Data protection regulations

§ 1 Information on the collection of personal data and provider identification

  1. In the following, we inform you about the collection of personal data when using this website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
  2. The responsible person according to Art. 4 para. 7 EU Data Protection Regulation (DS-GVO) is Chance e.V., Lütticher Str. 51, 50674 Cologne, e-mail: (see our imprint). Our data protection officer is Dr. iur. Andreas Pinheiro LL.M., info(at)
  3. If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

§ 2. Rights, in particular to information and revocation

  1. You have the following rights in relation to personal data relating to you:
        - Right to information,
        - Right to rectification or erasure,
        - Right to restriction of processing,
        - Right to object to processing,
        - Right to data portability.
  2. If you have given consent for the use of data, you can revoke this consent at any time. If the lawfulness of the processing is based on consent, it remains valid until you exercise your revocation.
  3. Please address all requests for information, requests for information or objections to data processing by e-mail to or to the address stated under § 1 para. 2.
  4. You can request us to delete your data at any time. There may be legal retention periods that allow us to keep your data until the period expires. This planned storage period is 2 years.
  5. If your data is incorrect, you have the right to ask us to correct it. We will comply with this request without delay.
  6. You have the right to receive your personal data provided to us from us in a readable format, as far as technically possible, to make it available to another company (right to data portability).
  7. You have the right to complain to the supervisory authority responsible for you. A list of data protection officers and their contact details can be found at the following link:

§ 3. Data security

  1. We maintain up-to-date technical measures to ensure data security, to protect your personal data from risks during data transmissions and from third parties gaining knowledge. These are adapted to the current state of the art.

§ 4. Collection of personal data for informational use and contacting us

  1. In the case of mere informational use of the website, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
    - IP address
    - Date and time of the request
    - time zone difference from Greenwich Mean Time (GMT)
    - content of the request (concrete page)
    - Access Status/HTTP Status Code
    - amount of data transmitted in each case
    - Website from which the request comes
    - Browser
    - Operating system and its interface
    - Language and version of the browser software
  2. When you contact us by e-mail or via the contact form, your e-mail address, name and, if you provide it, your telephone number will be stored by us. The purpose of this storage is merely to contact you to answer your questions.
  3. The legal basis for the specified collection is the consent you have given by visiting our website and confirming the cookie banner or sending the contact form (Art. 6 para. 1 lit. a DSGVO).
  4. We will only use your data for advertising purposes to the extent permitted by law. In particular, we will only use your e-mail address for direct advertising of our own similar goods or services. You can object to the use of your data for advertising purposes at any time in writing or in text form (e-mail to In this case, we refer to your consent.
  5. In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the internet offer more user-friendly and effective.

§ 5. Cookies

  1. We use cookies on our website. Such cookies are necessary to allow you to move freely around the site and use its features, including accessing secure areas of the site. Cookies allow us to track who has visited the site(s) and from this we can deduce how frequently certain pages are visited, which parts of the site are particularly popular. Session cookies store information about your activities on our website.

  2. This website uses the following types of cookies, the scope and functionality of which are explained below:
    •  Transient cookies (temporary use)
    •  Persistent cookies (time-limited use)
    •  Third Party Cookies

  3. Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to the website. The session cookies are deleted when you log out or close the browser.

  4. Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

  5. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

  6. The following cookies are used:
    dp_cookieconsent_status - Cookie for storing the cookie preferences: 1 year
    cookieconsent_status - Cookie to display the cookie banner: 1 year
    _GRECAPTCHA - Cookie to identify bots: 6 months
    VISITOR_INFO1_LIVE - Cookie for the use of YouTube: 6 months
    YSC - Cookie for the use of YouTube: session

§ 6. Data transfer for the maintenance of the website

  1. We will not disclose your personal data to third parties unless we inform you of a disclosure.
  2. Our IT service providers have access to our stored data to correct errors and enable us to implement the required technical organisational measures. In doing so, we invoke our legitimate interest in securing our IT in accordance with Art. 6 Para. 1 lit. f DSGVO or the fulfilment of legal obligations in accordance with Art. 6 Para. 1 lit. c DSGVO.
  3. The IT service provider(s) have been carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly monitored by us. The service providers will not pass on this data to third parties.
  4. Your data will not be passed on outside the EU (EEA) area.

§ 7. Donation & Sponsorship

  1. In the case of a donation via our portal, you will be forwarded to KD-Bank for processing. In this regard, we refer to the privacy policy of KD-Bank:
  2. Should you issue a direct debit mandate for a sponsorship, we will store your bank data, your personal data, and your email address to be able to execute the direct debit mandate. In this regard, we refer to Art. 6 para. 1 lit. b as the legal basis. In this case, your data will be stored for 10 years in order to comply with the legal retention period.

§ 8. Social Media

  1. We provide links to various social media on our website. However, these are only links to external websites of third-party social media providers and not plugins. Consequently, no links are created, or personal data transmitted to the third-party providers when you visit our website. When you click on the respective button, which is marked with the provider's symbol, you will be redirected to the website of this provider. You will leave our website at this moment. If you have any questions about the data collection of the third-party providers, please read the data protection declarations provided by the third-party providers. We refer to the following social media:
  2. Facebook Our website links via the "f" button to the social network, whose operator for users outside the USA and Canada is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland. Information on data protection can be found here:
    Facebook Ireland ensures a comparable level of data protection for data transfers to the parent company in the USA by concluding so-called standard data protection clauses (SDK) in accordance with Art. 46 (2) DSGVO. Further information is available at:
  3. Instagram Instagram is a service of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For more information, please see Instagram's privacy policy:
  4. YouTube YouTube is a video platform of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Further information on YouTube's data processing and possible data protection settings can be found at:

§ 9. Newsletter

  1. With your consent, you can subscribe to our newsletters (blog, newsletter "Chance Aktuell" or the offline newsletter by post), which we use to keep you informed about our projects and the people on the ground. The services are named in the consent form. When issuing a direct debit mandate, or in the lower part of our website, or on the contact page, you can leave your email address to receive our newsletter.
  2. We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
  3. Mandatory data for sending the newsletter is partly your e-mail address (on the contact page, further data such as name and address are collected). After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.
  4. You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to or by sending a message to the contact details given in the imprint.
  5. We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons, also known as tracking pixels. These are single-pixel image files that link to our website and thus enable us to evaluate your user behaviour. This is done by collecting the data mentioned in § 4 as well as web beacons that are assigned to your email address and linked to a separate ID. Links received in the newsletter also contain this ID. The data is only collected pseudonymously, i.e., the IDs are not linked to your other personal data, thus excluding any direct personal reference. The information collected in this way is stored by the newsletter provider on its server in Germany.
    You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us at Such tracking is also not possible if you have deactivated the display of images by default in your e-mail program. In this case, however, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

§ 10. Plugin: YouTube

  1. We have integrated YouTube videos into our online offer, which are stored on and can be played directly from our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The videos are all integrated in "extended data protection mode", i.e., no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.
  2. By visiting the website, YouTube (and thus always Google) receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under § 4 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
  3. The legal basis for the transfer of personal data to YouTube is your consent, i.e., Art. 6 para. 1 p. 1 lit. a DS-GVO.
  4. For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:
  5. For the exceptional cases in which personal data is transferred to the USA, Google Ireland has agreed via the conclusion of so-called standard data protection clauses (SDK) pursuant to Art. 46 (2) lit. c DSGVO that a comparable level of data protection is ensured when transferring data to your third country. For more information, please visit:

§ 11. Google reCAPTCHA

  1. We use the Google reCAPTCHA service on our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This service is used to distinguish natural persons from so-called BOTS (machine and automated processing) when logging in. In the process, the IP address may be passed on to Google. This results in the transmission of personal data to Google. 
  2. The legal basis for the transfer of personal data to Google is your consent, i.e., Art. 6 para. 1 p. 1 lit. a DSGVO.
  3. If Google transfers personal data to the parent company based in the USA (Google LLC), Google has agreed via the conclusion of so-called standard data protection clauses (SDK) pursuant to Art. 46 (2) lit. c DSGVO that a comparable level of data protection is ensured for the transfer of data to your third country. For more information, please visit:!#gdpr
  4. Further information on Google reCAPTCHA and Google's privacy policy can be found at: