. Each section also points to the respective privacy policies of services we use.

In legal terms, CIJ is the ‘legal data controller’ of any information you share with us. At any time, you have the right to ask us what data we have collected on you as well as to request that we update or delete this data. If you would like to get in touch with us on these issues, please send a message to

CIJ Website and Cookies We presently use Google Analytics to help us determine how visitors use our website. When you visit our website and its different pages, Google Analytics collects certain information about you. Examples are the date and time of your visit, the pages you looked at, and the IP address of the device on which you visited CIJ’s website. We only use this data in anonymized form to make sure our website is functioning correctly, to determine usage patterns and to improve our online presence (in legal terms, our ‘legitimate interest’). We do not share this information with anyone else.

Google Analytics does not combine your IP address or any other collected information with any personally identifiable information. To make this work, Google Analytics saves a “cookie” – a small text document – on your computer. You can prevent Google Analytics from recognizing you when you return to our site by disabling cookies in your browser options. For more information, please see Google’s privacy policy.

CIJ Newsletter If you sign up to our newsletter and thus provide your explicit consent to receive information from CIJ, you get an email from us about once every two months. The CIJ newsletter highlights ongoing and upcoming activities, publications, announcements, policy papers and more. To receive our newsletter, we need at least your e-mail address. (We also ask for your first and last name, but these are not required fields.) We use an opt-in process to manage our newsletter subscriptions, which means that we only send you our newsletter if you explicitly allow us to. We save this data and use it only for the purpose of sending you our newsletter. We do not share your personal data with anyone else and you have the right to withdraw your consent at any time. Just click the “unsubscribe” link included at the very bottom of each newsletter, or contact us at

To manage our contacts and distribute our newsletter, we use MailChimp. This service is compliant with the European and German data protection regulations. For more information on Mailchimp’s privacy policy, please visit the MailChimp website.

We last updated this data protection policy in May 2018.