This website at www.unpacampaign.org is operated by Democracy Without Borders e.V., Pariser Platz 6, 10117 Berlin, Germany (“DWB”, “we”, “us” or “our”). The website supports the Campaign for a United Nations Parliamentary Assembly (“UNPA Campaign”), an initiative of DWB.
We process personal data in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (“GDPR”). “Personal data” means any information relating to an identified or identifiable natural person, such as a name, email address, country or IP address.
If you have questions about this privacy policy or the processing of your personal data, find our email here.
1. For what purposes, for how long and on what legal basis do we process personal data?
We process personal data in particular when this website is used, when endorsements are submitted, when you contact us, when you subscribe to a newsletter and when you make a donation.
1.1. Use of the website
When you visit the website, technical usage data may be processed to help keep the website available and secure. This may include browser type, browser version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. We process this usage data on the basis of our legitimate interest in providing a functional and secure website (Art. 6 para. 1 lit. f GDPR).
Usage data is deleted when it is no longer required for the operation or security of the website, unless we need to retain it for the assertion or defence of legal claims or to comply with legal obligations.
The website is based on a self-hosted website and content management infrastructure. Comments are disabled and no public user accounts exist or are intended.
1.2. Endorsements by individuals
If you submit an individual endorsement via an online form or otherwise, we process the data provided in the endorsement form or otherwise. Depending on the form or communication used, this may include in particular first name and last name; email address; country; and any further information you provide; as well as technical and administrative workflow data needed to receive, verify, review, publish, update or delete endorsements and related data, prevent misuse, maintain security, document consent and troubleshoot delivery or confirmation issues. This may include timestamps, confirmation status, confirmation tokens or links, IP-derived security information, delivery and error logs, internal status fields and similar technical records.
Your endorsement becomes active only after email confirmation (double opt-in). Before confirmation, the submission is stored temporarily so that the confirmation workflow can be completed. Temporary, unconfirmed submissions are cleaned up periodically.
After confirmation, your name and country may be published on this and other websites and in other materials as part of the public endorsement list. If you provide optional public-facing information that is clearly marked in the form as intended for publication, this may also be published. Your email address and internal workflow information are not for publication.
We process individual endorsement data on the basis of your express consent (Art. 6 para. 1 lit. a GDPR). To the extent endorsement data reveals political opinions or ideological beliefs within the meaning of Art. 9 para. 1 GDPR, we process it on the basis of your explicit consent (Art. 9 para. 2 lit. a GDPR). We process technical and administrative workflow data on the basis of our legitimate interest in verifying submissions, preventing misuse, administering the endorsement list and documenting the confirmation process (Art. 6 para. 1 lit. f GDPR).
You may withdraw your consent at any time with effect for the future by contacting us. If you ask us to remove your endorsement, we will delete it and relevant date from websites, lists, databases and documents under our control, unless continued retention is legally required or necessary for legal claims.
Please note that data once published on the internet with your consent may have been copied, archived, indexed or republished by third parties. We cannot remove such third-party copies. Removing data published and stored by such third parties is the sole responsibility of those third parties.
Confirmed endorsement data intended for publication may remain published for the duration of the campaign and, where appropriate, as part of the campaign’s public record, unless you withdraw your consent. Internal workflow data is retained only as long as needed for campaign administration, follow-up, documentation, legal obligations or legal claims.
1.3. Endorsements by organizations
If you submit an endorsement via an online form or otherwise on behalf of an organization, we process the data provided in the endorsement form or otherwise. Depending on the form used, this may include in particular: organization name; name and email address of the contact person; country or scope of the organization; website, if provided; and any further information you provide in the relevant form; as well as technical and administrative workflow data needed to receive, verify, review, publish, update or delete endorsements and related data, prevent misuse, maintain security, document consent and troubleshoot delivery or confirmation issues. This may include timestamps, confirmation status, confirmation tokens or links, IP-derived security information, delivery and error logs, internal status fields and similar technical records.
The organization form requires you to confirm that you are authorized to submit the endorsement and related data for the organization. After submission, the contact email receives a confirmation link (double opt-in). After confirmation, the campaign team reviews the submission and may follow up with the contact person and/or public representatives of the organization to verify the authorization and the submitted data.
After confirmation and review, the organization name, country or scope, website and description may be published on the website and in other campaign materials as part of the public endorsement list. The contact person’s name, email address and internal workflow information are not for publication.
We process organization endorsement data for the endorsement workflow, administrative follow-up and review. Where personal data is involved, the legal bases are consent where the submitter gives it (Art. 6 para. 1 lit. a GDPR), our legitimate interest in administering and verifying organization endorsements (Art. 6 para. 1 lit. f GDPR), and, where applicable, steps taken at the request of the submitter or organization before entering into a cooperation or similar arrangement (Art. 6 para. 1 lit. b GDPR). To the extent an endorsement reveals political opinions or ideological beliefs of a natural person, we rely on explicit consent (Art. 9 para. 2 lit. a GDPR).
You may contact us at any time to correct, update or withdraw an organization endorsement submitted by you or your organization. We will remove or update the endorsement data under our control where legally required or appropriate. As with individual endorsements, data once published may continue to appear in third-party copies, archives or search engines outside our control. Removing data published and stored by such third parties is the sole responsibility of those third parties.
1.4. Newsletter
If you opt in to receive an email newsletter, we process newsletter data for the purpose of sending relevant email updates. Newsletter data may include email address, first name, last name, country, tags or source information and technical double opt-in records.
Newsletter subscriptions are handled through an external newsletter and email delivery service provider. When you select the newsletter option in an online form, relevant data is transmitted to that provider and a separate confirmation email is sent. You will receive the newsletter only after completing the newsletter double opt-in process. This newsletter opt-in is separate from the endorsement confirmation. The provider used for newsletter management may change over time. When a change is made, relevant data is shifted to a new provider.
We may keep technical logs relating to the newsletter workflow, including the context of the request, response status, result, timestamp, hashed email address and sanitized response messages. These logs may be used temporarily for administration, troubleshooting and deliverability monitoring.
We process newsletter data on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw your consent at any time with effect for the future by using the unsubscribe link in the newsletter or by contacting us via the email that is subscribed to the newsletter.
Newsletter data is processed until you unsubscribe or withdraw your consent. Beyond that, limited data may be retained where necessary for legal claims, legal obligations, suppression lists or documentation of consent and withdrawal.
1.5. Personal enquiries and follow-up
When you contact us by email, online form, phone or another channel, or when we follow up with you in connection with an endorsement, we process the information you provide. This may include name, email address, phone number, organization, country, subject, message content and related correspondence.
We process this communication data to respond to your enquiry and handle the relevant matter (Art. 6 para. 1 lit. b GDPR where the communication relates to a request or potential cooperation; Art. 6 para. 1 lit. f GDPR based on our legitimate interest in handling communications and administering the campaign). Where your request concerns rights under data protection law, we process the data to comply with legal obligations (Art. 6 para. 1 lit. c GDPR).
We retain communication data until the enquiry or follow-up is completed and for a reasonable period thereafter, unless longer retention is necessary for legal obligations, documentation or legal claims.
1.6. Donations
If you make a donation through the website, the donation will be processed through an external donation platform and payment service providers. Depending on the payment method and donation form, donation data may include amount, currency, time and purpose of the donation, name, email address, address, country, payment-related information and any other information you provide in the donation form.
When you use a donation form, the data entered in the form is transmitted to the relevant provider for donation and payment processing. Payment data entered into such services is processed by the relevant donation platform or payment service provider. Their terms and privacy policies apply to their processing. We may receive donation confirmations and donor information needed to administer donations, issue confirmations or receipts where applicable, maintain records and communicate with donors. The providers used for donation and payment processing may change over time.
We process donation data to process the donation and, where applicable, issue donation confirmations or receipts (Art. 6 para. 1 lit. b GDPR). We also process donation data to comply with legal record-keeping obligations (Art. 6 para. 1 lit. c GDPR) and, where relevant, on the basis of our legitimate interest in donor administration and communication (Art. 6 para. 1 lit. f GDPR). If you consent to receive newsletters or other communications in connection with a donation, that processing is based on consent (Art. 6 para. 1 lit. a GDPR).
Donation data is retained as long as necessary for donation processing, receipts, accounting, legal record-keeping obligations and legal claims.
1.7. Cookies and embedded content
We currently use only technically necessary cookies and similar technologies required to provide, secure and administer the website. We do not use non-essential analytics, advertising or tracking cookies unless this privacy policy and, where required, our consent mechanism are updated.
The website may embed content or services from third parties, for example donation forms, newsletter services, security tools, videos, maps or social media content. When you interact with embedded third-party content, the relevant provider may process personal data under its own responsibility. Please review the privacy information of the relevant provider.
You can usually control cookies through your browser settings. If we introduce non-essential cookies or similar technologies that require consent, we will provide an appropriate consent mechanism.
2. To whom do we transfer personal data?
We disclose personal data only where necessary for the purposes described in this privacy policy, where we have a legal basis, or where we are legally required to do so.
2.1. Service providers
We work with service providers who help us operate the website and campaign infrastructure. These may include hosting providers, content management and plugin service providers, email delivery services, newsletter management providers, donation platforms, payment service providers, security and maintenance providers, and administrative or technical support providers. These providers may change over time.
Where required by law, we conclude data processing agreements or other suitable data protection arrangements with processors or other recipients. Service providers may process personal data only for the agreed purposes and subject to appropriate confidentiality and data protection obligations.
2.2. Partners and associates
Where appropriate for campaign administration, follow-up or public advocacy, we may share data intended for publication, such as names and countries of confirmed individual endorsers or organization endorsement details, with campaign partners, public bodies, decision-makers or in campaign materials. We do not share email addresses or internal contact data with third parties.
If follow-up is better handled by a relevant DWB chapter, campaign partner or carefully selected associate, we may share communication or endorsement contact data to the extent necessary and legally permitted. We require such recipients to sign appropriate data protection agreements before receiving personal data. These agreements require them to treat the data confidentially, use it only for the agreed purpose, implement appropriate safeguards and comply with applicable data protection obligations. Where consent is required, we will ask for it.
2.3. Legal obligations and law enforcement
We may disclose personal data if required by law, by a court or authority, or where necessary to investigate or prevent suspected misuse, protect our rights, or assert or defend legal claims.
2.4. Transfers outside the EU/EEA
Some recipients or service providers may be located outside the European Union or European Economic Area. Where personal data is transferred to a country without an adequacy decision by the European Commission, we use appropriate safeguards where required, such as EU standard contractual clauses, or rely on another legal transfer mechanism provided by the GDPR.
3. What are your rights?
Subject to the legal requirements, you have the following rights regarding personal data relating to you:
- the right to obtain information about the processing of your personal data;
- the right to access your personal data;
- the right to rectify inaccurate or incomplete personal data;
- the right to deletion;
- the right to restrict processing;
- the right to data portability;
- the right to object to processing based on legitimate interests;
- the right to withdraw consent at any time with effect for the future;
- the right to object at any time to processing for direct marketing;
- the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact us via email here. For clear identification and to prevent unauthorized changes or deletion requests, we may ask you to provide information needed to verify the request.
4. Is there automated decision-making?
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
5. Changes to this privacy policy
We may update this privacy policy when conditions and legal requirements change.
Last update: 6 May 2026