Privacy
The German privacy policy is the legally binding version.
In short
parteiprogramm.com uses no analytics tools, no tracking, no advertising and no social media plugins. The site loads its fonts from its own address, not from Google Fonts or other providers. We process personal data when you visit the site and when you write to us. The site runs on Cloudflare. Messages to us go to a mailbox at Google.
Controller
The controller for data processing on this site is:
Michael Pomogajko
c/o Online-Impressum #1056
Europaring 90
53757 Sankt Augustin
Germany
Email: kontakt@parteiprogramm.com
In this policy, "we" means the controller.
Visiting the site
The site runs on Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare Workers delivers the pages, images and scripts. The content of the programs is stored in Cloudflare's D1 database and R2 file storage. Neither contains any data about visitors.
When you open a page, Cloudflare processes your IP address, the time, the requested address and the details your browser sends along, for example browser, operating system and preferred language. From the IP address, Cloudflare derives your approximate location (country, region, city) and your network provider.
For every request, the site writes logs to Cloudflare's observability service (Workers Logs and Traces). They contain, among other things, the requested address, the time, the site's response, browser, operating system, preferred language and approximate location, and for errors also the error message. Cloudflare deletes these logs after seven days at the latest.
We process this data to deliver the site, find errors and fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to offer the site securely and without errors.
Cloudflare processes this data on our behalf. The basis is Cloudflare's data processing addendum under Art. 28 GDPR, which is part of our contract with Cloudflare. More details are in Cloudflare's privacy policy.
Search
When you use the search, your search word is part of the page's address, for example /en/suche?q=pension. It is therefore part of the data that arises when a page is requested, and it stays in Cloudflare's logs for up to seven days. The site does not store search words beyond that, does not analyse them and does not link them to any profile. A search word can show which political topic you are interested in. Purpose and legal basis are the same as for requesting a page.
Messages through the forms
On the topic pages, every program point has a "Report an error" button. On the contact page you can write to us. The two forms send this data:
- "Report an error": your message and, if you provide it, your email address. The site adds the program, the point, the address of the page and the language of the page.
- Contact: your message, your email address and, if you provide it, your name. The site adds the language of the page.
In the contact form we need your email address to reply to you. Without it, the form cannot be sent. For "Report an error", the email address is optional.
The site first checks with Cloudflare Turnstile whether the message comes from a person. It then sends the message as an email through Cloudflare Email Service to our mailbox. The site itself does not store the message. Cloudflare keeps a sending log with the sender, recipient and subject of each email for 31 days. These details contain no data about you.
Our mailbox is hosted by Google (Gmail). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process the emails on servers in the USA. More details are in Google's privacy policy.
There is no data processing agreement with Google. Google provides the mailbox as a controller in its own right.
We process this data to correct errors and answer requests. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to keep the content accurate and to reply to you. If your request is aimed at a contract with us, the legal basis is Art. 6 (1) (b) GDPR.
We delete the email at the latest six months after your request has been dealt with. If a message concerns a legal dispute, we keep it until the dispute is settled and no claims can arise from it any more (Art. 17(3)(e) GDPR).
Email to kontakt@parteiprogramm.com
When you write to kontakt@parteiprogramm.com, Cloudflare Email Routing receives the email and forwards it to our mailbox at Google. We then process your email address, your name if it appears in the email, the content and the time. Cloudflare keeps a log with the sender, recipient and subject of each forwarded email for 31 days. Purpose, legal basis and storage period are the same as for the forms.
Spam protection with Cloudflare Turnstile
Both forms use Cloudflare Turnstile. Turnstile checks whether a person is using the form and keeps out automated submissions. The site loads Turnstile only once you use a form, that is, when you click or type into a field. Before that, Turnstile makes no connection to Cloudflare. Turnstile runs in an embedded frame from challenges.cloudflare.com.
According to Cloudflare, Turnstile processes signals such as your IP address, the TLS fingerprint of your browser, the browser identifier (user agent) and the address of our site. When you send a form, our server has Cloudflare confirm the result of the check and passes on your IP address in doing so.
In our check on 28 September 2026, Turnstile set no cookies. The Turnstile frame created an entry cf.turnstile.u for challenges.cloudflare.com in your browser's local storage. Cloudflare states no lifetime for this entry. Entries in local storage do not expire on their own. The entry therefore stays until Turnstile or you delete it.
Cloudflare processes the signals on our behalf to protect our forms. Cloudflare also uses the signals as a controller in its own right to improve its bot detection. Cloudflare's Turnstile privacy notice applies to that use.
The legal basis for our processing is Art. 6 (1) (f) GDPR. Our legitimate interest is to protect the forms from spam and abuse. We base the entry in local storage on § 25 (2) no. 2 TDDDG, because the check is strictly necessary to provide the form you want to use.
Storage on your device
The site itself creates only these entries on your device. None of them contains an identifier that tells you apart from other visitors.
- Simple language, local storage
pp-reading. The entry is created only when you switch "Simple language" on or off, and containssimpleornormal. It stays until you delete it in your browser and does not leave your device. - Scroll position, session storage
tsr-scroll-restoration-v1_3. The entry remembers how far you scrolled on the pages in this tab, so that "Back" returns you to the same place. Your browser deletes it when you close the tab. It does not leave your device. - Preview access, cookie
pp_zugang. The site sets this cookie only while it runs as a closed preview, and only after you have entered the access code or opened a link with the code. All admitted visitors get the same value. Scripts on the site cannot read the cookie (HttpOnly). It expires after 30 days.
These entries are strictly necessary for the site to provide the functions you use. No consent is needed for them (§ 25 (2) no. 2 TDDDG). Where personal data is involved, the legal basis is Art. 6 (1) (f) GDPR. The section on Turnstile describes Turnstile's entry. You can delete cookies and stored entries in your browser at any time.
Links to other providers
The site links to websites and programs of the parties. It does not embed any content from these sites. Only when you click a link does your browser connect to the other provider. In doing so it transmits, among other things, your IP address and the fact that you come from parteiprogramm.com. The other provider is responsible for this processing, and its privacy policy applies.
Transfers to the USA
Cloudflare, Inc. and Google LLC have their registered offices in the USA. Both are certified under the EU-U.S. Data Privacy Framework, as the list of certified companies shows. Transfers to these companies are covered by the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). If Cloudflare's certification lapses, the EU standard contractual clauses contained in Cloudflare's data processing addendum apply (Art. 46 (2) (c) GDPR).
Your rights
Under the GDPR you have these rights:
- Access to your data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
To exercise a right, write to kontakt@parteiprogramm.com.
Right to object
Where we process your data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 (1) GDPR). We then stop processing the data. This does not apply if we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
Complaint to a supervisory authority
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state where you live or work or where the alleged infringement took place. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
datenschutz-berlin.de
Its name in English is Berlin Commissioner for Data Protection and Freedom of Information.
No automated decisions
We make no decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Turnstile decides automatically whether a form can be sent. If the check fails, you can still reach us by email at kontakt@parteiprogramm.com.
Last updated: 4 October 2026