Privacy Policy

The English-language publication series The Persecution and Murder of the European Jews by Nazi Germany, 1933-1945 (PMJ) is a joint project between the Leibniz Institute for Contemporary History (IfZ), the University of Freiburg, the German Research Foundation (DFG), the German Federal Archives, and Yad Vashem. As the party responsible for the website within the meaning of the General Data Protection Regulation (GDPR), the IfZ takes the protection of your personal data very seriously and processes it in accordance with the applicable data protection regulations. Your data will neither be published by us nor shared with third parties without authorization.

In this privacy policy, we inform you about what data is collected during your visit to our website and how it is used, and we explain what your rights are as a data subject.

I. General information on data processing

1. Who is responsible for data processing and whom can I contact?

Responsible for the processing of personal data within the meaning of the GDPR and other national data protection laws as well as other data protection regulations is the

Leibniz Institute for Contemporary History
Director Prof. Andreas Wirsching
Leonrodstr. 46b
80636 Munich, Germany
Phone: +49 089 12688-0

If you have specific questions about the protection of your data, please contact the

Data Protection Officer
Leibniz Institute for Contemporary History
Leonrodstr. 46b
80636 Munich, Germany
Phone: +49 089 12688-0

2. Who is covered by this privacy policy?

This privacy policy is for

  • All visitors to our website

3. Scope of processing as regards personal data

As a rule, we collect and use personal user data only insofar as this is necessary to provide a functional website, along with our content and services. As a standard, the collection and use of personal data only occurs with the user’s consent. An exception applies in cases where the processing of data is permitted by statutory regulations.

4. What is the legal for us to process your personal data?

We process your personal data on the basis of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant statutory data protection regulations, such as:

Based on your consent (Art. 6[1][a] GDPR)
Insofar as you have given us consent to process your personal data for certain purposes, the lawfulness of the processing is based on this consent. Consent can be revoked at any time. However, revocation only applies to the future. Processing carried out before consent was revoked remains unaffected.

To perform contractual obligations (Art. 6[1][b] GDPR)
The processing of personal data is carried out for the performance of business or for the implementation of pre-contractual measures, for example as part of an email exchange aimed at entering into a contract.

To comply with a legal obligation (Art. 6[1][c] GDPR)
We process your data insofar as we are legally obliged to do so, for example to fulfil tax obligations.

To perform a task that is in the public interest (Art. 6[1][e] GDPR)

For the purposes of legitimate interest (Art. 6[1][f] GDPR)
Processing operations not covered by any of the previous provisions are based on this legal provision if the processing is necessary to protect a legitimate interest of the IfZ or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. This happens regularly, for example, to ensure our IT security. 

5. Erasure of data and duration of storage

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can be extended beyond this period if this is provided for by European or national legislature in the regulations, laws, or other provisions of Union law to which the IfZ is subject. Data will also be blocked or deleted after the expiration of a storage period prescribed by the aforementioned regulations unless continued storage of the data is necessary for concluding or performing a contract. 

II. Data processing when visiting these web pages

Every time you visit our website, data is automatically collected that is necessary for us to provide and to optimize a functional website as well as our content and services 

The following data is collected:

  • the domain for which log data is stored; in this case
  • your IP address
  • information about your browser type and the version used (user agent)
  • information about your operating system
  • the date and time of your access to our site (timestamp)
  • the path of the destination address without domain (request line)
  • success or failure of the page retrieval (status codes)
  • amount of data temporarily loaded by your computer (size of the response body)
  • address of the website you visited previously (referrer)

The data is stored in log files. This data is not stored together with other personal data of the users.

The legal basis for the temporary storage of the data is our legitimate interest (Art. 6[1][f] GDPR) in ensuring the website’s functionality. In addition, we use the data to optimize the website, for troubleshooting, and to secure our IT systems. The data is deleted as soon as it is no longer required to achieve these purposes. In the case of data collection for the provision of the website, this applies when the respective session has ended. In the case of data storage in log files at our hosting provider, this applies after seven days at the latest. Storage beyond this period is possible. In this case, the user’s IP address will be erased or disguised, making it impossible to identify the accessing client.

Our website is hosted by STRATO AG, Otto-Ostrowski-Str. 7, 10249 Berlin, Germany, Please consult the following page for information about data protection there:

The collection of data to provide the website and the storage of data in log files is required for the website’s operation. As a result, there is no possibility for the user to object.

III. Web analysis

This website and its individual offerings are part of the IfZ’s public relations work. We have a legitimate interest (Art. 6 [1][f] GDPR) in being able to optimally tailor the information and content we provide to the needs of the users and therefore statistically evaluate visits to this website. For this purpose, we use the software “Matomo” (, a service from the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The software places a cookie (a text file) on your computer that makes it possible to recognize your browser. Each time you visit our website, our system collects the following data:

  • your IP address, shortened by the last two bytes (anonymized)
  • the subpage visited and the time of the visit
  • the page from which you accessed our website (referrer)
  • your browser, the plugins you use, and your screen resolution
  • the length of time you spend on our website
  • the pages you visit from the subpage that you accessed

The software and the data collected with it are stored on the servers of our hosting provider, STRATO AG. After seven days, this data is anonymized. It is not shared with third parties. 

You can object to the processing of this data in the following ways:

  • By not checking the ‘Statistics’ box in the cookie consent banner.
  • You can completely prevent the storage of cookies in your browser. However, this may mean that you can no longer use some functions of our website that require identification (e.g. orders, personal settings, etc.).
  • You can activate the ‘Do not track’ setting in your browser. Our Matomo system is configured to respect this setting.

IV. Use of cookies

Our website uses cookies. Cookies are text files that can be stored in or by the internet browser on your computer system as soon as you access our website. These cookies allow your browser to be uniquely identified when you return to the website. 

We use cookies to make our website more user-friendly. Some elements of our website technically require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

  • Session and user IDs
  • Information on the type of cookie consent

The data is not stored together with other personal data of the users.

The legal basis for the processing of personal data using cookies is our legitimate interest in providing a functioning and user-friendly website (Art. 6[1][f] GDPR). The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. We require cookies for the following applications:

  • To store the cookie settings you have made. These cookies are technically necessary and serve to comply with our obligation to provide proof in accordance with the GDPR.
  • To collect data about user behaviour. These cookies are optional and can be excluded or revoked by you via the cookie consent banner.

The user data collected through technically necessary cookies are not used to create user profiles.

ookies are stored on your computer and transmitted from it to our site. You yourself therefore also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. When you access our website, you will be informed about the use of cookies and can select whether, in addition to the technically necessary cookies, you also wish to allow cookies for analysis purposes, known as statistics cookies, or for convenience functions. If you allow cookies for analysis purposes and for convenience functions, this constitutes consent within the meaning of Art. 6 [1][a] GDPR. You can revoke your consent at any time. If technically necessary cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent. 

V. Contact form and email contact

Our website contains a contact form that you can use to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored. This information includes:

  • your name
  • your message
  • your email address

In addition, the date and time of sending the message will be saved.

We will inform you about the specific processing of the data in the context of the usage process and obtain your consent, which in this case forms the legal basis for the data processing (Art. 6 [1][a] GDPR). Reference is also made to this data protection declaration.

Alternatively, it is possible to contact us via the email addresses provided. In this case, the personal data transmitted with your email will be processed. Depending on the specific circumstances of contact, the legal basis for processing the transmitted data is the performance of a task in the public interest (Art. 6 [1][e] GDPR), our legitimate interest in communicating with you (Art. 6 [1][f] GDPR), or the performance of a contract or implementation of pre-contractual measures (Art. 6 [1][b] GDPR). The data transmitted by email or the data from the input mask are used exclusively for processing the exchange. The other data processed during the sending process serve to prevent misuse of the contact form and to protect our IT systems. The data is not shared with third parties.

The data will be deleted as soon as the respective exchange with you has ended or your request has been processed. The exchange is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified. You can revoke your consent to the processing of your personal data at any time by contacting the listed contact persons. 

VI. Social media accounts

The PMJ project is active on the following social media platforms:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
  • Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
  • Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)

When you use the services of these providers, usage data may be collected and, if necessary, stored in server logs. We have no influence on the type and scope of the transmitted or stored data. For more information on the data collected by these providers, their storage, and their use, please refer to the privacy policy of the respective provider:

VII. Data transmission

Your personal data will only be transmitted to state institutions and authorities in cases required by law or for criminal prosecution due to attacks on our network infrastructure. Data will not be shared with third parties for other purposes.

VIII. Data subject rights

As a data subject whose personal data is collected in the context of the aforementioned services, you have the following rights under the GDPR, unless legal exceptions apply in individual cases:

  • Right of access (Art. 15 GDPR): Upon request, you will receive comprehensive access to the data concerning you as well as information on the processing purposes, storage period and, if applicable, recipients of this data.
  • Right to rectification (Art. 16 GDPR): If the personal data concerning you is inaccurate or incomplete, you have the right to have this data corrected.
  • Right to erasure (Art. 17 GDPR): You have the right to have personal data concerning you deleted. However, this is only possible if the data concerning you is no longer necessary for the purposes for which it was collected or has been processed unlawfully, or if you have revoked consent in this regard. 
  • Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing of data concerning you under certain circumstances. 
  • Right to data portability (Art. 20 GDPR): If the processing of your data is based on your consent or a contract, you have the right to receive this data from us in a common, machine-readable format in order to transfer it to another controller if necessary. 
  • Right to object (Art. 21 DSGVO): You have the right to object to further processing of your data for reasons arising from your particular personal situation. 
  • Right to withdraw consent (Art. 7[3]): If the processing of your data is based on consent, you have the right to withdraw it at any time for the relevant purpose. 
  • Right of complaint to the supervisory authority (Art. 77 GDPR): You have the right to contact the supervisory authority with a complaint against data processing. The supervisory authority responsible for the IfZ is the Bavarian State Commissioner for Data Protection. You can file the complaint online: