The World Talks Privacy Policy

PRIVACY POLICY FOR THE WORLD TALKS

Good Conversations gGmbH (“GC” or “we/us”) has launched the project THE WORLD TALKS (“TWT”). TWT is solely organized by GC, the reporting of the event may also be provided by or together with various media partners. If you have reached the age of 18, you have the opportunity to participate in TWT either on the websites of GC directly or via a questions-embed integrated on the websites of our media partners or another third party website. If you participate in the project via a media partner or another third party website, the data collection is carried out directly by and under the responsibility of GC.

In the following, we inform you in detail about who is responsible for Data Processing, the data collected in the context of participation, and within the software used for this purpose and how long these data are stored. Subsequently, we will inform you in detail about your rights regarding data processing and how you can assert these rights.

 

1. Responsibility for Data Processing

Responsible for any data processing is

Good Conversations gGmbH

represented by the managing directors Christian Roepke und Enrique Tarragona

Speersort 1 20095 Hamburg, Germany

Telephone: 040 / 32 80 - 0

Email: support@mycountrytalks.org

Our Data Protection Officer can be contacted via dsb@zeit.de.

 

2. Media Partners

In the context of your participation in or the reporting about the project, these media partners (www.theworldtalks.org/about) can be involved. Personal data will only be shared with media partners with your consent. If you consent to this, we will share the data you provided during registration to the Media Partners for reporting or so that they can contact you directly in connection with the project (reporting purposes). This Consent is usually requested during registration. You may also give your consent to forward other personal data for reporting purposes, see below under 4. b).

The legal basis for the aforementioned data processing is your consent, Art. 6 (1) a), 9 (2) a) GDPR. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Participation in TWT is not conditioned on the foregoing consents.

GC is responsible for passing on the data to the media partners, and the respective media partner is responsible for their own subsequent processing.

Aggregated/anonymized data, from which no personal reference can be made, may be disclosed and processed without consent for the purposes set out in this privacy policy.


3. Data collected, purposes for which the personal data are to be processed and legal basis of the processing

a) Collected data, purposes, legal basis

aa) collected data

(1) Registration

To participate in this project, it is necessary that you answer various

·    yes-or-no-questions about your views on current topics

and provide the following personal data:

·    First and last name,·    gender,·    age,·    postal code,·    e-mail address,·    mobile phone number.

You are also asked to state if you prefer to receive messages and/or information on TWT by WhatsApp or SMS.

If you choose WhatsApp please be aware of the following:

The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from gaining access to the communication content. However, WhatsApp obtains access to metadata that arise in the course of the communication process (e.g. sender, recipient and time). We would also like to point out that WhatsApp, according to its own statement, shares such personal data of its users with its parent company Meta Platforms Inc. based in the USA. Further details on data processing can be found in WhatsApp's privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

We have set our WhatsApp accounts so that no automatic data matching with the address book on the smartphones in use takes place. To protect your data, we have concluded an order processing agreement with WhatsApp.

(2) After registration

After your registration you will be asked to confirm your participation by email. By clicking on the confirmation link contained in the respective message you confirm your participation. After confirming your participation, the answers you provide will be compared with those of other participants and you will then be matched with a discussion partner (your so-called “match”) whose answers are as different from yours as possible. 

Once you have confirmed your registration via e-mail, you will receive a push notification on your preferred messenger as indicated in the privacy policy in section (1) “Registration”.

Once you’ve been matched with your discussion partner, if you would confirm to meet him or her, you will be enabled by the software to send a note, which will be delivered via email. If your partner confirms to meet you, he or she will also be able to send you a note which will be delivered by the software via email. If you both confirm to meet each other, your email address will automatically be sent to your discussion partner.

You and your discussion partner can arrange to meet for a one-on-one conversation, either offline in a place you both choose or online (e.g. video conferencing). Please be aware that GC is not responsible for personal data collected, processed or storaged by the Plattform for video conferencing, you have chosen. Please note their respective privacy policy.


After your conversation, a questionnaire will be sent to you by email asking for your feedback on the project and the meeting with your discussion partner. It will also ask you to upload a selfie, video or screenshot of yourself and your discussion partner, which is fully optional.

bb) purposes and legal basis

The data requested is required in order to enable you to participate in the project. Data processing is based on Art. 6 (1) b) GDPR. Without answers to the questions about your views on current topics, we cannot assign you a match. Your contact details are necessary to provide you with the confirmation link and later with a match. We need your age to ensure that you are at least 18 years old. As part of the registration process, participants will also be asked to consent to the processing of specific data. Data processing is based on Art. 9 (2) a) GDPR insofar as these special categories of personal data are concerned.

You can revoke your consent to data processing and/or data transfer at any time, for example by sending an e-mail to support@mycountrytalks.org. If you revoke your consent to data processing and/or data transfer, you can no longer participate in the project.

Your first name, country, and your replies to the open questions will be sent to your discussion partner directly after matching. If you send a note, it will also be sent to your discussion partner. Only in the case that you and your match both confirm to meet will your last name and your email address be sent to your match for contact purposes. The disclosure of the data is necessary to fulfill your participation in the project and is based on Art. 6 (1) b) GDPR and, with regard to specific data on your consent in this regard and, to this extent, on Art. 9 (2) a) GDPR.


b) Software and service providers

(1)

The software used is operated by ZEIT Online GmbH, which uses other service providers for software development, hosting, e-mail and SMS dispatch.

ZEIT ONLINE GmbH and its service providers will act on behalf of GC and process your data only according to our instructions. The corresponding data processing is based on our legitimate interest resulting from the purposes and in this respect on Art. 6 (1) f) GDPR. For the security of your Data we settled a Data Processing Agreement with ZEIT ONLINE GmbH.

(2)

Messages on Whatsapp or SMS will be sent by Twilio, Twilio Ireland Limited, 25-28 North Wall Quay, Dublin 1, Ireland. Your mobile phone numbers will be forwarded to Twilio for this purpose. Unfortunately, we cannot guarantee that Twilio will not also transfer the data to its parent company, Twilio Inc. based in the USA. In this regard, the information on a transfer of personal data to third countries applies.

(3)

For the questionnaire in the feedback phase we use the service "Typeform". This service is provided by TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona ("Typeform"). Typeform states that your answers to the questions asked as part of the survey, will only be viewed by Typeform if there is a need to troubleshoot. Typeform states that it uses cookies, but only those that do not collect personal data. Cookie settings can be edited in the browser settings. Typeform has strict data protection guidelines, but partially handles the survey services to cloud providers with servers outside the EU. The transfer of data then takes place in accordance with Art. 46 GDPR using appropriate safeguards in the form of the standard contractual clauses for the transfer of personal data to processors in third countries:

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087. 


You can find more information about the processing of your data by Typeform in Typeform's privacy policy: https://admin.typeform.com/to/dwk6gt.


4. To the processing of the data collected for reporting

a) Personal Data 

With your consent, we may use your data which was submitted during the registration, matching and feedback phase, including photos or videos, for reporting on the project. The information can be published on our websites as well as on our social media profiles. The same applies to the websites or social media channels of ZEIT and ZEIT ONLINE.

If a photo is uploaded to the social media channels of us or ZEIT ONLINE, it will be forwarded to the following operators of the respective social network:

The social networks Facebook and Instagram are offered by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. It cannot be precluded that Facebook stores and processes the uploaded data independently. We have no control over the extent of the collection and further use of this data by Facebook. You can find information from the third party provider on data protection on the following Facebook website: https://www.facebook.com/about...

Unfortunately, we cannot guarantee that Facebook will not also transfer the data to its parent company, Facebook Inc.based in the USA. In this regard, the information on a transfer of personal data to third countries applies.

The Twitter network is offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02, AX07 Ireland. It cannot be precluded that Twit-ter stores and processes the uploaded data independently. We have no influence on the extent of the collection and further use of this data by Twitter. Information from the third party provider on data protection can be found on the following Twitter website: https://twitter.com/de/privacy

Unfortunately, we cannot guarantee that Twitter will not also transfer the data to its parent company, Twitter Inc. based in the USA. In this regard, the information on a transfer of personal data to third countries applies.

The legal basis for data processing is your consent to publication given with the up-load and thus Art. 6 (1) a), 9 (2) a) GDPR. You can revoke this consent at any time, e.g. by sending an email to support@mycountrytalks.org. We will store your data as long as we did not receive your withdrawal.

b) Reporting requests

With your explicit consent, we may share your data which was submitted during the registration, matching and feedback phase, including pictures and videos, with the media partners who are interested in reporting about the project. Consent is usually requested during the questionnaire in the feedback phase, but can also be declared and revoked later. The legal basis for data processing is your consent to publication given with the up-load and thus Art. 6 (1) a), 9 (2) a) GDPR. GC is responsible for passing on the data to the media partners, and the respective media partner is responsible for their own subsequent processing. If you provide personal data directly to a media partner or if the media partner collects personal data directly from you, the respective media partner is responsible for data processing from the beginning; its privacy policy then applies.

c) Reporting/PR

Media Partners are allowed to report on the project. Therefore we are allowed to forward aggregated/anonymized data, from which no personal reference can be made. As stated under b), personal data will only be shared with media partners with your consent.

 

5. Encryption

Unless otherwise described elsewhere, the following applies to encryption: The data is encrypted before it is written to the database and decrypted again when the application needs to read it. The application is able to decrypt the data, but it is never stored in human readable format in raw tables in the database.


6.  Period of storage

Unless otherwise stated above in this privacy policy, the following applies to storage:

Once the event has been completed, GC will retain your data for the duration of the feedback phase (three months) and a further six months thereafter in the event of follow-up questions. For the purpose of announcing and promoting future "My World Talks" or “My Country Talks” events, the participant name, age, gender, location of the meeting and feedback, including images, may be used and stored for up to three years if you have given your express consent to this before the data is collected. After that, the data will be retained until the expiry of the statute of limitations, in order to demonstrate that the data processing was justified within the scope of the project.



7. Your rights

You have the right to obtain information about and access to the stored personal data concerning you at any time. You also have the right to data portability, rectification or erasure and to restrict the processing of your data. You can also object to the processing of your data at any time. For this in detail:

a) Right of access

Under the conditions of Art. 15 GDPR you have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the purpose of the processing, the category of personal data being processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing, the right to lodge a complaint with a supervisory authority, and, if the personal data have not been collected from you, any available information as to their source.

b) Right to rectification

According to Art. 16 GDPR, you also have the right to immediately obtain the rectification of inaccurate personal data or have the right to have incomplete personal data completed.

c) Right to erasure (‘right to be forgotten’)

Under the conditions stated in Art. 17 GDPR you have the right to obtain the erasure of your personal data, unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

d) Right to restriction of processing

Under the conditions of Art. 18 GDPR, you have the right to obtain the restriction of the processing of your data.

e) Right to data portability

According to Art. 20 GDPR you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, as well as the right, provided that the requirements of Art. 20 GDPR are met, to transmit those to another responsible person. In this context, you have the right to have your personal data transferred directly to the other responsible parties.

f) Right to object

Pursuant to Art. 21 GDPR, if your personal data is processed on the basis on point (e) or (f) of Article 6 (1) GDPR, you have the right to object to the processing of your personal data on grounds relating to his or her particular situation.


g) Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to the competent supervisory authority.