Privacy Policy for Users of the DGUV Website

This policy informs you about the protection of your personal data when using the website of the Deutsche Gesetzliche Unfallversicherung (DGUV) and when ordering informational materials. This privacy policy applies to www.dguv.de and all associated subdomains, unless they have their own privacy policy.

The German version of this Privacy Policy shall prevail in the event of any inconsistencies or discrepancies between the German and English versions.

We take the protection of your data very seriously. Personal data (hereinafter referred to as “data”) refers to information that can be associated with an individual, such as name, address, phone number, email address, or IP address.

We want you to know when we collect which data and for what purpose we use it. We have implemented technical and organizational measures to ensure compliance with data protection regulations.

In the spirit of transparent and fair handling of your data, we also consider this information necessary to provide you with a realistic understanding of our data processing procedures, which often take place invisibly in the background.

1. Data Controller

The entity responsible for processing your personal data is:

Deutsche Gesetzliche Unfallversicherung e.V.
Glinkastraße 40
10117 Berlin
Tel.: +49 30 13001-6130
Fax: +49 30 13001-6132
E-Mail: info@dguv.de

You can find our complete legal notice at the following link: Legal Notice

2. Data Protection Officers

The DGUV has appointed a data protection officer. You can contact our data protection officer at the mailing address listed above or by email at:

3. Ways to Contact Us

On our website, we provide you with various ways to get in touch with us. You can use our Infoline, fill out the contact form, send an email, or use the contact information listed in the legal notice to reach us.

To process your inquiry and respond to your request, we process your email address (e.g., when you use the contact form), your name, and your phone number if you contact us by phone.

The legal basis for processing your personal data in connection with your contact request is Article 6(1)(f) GDPR, based on our legitimate interest in responding to your inquiry. If your inquiry relates to the performance of a contract or pre-contractual measures, the processing is based on Article 6(1)(b) GDPR. 

We store your data until we have responded to your inquiry. Afterward, we delete your data when it is no longer necessary.

4. Newsletter

In our Media Center, we offer you the opportunity to subscribe to various newsletters from the DGUV and its institutes (DGUV Academy, IPA, and IFA).

To receive our newsletter, you must provide your email address. Additional information, such as your name or mailing address, is optional and is not required for newsletter delivery.

If you choose to subscribe to one or more of our newsletters, we will send an email to the email address you provided. In this message, we will ask you to confirm your subscription. This ensures that the owner of the email address actually completed the subscription (known as “double opt-in”). At the same time, you thereby give us your consent to process your email address for the purpose of receiving the newsletter. We log your subscription so that we can verify your consent.

The processing of your data is limited to sending you the respective issues of the newsletter. We do not analyze the information in the various fields or share it with third parties. We also do not send any promotional messages. The data is stored on servers in Germany.

The legal basis for sending our newsletters is your consent pursuant to Article 6(1)(a) GDPR. The legal basis for logging your registration is Article 6(1)(f) GDPR, as it is in our legitimate interest to be able to verify your consent.

We store your data for the purpose of sending the newsletter until you unsubscribe from the newsletter.

5. Contests

From time to time, we offer you the opportunity to participate in DGUV sweepstakes. To conduct these sweepstakes, we process the email address you provide to us as part of your participation. This information is required so that we can notify you if you win.

If you decide to participate in a sweepstakes, you consent to the processing of your email address for this purpose. The legal basis for your participation in the sweepstakes is your consent pursuant to Article 6(1)(a) GDPR.

The processing of your data is limited to the conduct of the respective sweepstakes. Your data will not be used or disclosed for any other purpose. Once the sweepstakes has concluded and any prizes have been shipped, your data will be deleted.

6. Publications Database and Orders

On the subdomain publikationen.dguv.de, we offer you the option to download publications free of charge through an online shop and to order printed copies for a fee.

No registration is required for free downloads. However, if you wish to order physical copies of our publications, you must create a user account. For more information about data protection see the privacy policy applicable to the publications database.

7. Registration and Communication Regarding Events

On our website, we provide you with options to register for events (information sessions, seminars, award ceremonies, etc. - in person or virtually). We use external service providers to handle registration for our events. When you click on the registration link, you will be redirected to the website of the respective service provider. Please refer to the privacy policy on that website for information regarding the processing of personal data there.

The legal basis for data processing is Article 6(1)(a) GDPR, based on your consent, or Article 6(1)(b) GDPR for the performance of a contract or pre-contractual measures.

We store your data only for as long as it is necessary for the organization and conduct of the event. Afterward, we delete your data.

The processing of your data is limited to the respective event. Beyond that, we do not analyze your data or transfer it to third parties. We do not send promotional messages, but only those related to the event. The data is stored on servers within the EU.

8. Processing of Image and Media Content

We process image and media material (e.g., photos, video footage, graphics, drawings) that may depict individuals as part of our press and public relations work, in the DGUV image database, for the creation of presentations, in connection with in-person and online events, and in our print and digital publications. This material is also published on the Internet and intranet, in blogs, and, where applicable, on our social media accounts.

The visual material is either created by us or lawfully acquired from third parties (e.g., photographers, agencies, or other licensors). To the extent that identifiable individuals are depicted in the visual material, processing is generally based on consent granted by the individuals depicted in accordance with Article 6(1)(a) GDPR.

In connection with the publication of images, copyright and source information (e.g., the name of the photographer or the licensor) is processed and published. This is done to comply with copyright requirements, in particular pursuant to Article 6(1)(c) GDPR in conjunction with Section 13 of the German Copyright Act (Urheberrechtsgesetz, UrhG), as well as — where applicable — on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR (in particular to protect against copyright infringements).

The recipients of the personal data are internal departments of the DGUV as well as technical service providers. To the extent that image material is published, the content is accessible to the public. In the case of publications on social media platforms, the respective platform operators are also recipients and bear their own responsibility under data protection law.

In addition, the general information contained in this privacy policy applies, in particular regarding responsibility, retention periods, and the rights of data subjects.

9. Social Media

On our website, you’ll find links to our profiles on social media networks and platforms such as Facebook, Instagram, YouTube, LinkedIn, and Xing. These are operated exclusively by the respective providers.

These accounts are intended to facilitate direct communication with customers, prospective customers, and users. If you contact us through our social media channels, we process the data you provide to us through those channels, as well as the data required to respond to your request (Article 6(1)(b) GDPR).

If you have given your consent to the operators of the respective social media platforms (e.g., by checking a box), processing is based on Article 6(1)(a) GDPR. You may revoke your consent at any time with future effect by contacting the operator of the respective platform.

Social media accounts are used for advertising and market research. When you visit our page or channel, the operators—as the data controllers—collect users’ personal data, for example through the use of cookies. Such data collection may also occur for visitors to this page or channel who are not logged in or registered on the relevant network. We cannot determine what user data the operators collect. Nor do we have full access to the collected data or your profile information. We can only view the public information on your profile. You decide exactly what this information is through your settings.

You can usually recognize the social media elements by their respective social media logos. To ensure data protection on this website, we use these elements only in conjunction with the so-called “Shariff” solution. This ensures that no automatic data processing takes place through the social networks.

The privacy policies of the respective networks apply to those networks. The most effective way to exercise your rights as a data subject or to submit requests for information is to contact the platform providers directly, as only they have access to your data and can take immediate action and provide information.

Personal data is stored and processed exclusively on the servers of the respective social networks. For more information on the retention period, please refer to the providers’ privacy policies:

Through the Page Controller Addendum, Facebook Ireland commits to complying with all obligations under the General Data Protection Regulation, including informing you about the processing of your personal data, responding to your inquiries regarding your rights as a data subject, ensuring the security of the processing, and notifying supervisory authorities or data subjects in the event of data breaches. If you exercise your rights as a data subject with respect to our Facebook fan page by contacting the DGUV, we are required to forward your message to Facebook within seven days. We therefore recommend that you contact Facebook Ireland directly.

10. Server Log Files

When you visit our website, we automatically collect data that is stored in what are known as server log files. Server log files are automatic log files generated by the web server that record visits to the website. The server log files store your IP address, the date and time of your visit, your browser and operating system, the referrer URL, and your Internet service provider (ISP).

The legal basis for this data processing is Article 6(1)(f) GDPR. Our legitimate interests are based on the capabilities that log files provide for maintaining and troubleshooting our IT systems. In addition, we store log files for a short period of time to be able to investigate any misuse of our website. Should such a case actually occur, we will store this data until it is no longer required for evidentiary purposes..

11. Use of Cookies and Similar Technologies

We use cookies and similar technologies (e.g. local storage, session storage and pixels) on our website. These are small text files or data fragments that are stored on your device. They are used to enable the provision and use of our website, to ensure its security and functionality and, where you have provided your consent, to facilitate statistical analyses or additional optional features.

Only technically necessary cookies are used on this website. For audience measurement purposes, we use the "etracker Analytics Cookie-less" application. This enables us to analyse the use of our website without placing cookies on your device. Further information can be found in the section "Use of etracker".

For technical purposes, "etracker Analytics Cookie-less" stores information exclusively in your browser's session storage. This storage is purely technical in nature, remains active only for the duration of your visit and is automatically deleted once you end your browser session.

Name Provider Purpose Retention period Legal basis
JSESSIONID DGUV Session cookie used to provide the website and maintain the user session Until the end of the browser session Section 25(2) No. 2 TDDDG in conjunction with Article 6(1)(f) GDPR (ensuring the technically error-free provision of the website)
et_* etracker Session storage: anonymous, user-deactivatable usage analytics Until the end of the browser session Section 25(2) No. 2 TDDDG in conjunction with Article 6(1)(f) GDPR (optimisation of our online services and website)

12. Use of etracker

We use the “etracker Analytics Cookie-less” application for our web analytics, which allows us to analyze website usage without setting cookies. This is a service provided by JustRelate Deutschland GmbH, based in Berlin, Germany, for the analysis of usage data. We anonymize usage data to such an extent that etracker cannot establish any link to an identifiable individual during the analysis. IP anonymization is enabled by default and does not need to be configured separately.

The data generated by etracker is processed and stored exclusively in Germany on our behalf by etracker and is therefore subject to strict German and European data protection laws and standards. Etracker has been independently audited and certified in this regard and has been awarded the ePrivacyseal data protection seal of approval.

Data processing is carried out in accordance with the legal provisions of Article 6(1)(f) GDPR. Our goal, in accordance with the GDPR, is to optimize our online services and our website. Since the privacy of our visitors is important to us, data that could potentially be linked to an individual - such as IP addresses, login IDs, or device identifiers—is anonymized and encrypted as soon as possible. This data is not used for any other purpose, combined with other data, or disclosed to third parties.

You can completely disable the data processing described above at any time in your browser settings.

For more information on data processing by etracker, please see etracker’s privacy policy: https://www.etracker.com/en/data-privacy-statement/

13. Use of OpenStreetMap

To help you find us more easily, we have integrated map sections from the “OpenStreetMaps” map service on our website. The map service is provided by the OpenStreetMap Foundation CLG, based in the United Kingdom (132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom).

These map sections are static, so no data is transmitted to the provider through them.

If you wish to use OpenStreetMap’s routing services, you can use the link provided below the map section. When you click on the link, you will leave our website and be redirected to the external provider. In this context, the provider may process personal data in accordance with its privacy policy.

For more information on the purpose and scope of data collection and its processing by the OpenStreetMap Foundation, please refer to the provider’s privacy policy at: https://osmfoundation.org/wiki/Privacy_Policy.

14. Data Retention Period

We store your personal data only for as long as is necessary to fulfill the respective purpose. If data is processed for multiple purposes, it will be deleted or stored only in a form that cannot be directly traced back to you as soon as the last specified purpose has been fulfilled.

15. Your Rights as a Data Subject

As a data subject, you have the following rights regarding data processing:

  • Right of access (Article 15 GDPR): You have the right to request information at any time about the data we have stored about you.
  • Right to rectification (Article 16 GDPR): If we have processed inaccurate data about you, you may request that this data be corrected.
  • Right to erasure or restriction of processing (Article 17 and 18 GDPR): If the conditions are met, you may request the erasure or restriction of the processing of your data.
  • Right to data portability (Article 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21 GDPR): If we process your data based on Article 6(1)(e) or (f) GDPR—for example, because we are pursuing legitimate interests—you may object to the processing of your data at any time.
  • Automated decision-making in individual cases, including profiling (Article 22 GDPR): You have the right not to be subject solely to an automated decision, including profiling, that produces legal effects concerning you or significantly affects you.
    We do not currently use automated decision-making. However, your right remains in effect, and you may request human intervention, the opportunity to provide input, and a review of the decision, to the extent provided for by law.
  • Right to Withdraw Consent (Article 7(3) GDPR): If the processing of your data is based on consent, you have the right to withdraw that consent at any time.
    In many cases, you can withdraw your consent through the same channel by which it was originally granted. For example, you’ll find an unsubscribe link in our newsletters. If in doubt, you can send your objection or withdrawal of consent to the following email address:

If you believe that we have violated your rights by processing your data, you have the right, pursuant to Article 77 GDPR, to file a complaint with the competent supervisory authority. You can find the contact information for the supervisory authority responsible for us at:
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Straße 153
53117 Bonn
Tel.: +49 (0)228 997799-0
E-Mail:

16 More Information

If you have any further questions regarding data protection in statutory accident insurance, you may contact our Data Protection Officer at any time at the address listed above (see 2. above) or the Data Protection Law Division using the following contact information: