When you access our website, your browser transmits data to the server on which the website content is hosted. These data are automatically stored, and possibly processed, in log files.

The following data are processed when you access our site:

• Date and time of access
• IP address of the accessing device
• Website being accessed
• The URL from which the file was requested or the desired function was initiated
• The volume of data transmitted
• The transmitted browser identifier

These data are processed solely for the purposes of enabling us to provide our website content and to identify and trace unauthorised access to the web server or other criminal offences. The legal basis for this data processing is Art. 6(1) sentence 1 lit. f. GDPR.

Our legitimate interests are to ensure IT security and the smooth operation of our website.

The recipient of the data is an external processor in the IT sector.

These data will be deleted no later than 30 days after being recorded.

Data processing is essential for ensuring the security and operation of the website. The right to object is therefore only possible if you do not access our website.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and the cookie identifier, we cannot guarantee the service and functionality of our website. In addition, certain services may be unavailable or restricted.

We provide a contact form as a way to communicate with us.

If you send us a request via the contact form, the information in the form, including the contact information you have provided there, will be processed and stored by us for the purpose of processing your request and any follow-up questions.

In addition to the subject of the enquiry, the following data will be processed:

• Name
• E-mail address

The legal basis for this data processing is Art. 6(1) sentence 1 lit. b. GDPR. insofar as it concerns entering into a contract, and Art. 6 para. 1 p. 1 lit. f) of the GDPR insofar as it concerns other enquiries.

Insofar as data processing is based on Art. 6(1) sentence 1 lit. f. GDPR, our legitimate interests lie in processing and answering your enquiry.

The data you enter in the contact form will remain with us until you request that we delete those data or withdraw your consent for us to store those data, or until the purpose for storing the data no longer applies (e.g. once we have completed processing your enquiry). Mandatory legal requirements – in particular retention periods – remain unaffected.

If you do not wish your data to be processed further, you can inform us of this at any time by sending an e-mail to datenschutz@zoo-berlin.de. No further data processing will then take place.

You establish contact and provide the associated data voluntarily. However, if you write to us using the contact form, we will require these data in order to process your enquiry.

We will never pass on these data without your consent.

You have the option to subscribe to our newsletter.

We use our newsletter to inform you about us, our offers and our services.

We use the so-called double opt-in process when you subscribe to our newsletter. That means that after you subscribe we will send an e-mail to the e-mail address provided in which we ask you to confirm that you do indeed wish to receive the newsletter. If we do not receive confirmation within the specified period of seven days, the subscription process is not completed. We also store your IP addresses and the times of registration and confirmation. The purpose of this step is to prove that you have subscribed and to identify any possible misuse of your personal data.

The legal basis for this data processing is Art. 6(1) sentence 1 lit. a. GDPR.

The recipient of the data is an external processor in the e-mail marketing sector.

The data you provide will be stored until you unsubscribe from our newsletter.

You can withdraw your consent to receive our newsletter at any time. You can declare your withdrawal by clicking on the link provided in every electronic newsletter, by sending an e-mail to datenschutz@zoo-berlin.de, or by sending a letter by post to the address provided above. Please note that this withdrawal of consent does not affect the permissibility of the data processing conducted up until that point.

You provide your personal data voluntarily and with your express consent. Unfortunately, we cannot send you our newsletter without your consent.

If you make a donation to Zoo Berlin, sponsor an animal, or include us in your will, we will use your contact information and payment information to carry out the transaction.

The purpose of this data processing is to handle payments in connection with donations and sponsorships.

The legal basis for this data processing is Art. 6(1) sentence 1 lit. b. GDPR.

We use an external service provider, Wikando GmbH, Schießgrabenstr. 32, 86150 Augsburg, to process donations, and our donation forms are provided by FundraisingBox. We chose this provider in order to ensure the highest level of security for your information. Your personal information is transmitted to us via a secure connection. Your payment information is sent to the payment service provider using an encrypted connection. To learn about the data security measures currently in place, visit https://www.fundraisingbox.com/datensicherheit.

If you make a donation using direct debit, we will submit the account details you provide to our principle bank in order to set up the direct debit.

If you make a donation using PayPal, after you submit the form you will be taken directly to the PayPal website, where you can complete the transaction in the normal way. We do not receive any account information; we are only notified that your payment has been made. In this case, PayPal is responsible for data processing.

If you make a donation using the Sofortüberweisung bank transfer method, after you submit the form you will be taken directly to the website of payment provider Sofort AG. We do not receive any account information; we are only notified that your payment has been successful. In this case, Sofort AG is responsible for data processing.

Your data will be deleted as soon as we no longer need them for the aforementioned purposes. However, we are legally required to retain the personal data provided in connection with your donation for ten years, including information about the donation amount, donation frequency, and donation purpose or project.

You are legally required to provide your personal data when donating online.

We only use the information you provide in Zoo Berlin’s online forms to serve the aims of the association, to request further donations, and to send you more information about Zoo Berlin. You can quickly and easily withdraw your consent for further use of your data at any time, for instance by sending an e-mail to datenschutz@zoo-berlin.de with brief reference to the form you completed. However, forms normally contain separate data protection information including their own e-mail addresses for withdrawing consent to the use of personal data.

You have the option to purchase day tickets, annual passes and vouchers via the online shop on our website.

Further information on annual passes pursuant to Article 13 GDPR can be found here.

To complete your purchase, you must provide your first and last name, address and telephone number, and e-mail address. 

The processing of these data serves the performance of a contract pursuant to Art. 6(1) sentence 1 lit. b. GDPR. In addition, there is a legal obligation to collect these data in the sense of Art. 6(1) sentence 1 lit. c. GDPR. This obligation represents the fulfilment of tax law requirements pursuant to Section 14(4) UstG (value added tax act).

The web shop is provided by HKS Systeme GmbH, Friedrich-List-Str. 89, 33100 Paderborn. A processing contract has been concluded with HKS.

Payments can be made via credit card, giropay, paydirekt or PayPal. During the ordering process, the user will be directed to the respective payment service. We only receive information from these external service providers once the payment process has been completed. We do not receive any further information (for example, account details).

The data will be deleted immediately upon expiry of the legal retention period of ten years resulting from Art. 17(3) lit. b. GDPR and Section 147(3) AO (Fiscal Code of Germany). This period begins at the end of the calendar year in which the document was created.

You are required to provide your personal data for the fulfilment of the contract.

Our website also gives you the option to sign up for events organised by us. For us to complete your registration and run these events, it is necessary for us to process your personal data.

These data include, in particular:

• First and last name
• Address
• E-mail address
• Date of birth (where applicable)
• Bank details (where applicable)

This data processing is necessary in order for us to plan and run the event and enable you to participate.

The data processing is based on Art. 6(1) sentence 1 lit. b. GDPR as well as on Art. 6(1) lit. f. GDPR.

Insofar as the data processing is based on Art. 6(1) sentence 1 lit. f. GDPR, our legitimate interests comprise the planning and running of events.

In principle, we store the data until the event in question is completely over. After the event has taken place, we will transfer your data to our customer database. Legal retention periods may also apply – particularly with regard to invoice data.

If you do not wish to be included in our customer database, you can notify us of that immediately by sending an e-mail to datenschutz@zoo-berlin.de. Your data will then not be recorded.

You provide your data and sign up for an event voluntarily. However, if you do wish to sign up for an event, we will require your data in order to be able to fulfil our obligations.

We process your personal data when you apply for a job or internship at our company, but only for the purpose of carrying out the application process and only within the scope of the application process.

Your data are processed in order to fulfil our (pre-)contractual obligations within the scope of the application process in the sense of Art. 6(1) lit. b. GDPR and Art. 6(1) lit. f. GDPR, insofar as we are required to perform data processing – such as within the scope of legal proceedings (in Germany, section 26 BDSG [federal data protection act] also applies).

The application process requires you to provide us with the data we need. When we offer an online form, the data we require from applicants are marked, otherwise they follow from the job description and generally include personal details, postal and contact addresses, and documents that are part of the application, such as cover letter, curriculum vitae, and certificates. You can also provide us with additional, voluntary information.

If, during the application process, you voluntarily provide us with special categories of personal data in the sense of Art. 9(1) GDPR, these data will also be processed in accordance with Art. 9(2) lit. b GDPR (for instance, severe disability).

You can submit your application to us using an online form on our website, where such a form is provided. Your data will be transmitted to us using the latest encryption technology.

You can also send us your application via e-mail. However, please note that e-mails are generally unencrypted and that you must encrypt the data yourself (using 7Zip, for instance). Even if your e-mail is transmitted via TLS, we cannot guarantee that data transmission will be 100 percent secure. Of course, you can also send us your application documents by post.

If your application is successful, we will continue to process your application documents for the purposes of the employment relationship. Otherwise, if your application for a job opening is unsuccessful, your applicant data will be deleted.

Unless you have lodged a justified request for earlier deletion, your data will be deleted after a period of six months, so that we may answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.

As part of the application process, we offer you the option of being included in our talent pool for a period of two years on the basis of your consent in the sense of Art. 6(1) lit. a. GDPR. Application documents in the talent pool will only be processed in the context of future job advertisements and employee searches, and will be destroyed at the end of that period at the latest.

Please note that consent to be included in the talent pool is provided voluntarily, that it has no influence on your current application process, and that you can revoke your consent to be included in the talent pool at any time.

You provide data for your application voluntarily. However, we do require these data in order to be able to fulfil our obligations if you wish to apply for a job with us.

Some of our web pages use cookies. Cookies cannot harm your device and do not contain viruses. Cookies help us make our service more user-friendly, more effective and more secure. Cookies are small text files that are stored on your device and in your browser.

Most of the cookies we use are session cookies. These cookies are automatically deleted when you leave our website. Other cookies remain on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our site.

You can set your browser to notify you when cookies are set and to only allow cookies individually, to only accept cookies in certain cases, or to always block cookies. You can also set your browser to automatically delete cookies when you close the browser. However, you should be aware that deactivating cookies may limit website functionality.

You can find the overview of the cookies we use here: www.zoo-berlin.de/en/cookies

For the display of fonts, this website uses web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net). When you access a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly. To do so, the browser you use must connect to the fonts.com servers. In this way, fonts.com gains the information that our website was accessed from your IP address.

We use Fonts.com web fonts in the interest of providing a uniform and appealing presentation of our online offers. This constitutes a legitimate interest in the sense of Art. 6(1) lit. f. GDPR.

Further information on the web fonts can be found at www.fonts.com/info/legal, in the privacy policy of Fonts.com at www.fonts.com/info/legal/privacy/, and in the privacy policy of Monotype GmbH at https://www.monotype.com/legal/privacy-policy/.

Insofar as the data processing is based on Art. 6(1) sentence 1 lit. f. GDPR, our legitimate interests comprise the uniform and appealing presentation of our website.

You provide your data voluntarily. You can, of course, opt to view our website without cookies. In general, you can also deactivate the use of cookies at any time via your browser settings.

Please note, however, that specific functions of our website may not work if you have deactivated the use of cookies.

This website uses Google Analytics, a web analytics service from Google Ireland Limited (hereinafter referred to as “Google”). This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyse a user’s activities across devices.

Google Analytics uses cookies – small text files that are stored on your device and that we employ to analyse how you use our website. Information generated by a cookie about your use of the website is normally forwarded to a Google server in the United States, where the information is then stored. Whenever IP anonymisation is activated on this website, however, Google shortens IP addresses within the member states of the European Union and in other states party to the Agreement on the European Economic Area before they are forwarded. Please note that on this website Google Analytics has been extended to include IP anonymisation in order to ensure that IP addresses are recorded anonymously (“IP masking”). Google does not associate the IP address that your browser sends to Google Analytics with any other data held by Google. Here you can find more detailed information on terms of use and data protection.

Google uses this information for the purpose of evaluating how you use our website and compiling reports on website activity on our behalf, as well as providing us with other services relating to website activity and internet usage.

The legal basis for the use of Google Analytics is Art. 6(1) sentence 1 lit. a. GDPR.

Insofar as personal data are transferred to Google servers in the United States and stored and processed there, we and Google have concluded the standard data protection clauses adopted by the European Commission, which permit the transfer of personal data to the United States in individual cases.

We can view the data processed by Google Analytics for 14 months.

You can prevent cookies from being stored by changing the relevant settings in your browser. However, please note that doing so may prevent you from using all of the functions on this and other websites to their full extent. In addition, you can prevent information generated by a cookie and relating to your use of the site (including your IP address) from being sent to and processed by Google. To do so, click on the following link, then download and install the opt-out browser add-on: http://tools.google.com/dlpage/gaoptout?hl=en.

We also offer you the option to disable the recording of information on how you use this website. To do so, click on the following link: Disable Google Analytics. This sets a special opt-out cookie that prevents your usage data from being collected when you visit this website in the future.

You provide your data voluntarily. You can, of course, opt to view our website without cookies. In general, you can also deactivate the use of cookies at any time via your browser settings.

Please note, however, that specific functions of our website may not work if you have deactivated the use of cookies.

Besides the standard Google Analytics configuration, this website uses Google Analytics functions that support interest-based advertising and advertising based on users’ browsing habits.

Google Analytics does this using a third-party cookie from DoubleClick, which allows it to analyse the browsing patterns of users as they visit different websites. The information provided in this way enables statistical statements to be generated about demographic data and the interests of website users.

Some visitors to our website may see our advertising on other websites after they visit our site. This type of advertising is called remarketing or retargeting.

The legal basis for the use of Google Analytics is Art. 6(1) sentence 1 lit. a. GDPR.

Insofar as personal data are transferred to Google servers in the United States and stored and processed there, we and Google have concluded the standard data protection clauses adopted by the European Commission, which permit the transfer of personal data to the United States in individual cases.

We can view the data processed by Google Analytics for 14 months.

We would like to emphasise that we cannot view any information about individual users, nor can we trace the statistical data we use back to specific users.

If you do not wish to see the adverts, we recommend you use one of the options described above that allow website users to disable website tracking. In addition, Google offers you the option to control advertising cookies for yourself: http://www.google.de/intl/de/policies/technologies/ads/

The provision of your data is voluntary. You can, of course, opt to view our website without cookies. In general, you can also deactivate the use of cookies at any time via your browser settings.

Please note, however, that specific functions of our website may not work if you have deactivated the use of cookies.

We process personal data for online marketing purposes, which may include, in particular, marketing of advertising space or displaying promotional and other content (collectively referred to simply as “content”) based on potential user interests and measuring the effectiveness of the content.

For these purposes, we create user profiles and store them in a file (“cookie”) or use similar processes to store user information that is relevant to the presentation of the aforementioned content. This information may include, for example, content viewed, websites visited, online networks used, as well as communication partners and technical information such as your browser, computer system, and information on usage times. If you have consented to the collection of your location data, these data may also be processed.

Your IP address is also stored. However, we use available IP masking techniques (pseudonymisation by shortening your IP address) to protect users. In general, we do not store any plain user data (such as e-mail addresses or names) within the scope of the online marketing platform, but rather pseudonyms. This means that we, as well as the providers of our online marketing platforms, do not know the actual identity of the users, but only the information stored in their profiles.

The information in these profiles is usually stored in cookies or via similar processes. These cookies can generally be read later on by other websites that use the same online marketing platform. They can be analysed to display content, or supplemented with further data and stored on the server of the online marketing platform provider.

Plain text data may be assigned to profiles in exceptional cases. This can happen if, for example, a user is a member of a social network that uses our online marketing platform and the network connects the user’s profile with the aforementioned data. Please note that users may enter into additional agreements with providers, for instance by providing their consent during the registration process.

In general, we only receive access to summarised information about the success of our advertisements. However, within the framework of conversion tracking, we can check which of our online marketing platforms have led to a conversion, which means, for example, entering into a contract with us. We only use conversion tracking to analyse the success of our marketing activities.

Where we ask users for their consent to use third-party providers, the legal basis for processing user data is their consent. Otherwise, user data are processed on the basis of our legitimate interest (meaning our interest in efficient, economical, user-friendly services). In this context, also note the information that this data protection statement contains on our use of cookies.

• Types of data processed: Usage data (such as websites visited, interest in content, access times), metadata / communication data (such as device information, IP addresses)
• Data subjects: Users (such as website visitors, users of online services)
• Purposes of processing: Marketing, profiles with user-related information (creating user profiles), conversion tracking (measuring the effectiveness of marketing activities)
• Security: IP masking (pseudonymisation of IP addresses)
• Legal basis: Consent (Art. 6(1) sentence 1 lit. a. GDPR), legitimate interests (Art. 6(1) sentence 1 lit. f. GDPR)

Deployed services and service providers:

• Google Tag Manager: We use Google Tag Manager to manage website tags via an interface and thus to integrate other services in our online offer (please refer to further details in this data protection statement). Tag Manager (which implements the tags) does not itself create user profiles or store cookies. Google only learns the user’s IP address, which is required to run Google Tag Manager. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Republic of Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com; privacy policy: https://policies.google.com/privacy
• Google Analytics: Online marketing and web analytics. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Republic of Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com/intl/de/about/analytics/; privacy policy: https://policies.google.com/privacy; opt-out: opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=en-GB; settings for displaying ads: https://adssettings.google.com/authenticated
• Google Ads and conversion tracking: We use the online marketing platform Google Ads to place ads in the Google advertising network (in search results, in videos, on web pages, etc.) to be displayed to users who are presumed to have an interest in those ads. We also track ad conversion. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page marked with a conversion tracking tag. We do not receive any information that can be used to identify users. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Republic of Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com; privacy policy: https://policies.google.com/privacy

Insofar as personal data are transferred to Google servers in the United States and stored and processed there, we and Google have concluded the standard data protection clauses adopted by the European Commission, which permit the transfer of personal data to the United States in individual cases.

Unless stated otherwise, we ask you to assume that cookies will be stored for a period of two years.

Please see the data protection notices of the respective providers and the options for objecting to data processing listed for the providers (“opt-out”). If no explicit opt-out option has been specified, you have the option of disabling cookies in your browser settings. However, doing so may limit some features in our online offer.

You provide your data voluntarily. Of course, you can also view our website without cookies. In general, you can disable the use of cookies at any time via your browser settings.

Please note that certain features on our website may not work if you have disabled cookies.

To better display our locations geographically and to make it easier for you to find them, we have integrated map material from the Google Maps service of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Republic of Ireland (hereinafter referred to as “Google”) in our website via an API. When you visit a page on our website with such map material, it tells Google that you have accessed that material. In particular, your IP address is sent to a Google server. This happens regardless of whether you are signed into your Google account or whether you even have a Google account. If you are signed into Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must sign out of your Google account after using the relevant Google service. Google stores your data in usage profiles and uses them for advertising, market research, and/or to make its website more user-friendly. Such analysis is performed, in particular (even for users who are not signed in), to provide appropriate advertising and to inform other users in its social network about your activity on our website.

Further information on how Google processes data can be found in Google’s privacy policy.

The legal basis for this data processing is Art. 6(1) sentence 1 lit. a GDPR.

Insofar as personal data are transferred to Google servers in the United States and stored and processed there, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Republic of Ireland and the Google companies based in the United States have concluded the standard data protection clauses adopted by the European Commission, which permit the transfer of personal data to the United States in individual cases.

We do not store any personal data via our integration of Google Maps.

Further information on how long Google stores data can be found in Google’s privacy policy.

You can revoke the consent you have given at any time by using our Cookie Consent Tool.

You provide your data voluntarily. Of course, you can also view our website without Google Maps.

Please note that certain features on our website may not work if you have disabled scripts – such as the one used by Google Maps.

We have integrated components from YouTube on this website. YouTube is an online video platform that allows video publishers to post videos free of charge and other users to view, rate, and comment on them, also free of charge. YouTube allows users to publish all types of videos, which is why complete film and television programmes, as well as music videos, trailers, and videos made by users can be accessed via the site.

YouTube’s operating company is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Republic of Ireland.

Each time a page with an integrated YouTube component (YouTube video) is opened on this website, which is operated by the controller, that YouTube component automatically causes the internet browser on the data subject’s information technology system to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/about/. During this technical process, YouTube and Google receive information regarding which specific page on our website the data subject is visiting.

If the data subject is signed into YouTube at the same time, YouTube recognises which specific page on our website the data subject is visiting when a page containing a YouTube video is opened. YouTube and Google collect this information and associate it with the data subject’s YouTube account.

The YouTube component always informs YouTube and Google that the data subject has visited our website if the data subject is signed into YouTube while opening our website; this happens regardless of whether the data subject clicks on a YouTube video or not. Data subjects who do not want this information to be transmitted to YouTube and Google can prevent that by signing out of their YouTube account before accessing our website.

We use YouTube in the interest of providing an appealing presentation of our online offers. This represents a legitimate interest in the sense of Art. 6(1) lit. f. GDPR. If your consent has been requested, your data are processed exclusively on the basis of Art. 6(1) lit. a GDPR, and you can revoke your consent at any time.

Further information on YouTube’s data protection practices can be found in its privacy policy at https://policies.google.com/privacy.

Insofar as personal data are transferred to Google servers in the United States and stored and processed there, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Republic of Ireland and the Google companies based in the United States have concluded the standard data protection clauses adopted by the European Commission, which permit the transfer of personal data to the United States in individual cases.

If you interact with us publicly, for example by leaving a comment or liking a post, these data will remain publicly accessible on the site until they are deleted by us or you. If we are legally required to retain data for a longer period, your data will only be retained for this purpose and will be locked for other purposes.

To exercise your right to object with us, please contact us at datenschutz@zoo-berlin.de or by post or telephone at the above address. We will process your request promptly.

You provide your data voluntarily. However, it is not possible to visit our profile without having us and YouTube process personal data for which we and YouTube are individually and separately responsible.

We use the technical platform and services of Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Republic of Ireland (hereinafter referred to as “Twitter”) to provide information to interested parties and customers.

Please note that you are individually responsible for your use of the Twitter microblogging service offered here and of its features. This applies in particular when you use Twitter’s interactive features (such as sharing and liking).

You can find information about which data Twitter processes and for what purposes in Twitter’s privacy policy.

We have no influence over the type and scope of data processed by Twitter, the type of processing and use, or the transfer of such data to third parties. In this respect, neither do we have any effective means of control.

When you use Twitter, Twitter Inc. collects, transfers, stores, discloses, uses, and transfers your personal data, regardless of your place of residence, to the United States, the Republic of Ireland, and any other country where Twitter Inc. does business, where it is stored and used.

Twitter processes the data that you entered voluntarily, such as your name and username, e-mail address, and telephone number, as well as your contacts if you upload or synchronise them.

Twitter also evaluates the content you share to determine which topics you are interested in; it stores and processes confidential messages that you send directly to other users; and it can determine your location using GPS data, information on wireless networks, or your IP address in order to send you advertising or other content.

Twitter Inc. may use analytics tools such as Twitter Analytics or Google Analytics to analyse the data it collects. Here too, we have no influence on the use of such tools by Twitter Inc., nor have we been informed of such potential use. If Twitter Inc. uses tools of this type for our account, we have not commissioned or supported such use. Nor does Twitter make such analyses available to us. Only certain non-personal information about tweet activity, such as the number of clicks on a profile or link through a particular tweet, is visible to us via our account. Moreover, we have no way to prevent or disable the use of such tools on this Twitter account.

Finally, Twitter also receives information when you view content, for example, even if you have not created an account. These “log data” may include your IP address, your browser and operating system, information about the website you visited beforehand and the pages you viewed there, your location, your mobile provider, the device you are using (including the device ID and application ID), the search terms you used, and cookie information.

Twitter buttons or widgets embedded in websites, as well as the use of cookies, enable Twitter to record your visits to these websites and associate them with your Twitter profile. These data can be used to offer you customised content and advertising.

There are ways for you to limit how Twitter processes your data, such as in your general Twitter account settings or by selecting “Security and Privacy”. You can also limit Twitter’s access to the contacts, calendar, photos, location data, etc. on your mobile device (smartphone, tablet) in the settings there. Note that these options vary according to the different operating systems.

Further information on these points is available on the following Twitter support pages:

• https://support.twitter.com/articles/105576#
• https://help.twitter.com/en/search?q=privacy

You can find out how to view your own data on Twitter here.

Information about the inferences that Twitter makes about you is available here.

Information on your personalisation and privacy options can be found here (with further references).

In addition, you have the option of requesting information via the Twitter privacy form and the Twitter archive.

Aside from that, we are solely responsible for certain data processing activities. We process the following data for communication with Twitter users in order to offer our information service:

• User interactions (posts, likes, etc.)
• Profile name and the data that a user provides during a conversation, for example to process service requests
• Aggregated statistical data on user interactions, with no reference to specific persons (such as number of tweet impressions, number of interactions, number of detail expands, number of profile clicks, number of media interactions, number of likes and retweets)

Your data are processed for the purpose of responding to your enquiries (if you have sent us an enquiry) or communicating with you and to publish information about events, products and services. The legal basis for data processing for the purpose of answering enquiries that serve to enter into a future contract and are initiated by you is Art. 6(1) sentence 1 lit. b GDPR and in other cases, meaning for general enquiries, Art. 6(1) sentence 1 lit. f GDPR.

Our legitimate interests comprise the effective provision of information to users, customers, and interested parties, and communication with such persons, as well as our public presentation and image.

Insofar as personal data are transferred to Twitter servers in the United States and stored and processed there, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Republic of Ireland and the Twitter companies based in the United States have concluded the standard data protection clauses adopted by the European Commission, which permit the transfer of personal data to the United States in individual cases.

Data will be deleted from our systems after your request has been dealt with. If you interact with us publicly, for example by leaving a comment or liking a post, these data will remain publicly accessible on the site until they are deleted by us or you. If we are legally required to retain data for a longer period, your data will only be retained for this purpose and will be locked for other purposes.

To exercise your right to object with us, please contact us at datenschutz@zoo-berlin.de or by post or telephone at the above address. We will process your request promptly.

You provide your data voluntarily. However, it is not possible to visit our profile without having us and Twitter process personal data for which we and Twitter are individually and separately responsible.

We draw on the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 (hereinafter referred to as “Facebook”) to operate our Facebook page; and draw on the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, (hereinafter referred to as “Instagram”) to operate our Instagram pages.

Since operating our Facebook pages is a joint responsibility between Facebook and us in terms of data protection law (Art. 26 GDPR), we have concluded a corresponding agreement with Facebook Ireland Ltd. that you can view at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

Please note that you are individually responsible for using our Facebook and Instagram pages and their features. This applies in particular when you use their interactive features (such as commenting, sharing, and reacting).

We receive anonymous statistics from Facebook and Instagram on the use and usage of our pages. Below are examples of the information they provide:

• Followers: Number of people who follow us, including growth and development over a defined period of time
• Reach: Number of people who see a specific post, and the number of interactions on a post. This allows us to determine, for example, which types of content are better received by users than others.
• Ad performance: How much does a click cost us? How many people have seen an ad?
• Demographics: Average age of visitors, gender, place of residence, language

Facebook provides more detailed information on this at the following link: https://www.facebook.com/business/a/page/page-insights; corresponding information from Instagram is available at this link: https://help.instagram.com/788388387972460?helpref=related

We use these statistics, from which we are not able to draw any conclusions about individual users, to continually improve our offerings on Facebook and Instagram and to better respond to the interests of our users. The legal basis for this data processing is Art. 6(1) lit. f GDPR.

We cannot associate these statistical data with the profile data of our followers. You can use your Facebook and Instagram settings to decide how targeted advertising is shown to you.

If you have an account with Facebook or Instagram, you can send us a message using the message feature. Such messages are not visible to other Facebook or Instagram users. We process the personal data contained in messages you send to us only in order to respond to your enquiry. The legal basis for this data processing is Art. 6(1) lit. a GDPR. Messages are deleted when your enquiry has been answered and when no other reason entitles or obliges us to keep your message.

Facebook and Instagram do not conclusively or clearly state, nor do we have any knowledge of, how they use data from visits to Facebook and Instagram pages for their own purposes, to what extent activity on Facebook and Instagram pages is associated with individual users, how long they store such data, or whether data from visits to Facebook and Instagram pages are passed on to third parties.

When you visit our pages, Facebook and Instagram collect, among other things, your IP address and other information that is sent to Facebook or Instagram via cookies on your device. This information is used, among other things, to provide us, as the operator of those Facebook and Instagram pages, with the aforementioned statistical information about how our pages are being used. Facebook provides more detailed information on this at the following link: https://www.facebook.com/business/a/page/page-insights. Facebook’s cookie policy can be found here: https://www.facebook.com/policies/cookies/. Information about how Instagram uses cookies can be found here: https://help.instagram.com/1896641480634370?ref=ig.

The data collected about you in this context will be processed by Facebook or Instagram, during which they may be transferred to countries outside the European Union. Facebook’s privacy policy describes which information it receives and how it uses that information. You can find Facebook’s privacy policy at this link: https://www.facebook.com/about/privacy. Instagram’s privacy policy can be found here: https://help.instagram.com/519522125107875.

Data will be deleted from our systems after your request has been dealt with. If you interact with us publicly, for example by leaving a comment or liking a post, these data will remain publicly accessible on the site until they are deleted by us or you. If we are legally required to retain data for a longer period, your data will only be retained for this purpose and will be locked for other purposes.

Under the GDPR, Facebook assumes primary responsibility for the processing of Insights data and will comply with all of the GDPR’s requirements with respect to processing Insights data (including Art. 12 and 13 GDPR, Art. 15 to 22 GDPR, and Art. 32 to 34 GDPR). In addition, Facebook will provide data subjects with the essential findings from its Page Insights supplement (available at https://www.facebook.com/legal/terms/page_controller_addendum).

You provide your data voluntarily. However, it is not possible to visit our profile without having us and Facebook or Instagram process personal data, for which we and Facebook or Instagram are jointly responsible.

You can request information about which of your personal data we process in accordance with Art. 15 GDPR.

If the information we have about you is not accurate or no longer accurate, you can request corrections in accordance with Art. 16 GDPR. If your data are incomplete, you can request that they be completed.

You can request the deletion of your personal data in accordance with Art. 17 GDPR.

You have the right to request restriction of processing of your personal data in accordance with Art. 18 GDPR.

If the requirements of Art. 20(1) GDPR are met, you have the right to have the data that we process automatically, on the basis of your consent or for performance of a contract, handed over to you or to third parties. In order to operate our website, we absolutely must collect data that enable us to provide the website and we absolutely must store log files. These practices are therefore not based on consent according to Art. 6(1) sentence 1 lit. a GDPR, or on a contract according to Art. 6(1) sentence 1 lit. b GDPR, but they are legitimate according to Art. 6(1) sentence 1 lit. f GDPR. The requirements of Art. 20(1) GDPR are therefore not met in this regard.

If you consider the processing of your personal data to be a violation of data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choosing in accordance with Art. 77(1) GDPR. This includes the supervisory authority that is responsible for the controller:

• Berlin Commissioner for Data Protection and Freedom of Information, Tel.: +49 (0)30 13889-0, Fax: +49 (0)30 215 5050, E-mail: mailbox@datenschutz-berlin.de

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data that is carried out on the basis of Art. 6(1) sentence 1 lit. f GDPR. The controller will stop processing your personal data unless it can demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of yourself as the data subject, or if processing serves to establish, exercise, or defend legal claims. In order to operate our website, we absolutely must collect data that enable us to make the website available and we absolutely must store log files.