Privacy Policy
Last Updated: November 2025
We are pleased about your interest in the Voact petition platform, operated by Oma Gertrud e.V. The protection of your personal data is very important to us. Below we inform you comprehensively about which data we collect, how we process it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Data Controller under GDPR
Oma Gertrud e.V.
Wilhelmstraße 32
51379 Leverkusen
Deutschland / Germany
Email for privacy inquiries: datenschutz.de@voact.org
Board Representatives:
- Marco Antonio Di Prato
- Mario Himmelfreundpointner
Oma Gertrud e.V. is the operator and data controller for all processes that take place on this petition platform, including the collection, storage, publication and management of petitions and signatures.
2. General Information on Data Processing
We only process personal data of our users to the extent necessary to provide a functional petition platform, to process the petition process, and to protect our legal or legitimate interests.
Processing always takes place in accordance with the requirements of the European GDPR and supplementary national data protection laws.
3. Data We Process
3.1 Data from Petition Creators
When you create a petition, we process the following data:
- First and last name (required)
- Email address (required)
- Address (optional, but may be requested for identity verification)
- Title, text and content of the petition
- Uploaded files (e.g. images, PDFs)
- Date and time of publication
- IP address and technical log data
We point out that petitioners are fully responsible for the content of their petitions. Oma Gertrud e.V. merely provides the technical platform and does not adopt the content as its own.
3.2 Data from Supporters (Signers)
When signing a petition, we store:
- First and last name
- Email address
- City or country (optional)
- Time of signature
- IP address
Signers can choose whether their name is displayed publicly or anonymized.
3.3 Technical Data When Visiting the Website
When accessing our website, technical data is automatically collected:
- IP address of the accessing computer
- Browser type and version
- Operating system used
- Time of access
- Referrer URL
- Hostname of the accessing device
This data is technically necessary to ensure the stability and security of the platform.
4. Purposes of Data Processing
We process your data in particular for the following purposes:
- Provision and operation of the petition platform
- Creation, publication and management of petitions
- Enabling the signing of petitions
- Communication with petitioners and signers
- Abuse and fraud prevention
- Proof to authorities or institutions, if required
- Fulfillment of legal obligations
- Documentation of public petitions and democratic participation
5. Legal Basis
The processing of personal data is based on the following legal bases:
- Art. 6 Abs. 1 lit. b DSGVO - Fulfillment of a usage contract
- Art. 6 Abs. 1 lit. f DSGVO - legitimate interest, especially platform operation, security, abuse prevention
- Art. 6 Abs. 1 lit. c DSGVO - legal obligations
- Art. 6 Abs. 1 lit. a DSGVO - consent, e.g. for public display of name
6. Data Sharing
In principle, we do not pass on personal data to third parties.
Data sharing only occurs in the following exceptional cases:
- To authorities, when we are legally obligated to provide information
- To technical service providers who act within the scope of order processing according to Art. 28 GDPR
- To petitioners, when supporters have expressly agreed that their data may be transmitted to the petitioner (e.g. for officially submitted petitions to authorities)
No data sharing for advertising purposes takes place.
7. Storage Periods
- Petitions remain online until they are removed or deleted by the petitioner.
- Data of signers is deleted when the purpose has ceased to exist or deletion is requested.
- Server log files are usually deleted or anonymized after 30 days.
- Legal retention periods (e.g. tax law) remain unaffected.
8. Your Rights under GDPR
You have the following rights at any time:
- Access to your data (Art. 15 DSGVO)
- Correction of incorrect data (Art. 16 DSGVO)
- Deletion of your data (Art. 17 DSGVO)
- Restriction of processing (Art. 18 DSGVO)
- Objection to processing (Art. 21 DSGVO)
- Data portability (Art. 20 DSGVO)
- Revocation of granted consents (Art. 7 Abs. 3 DSGVO)
To exercise your rights, simply send a message to:
datenschutz.de@voact.org
9. Cookies and Analytics
The platform uses only technically necessary cookies, e.g. for:
- Login function
- Management of petitions
- System security
No tracking or marketing cookies are used unless you expressly consent.
11. Security
We use modern technical and organizational measures to protect your data as best as possible:
- SSL/TLS-encryption
- Access restrictions
- Regular security updates
- Monitoring and logging of security-relevant processes
- Protection against unauthorized access to databases
12. Responsibility for Petition Content
The respective petitioner alone is responsible for each published petition. According to § 10 TMG, Oma Gertrud e.V. as a host provider is not obliged to constantly monitor content.
In case of notice of illegal content, we will review it immediately and remove it if necessary.
13. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy if necessary. The current version published on the website always applies.
Questions about Privacy?
If you have any questions about the collection, processing or use of your personal data, or if you need information, correction, blocking or deletion of data, please contact: