Privacy Policy

We take the protection of your data seriously. This website is built to learn as little as possible about you: no tracking, no advertising, no analytics services, no fonts or content from third-party servers unless you click on them yourself. This page explains which data is processed anyway, for what purpose and for how long.

KE!N EINZELFALL e.V., Schiffbeker Höhe 30, 22119 Hamburg, Germany

Mobile: +49 (176) 622 08 645, email: kontakt@kein-einzelfall.de

Represented by the board: Tatjana Belmar and Franziska Künstler.

Our data protection officer: Tanja Häfner

Please send questions about data protection to datenschutz@kein-einzelfall.de. Our data protection officer reads this address too.

You have the right at any time

• to receive information about which data we store about you (Art. 15 GDPR),
• to have incorrect data corrected (Art. 16 GDPR),
• to have your data deleted (Art. 17 GDPR),
• to have the processing restricted (Art. 18 GDPR),
• to receive your data in a common format (Art. 20 GDPR),
• to object to processing based on our legitimate interest (Art. 21 GDPR),
• to withdraw consent you have given, with effect for the future (Art. 7(3) GDPR).

Just write to us at datenschutz@kein-einzelfall.de.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg.

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. We have concluded a data processing agreement with all-inkl (Art. 28 GDPR).

We have switched off access logs (log files) with IP addresses at all-inkl, as well as access statistics. When you visit the website, the server processes your IP address only to deliver the page to you and does not store it.

The legal basis is our legitimate interest in providing the website (Art. 6(1)(f) GDPR).

The connection to the website is encrypted (HTTPS). You can recognise this by the padlock symbol in your browser's address bar.

This website sets only two cookies. Both come from us and are technically necessary. We do not set third-party cookies, analytics cookies or advertising cookies. That is why there is no cookie banner.

• Session cookie (name ends in “-session”): links your page views into one session so that, for example, a form comes back with your text after a typo. We store the session encrypted and without IP address or browser identifier.
• XSRF-TOKEN: protects the forms against other websites submitting something in your name.

Neither cookie contains any information about you, and both expire after two hours without a page view.

The legal basis is Section 25(2) No. 2 TDDDG, because the cookies are strictly necessary to provide the website and its forms, and Art. 6(1)(f) GDPR.

You can delete or block cookies in your browser at any time. The forms can then no longer be submitted; everything else keeps working.

The website remembers some settings in your browser's storage (local storage, and session storage for the duration of a visit), and only on your device. These are not cookies: none of it is transmitted to us, and none of it contains an identifier by which we could recognise you. Only what you set or trigger yourself is stored:

• Display: font size, contrast, line spacing and the other settings of the display bar.
• Notice about distressing content: whether the notice appears when you open the page and whether you have switched it off.
• Warning for individual sections: for which sections (such as “Space for the unsaid”) you have already confirmed the warning during this visit. Forgotten when you close the browser.
• Donation notice: how many pages you have viewed, so that the notice only appears after a few pages, and until when it stays away after you dismiss it.
• Wall of Shame: how many sentences you have already read, so that you can continue there after reloading. Forgotten after 30 days without reading on.

The complete list is at the end of this page. There you can also reset each entry. You can also clear the storage in your browser settings.

The legal basis is Section 25(2) No. 2 TDDDG, because the storage is strictly necessary to provide functions you use, and Art. 6(1)(f) GDPR.

For some pages we count how often they have been viewed. Only the number is stored: no address, no time, no cookie, nothing in your browser. It reveals nothing about anyone.

If you send us an email, it is stored in our mailbox at all-inkl (see “Hosting and server log files”). We use your details only to reply to you and do not pass them on.

The legal basis is Art. 6(1)(b) GDPR if your message relates to a membership or one of our services, otherwise our legitimate interest in answering your message (Art. 6(1)(f) GDPR). If you write to us about your health or about violence you have experienced, we process this information because you share it with us explicitly (Art. 9(2)(a) GDPR). You can ask us to delete the emails at any time.

You can write to us using the form on the “Requests & Exchange” page. In doing so, you send us:

• subject and message,
• optionally your name and email address. Without an email address we cannot reply to you.

We store your message encrypted in our administration area. By email we only learn that a new message has arrived; the content is not sent by email. We do not store your IP address. To prevent mass submissions, the server keeps only a checksum of it for ten minutes. We do not pass your message on to third parties unless we are obliged to do so by law or by a court order.

The legal basis is your consent, which you give by ticking the box when submitting (Art. 6(1)(a) GDPR; for information about health or experienced violence, Art. 9(2)(a) GDPR). The checksum serves to protect against misuse (Art. 6(1)(f) GDPR).

How long: We automatically delete processed messages 90 days after processing is completed, and unprocessed messages no later than 365 days after receipt. The checksum expires after ten minutes.

Withdrawal: You can withdraw your consent at any time, for example by email to kontakt@kein-einzelfall.de. We will then delete your message. We cannot continue the conversation after that.

A complaint about our association that you send to the ombuds office using the form on the “Complaints procedure” page is not stored on the website. It goes directly to the ombuds office as an email. You decide which details you provide. You can also complain anonymously.

The legal basis is your consent when submitting (Art. 6(1)(a) GDPR; for information about health or experienced violence, Art. 9(2)(a) GDPR).

You can register for our self-help groups using the form on the page of the respective group. In doing so, you send us your email address and optionally a name; a first name or nickname is enough. We also store which group you registered for and when you agreed to the participation and confidentiality agreement, the group rules and the processing.

Registering for a self-help group can in itself reveal something about your health. We therefore process this information only with your explicit consent (Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR) and only to process your registration and send you access to the group.

We store your details encrypted in our administration area. By email we only learn that a registration has arrived, without your name and email address. You receive a confirmation and the access link to the group from us by email. Your data is not passed on to third parties.

How long: We automatically delete processed registrations 30 days after approval or rejection, and unprocessed ones no later than 90 days after receipt.

Withdrawal: You can withdraw your consent at any time, for example by email to selbsthilfe@kein-einzelfall.de. Your registration will then be deleted.

Our self-help groups, working groups and online events take place via Microsoft Teams. We use an account of the association for this (Microsoft 365). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement with Microsoft is in place (Art. 28 GDPR).

When you take part, Microsoft mainly processes: the name you enter when joining, picture and sound if you switch on your camera and microphone, messages in the chat, your IP address and information about your device and connection. You do not need your own Microsoft account. You do not have to give your real name, and camera and microphone can stay off. Just listening is fine too.

The legal basis is Art. 6(1)(b) GDPR (the meetings you want to take part in). Taking part in a self-help group can in itself reveal something about your health. We process this information on the basis of the consent you gave when registering (Art. 9(2)(a) GDPR).

Recordings: We never record the meetings of the self-help groups. We may record events and meetings of the working groups. We point this out before the start. Picture, sound and chat are recorded insofar as you switch them on. If you do not want to appear in the recording, leave camera and microphone off and choose a different name.

We use recordings to write minutes. Where appropriate, we show excerpts at later events. If you can be seen or heard in them, we ask you beforehand. The recording is kept in our Microsoft 365 account and is automatically deleted there after 90 days. Excerpts that we show with your consent are kept until you withdraw your consent or we no longer need them.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by taking part with camera or microphone switched on after the notice, and your separate consent for showing excerpts. You can withdraw it at any time. We will then remove your contributions from the recording as far as possible and no longer show excerpts with you.

Microsoft may also process data in the USA. Microsoft is certified under the EU-US Data Privacy Framework, for which the EU Commission has determined an adequate level of data protection (Art. 45 GDPR).

More information in Microsoft's privacy statement.

Bank transfer: Our bank details are on the donation page, together with a QR code for your banking app. No data is processed by us until your donation arrives in our account. We then process the details from the transfer to book the donation and, on request, to issue a donation receipt (Art. 6(1)(b) and (c) GDPR).

PayPal: The “Donate via PayPal” button is a simple link. Only when you click it does the page of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg open. PayPal is responsible for everything that happens there.

betterplace.org: On our donation pages you can display donation forms from betterplace.org. The provider is betterplace.org gGmbH, Schlesische Straße 26, 10997 Berlin, Germany. The forms are loaded only when you explicitly click to show them. Before that, your browser does not connect to betterplace.org. After the click, it loads the form directly from betterplace.org and transmits technically necessary data such as your IP address. betterplace.org may set its own cookies and is itself responsible for this processing.

The legal basis is your consent through the click (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). More information in the privacy policy of betterplace.org.

The website links to our profiles on Instagram, Facebook and TikTok and to other services, such as authorities and counselling centres. These are simple links. No content from these services is embedded in our pages, and no data flows to them unless you click the link.

The “Quick exit” button takes you to the Google homepage with one click. Only then does your browser connect to Google.

All fonts, images and scripts of this website are hosted on our own server. No connection to Google Fonts or other third-party servers is made when you visit.

We update this statement when the website or the legal situation changes. The version shown here applies.

Last updated: 30.10.2026