Privacy Policy for the “successor project of the Attribution Generator” by Wikimedia Deutschland e. V.

The following information provides a simple overview of when and how Wikimedia Deutschland e. V. processes personal data of participants in the “Give us input” survey and members of the user testing list regarding the further development of the successor project of the Attribution Generator.

If, in addition to what is described below, personal data is collected, used or disclosed by us, this will only be done after a separate explicit notice and, if necessary, a separate consent.

Information on the responsible party and contact options of the data privacy officer

The responsible party for data processing on this website is:

Wikimedia Deutschland – 
Association for the promotion of Free Knowledge e. V.
Tempelhofer Ufer 23-24
10963 Berlin

Phone: +49 (0) 30-21915826-0

You can contact our statutory data privacy officer via:

We have appointed a data privacy officer for our company.
Thorsten Feldmann, LL.M.
JBB Rechtsanwälte Jaschinski Biere Brexl Partnerschaft mbB
Christinenstr. 18/19
10119 Berlin

Phone: +49 30443765 0

How, for what purposes and for how long we process personal data and on what legal basis this is done

Participation in the “Give us input” survey

For the survey function on this page, in addition to your responses, information on the time of submission of your responses, as well as the following personal data will be stored:

All answers are optional and we do not collect your name, address or e-mail address. Nevertheless, in individual cases your identity could be revealed from the content of the answers. However, even in these cases, Wikimedia will not undertake any activities to assign data records to individual persons.

Storage period of the survey data

We store and internally evaluate the datasets received via the “Give input” survey.

Legal basis

The basis for the data processing is Art. 6 para. 1 lit. a DSGVO, which permits the processing of data to protect the legitimate interests of the controller.

Registration for the user testing list “Successor project of the Attribution Generator” and feedback

When registering for the user testing list “successor project of the Attribution Generator”, we process the following personal data that you provide to us when filling out the registration form:

We process the aforementioned personal data so that you can participate in the user testing list “successor project of the Attribution Generator” and we can provide you with the corresponding functionalities. The legal basis for this is Art. 6 para. 1 lit. b) GDPR.

The members of the user testing list “successor project of the Attribution Generator” can provide us with their feedback on our offers and services, which we will then use to improve the respective functions. We therefore also use the aforementioned data, especially your e-mail address, in particular to invite you to user tests and other actions where you can give us feedback, or to contact you about other topics and questions related to your registration. Improving the features and inviting you to user tests and other actions where we solicit your feedback, as well as the subsequent processing and consideration of the feedback itself and the communication with you related to your registration and feedback, are in our legitimate interest. The legal basis for these processing operations in each case is Art. 6 (1) lit. f) GDPR.

This data remains stored for the duration of your membership in the user testing list “successor project of the Attribution Generator” and will be deleted immediately thereafter. You can terminate your membership in the user testing list “successor project of the Attribution Generator” at any time by sending us an email to with the subject “Unsubscribe”. Your personal data will then be deleted.

If you wish, we can conduct interviews with you by arrangement, in which you can describe your experiences with our offers and services. These interviews will be conducted online in the technical manner we agreed upon in the preliminary correspondence (e.g., via Big Blue Button, Google Hangouts, etc.). The use of the interviews for improvement and optimization purposes constitutes the legitimate interest in the data processing taking place for these purposes. The legal basis is therefore Art. 6 para. 1 lit. f) GDPR. In this context, we may take written notes, which we anonymize after a period of one month.

If you have expressly consented beforehand, we also record the interview. Subsequently, a transcription is made within four weeks. The recording itself is deleted immediately after transcription and all personal references are removed from the transcription. If we would like to keep the recording longer, we will coordinate this with you in advance on a case-by-case basis. The legal basis for the creation and processing of the video files is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the documentation and archiving of the interviews.

Your browser automatically transmits some technical data to us. These are for example

browser type and browser version

Operating system used

referrer URL

Host name of the accessing computer

Time of the server request

IP address

We process this data so that you can connect to our services/Some of the data is collected to ensure an error-free use of the site. Storage in log files does not take place. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

If you contact us outside the processing described under I., this is also usually done by e-mail. We then process your e-mail address, your name if applicable, and all other personal data provided by you as part of the message for the purpose of responding to your inquiry. This purpose also represents our legitimate interest in data processing, which is why the legal basis for the processing is Art. 6 (1) lit. f) GDPR. We store your request for as long as it is necessary to answer it and delete it afterwards.

Recipients and transfer to third countries

The data stored by you will be processed by us and by our external service providers, who in turn have been contractually obligated by us to protect your data. Your data will not be passed on to other recipients.

Exceptions may apply,

A transfer to third countries does not take place in principle. However, we use the G Suite service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) for our work processes. In the process, data may also be transferred from Google to its parent company, Google LLC Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. An adequate level of data protection is ensured by the standard contractual clauses.

As a tool to facilitate the scheduling of appointments with members of the user testing list “successor project of the Attribution Generator”, we optionally use the platform of the provider Calendly LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA (

An adequate level of data protection is ensured by the standard contractual clauses.

Your rights to information, correction, deletion, restriction, data portability and complaint to a supervisory authority

The General Data Protection Regulation guarantees you certain rights that you can assert against us – insofar as the legal requirements are met.

Art. 15 GDPR – Data subject’s right of access: You have the right at any time and without charge to receive information about the origin, recipient, and intended use of your stored personal data. 

Art. 16 GDPR – Right to rectification: You have the right to demand that we correct any inaccurate personal data relating to you without undue delay. In this context, you also have the right to request the completion of incomplete personal data – also by means of providing a supplementary statement – taking into account the purposes of the processing.

Art. 17 GDPR – Right to erasure (‘right to be forgotten’): You have the right to demand that we delete your stored personal data without delay.

Art. 18 GDPR – Right to restriction of processing: You have the right to demand that we restrict processing.

Art. 20 GDPR – Right to data portability: You have the right to have the data we process, either automatically on the basis of your consent or in fulfilment of a contract, issued to you or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done if it is technically feasible.

Art. 77 GDPR in conjunction with Section 19 BDSG – Right to issue an appeal to the competent supervisory authority: In the event of any violation of data-privacy law, you have the right to issue an appeal to the competent supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement. 

Right to object and revocation of the consent for data processing

Art. 21 GDPR – Right to object: You have the right to object at any time on grounds relating to your particular situation, to the processing of your personal data which is necessary for legitimate interests on our part or for the performance of a task carried out in the public interest, or which takes place in the exercise of official authority, by contacting us in one of the above-mentioned ways, e.g. by e-mail to

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your

interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Art. 7 GDPR – Revocation of the consent for data processing
Many data-processing operations are only possible with your express consent. You can revoke your previously given consent at any time. For this purpose, you can simply click on the link included in each mail and unsubscribe from the e-mail service, make the appropriate setting in your user account or send a message to If you inform us in this message that you do not wish to receive e-mails in the future, we will no longer send messages to the e-mail address you have provided. The legality of the data processing up to the time of the revocation remains unaffected by the revocation.

Obligation to provide data

Under no circumstances are you legally or contractually obliged to provide us with personal data. However, without its provision as part of our services, we cannot provide you with the functionality described.

Automated decision-making 

We do not make use of automated decision-making, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR.


If you have any questions about our privacy policy, please feel free to contact us via

In addition, the privacy policy of Wikimedia Deutschland applies.