Privacy Policy


The GHPP website provides information about the funding program initiated by the Federal Ministry of Health (BMG) and its projects.

The protection and security of personal data is a top priority for the programme. We therefore make sure that we strictly comply with the rules of the EU’s General Data Protection Regulation (GDPR) and the (new) German Federal Data Protection Act (BDSG). The following provides information on the type of data that is recorded and the purpose for which it is collected.


Controller pursuant to General Data Protection Regulation (GDPR) is

Federal Ministry of Health (Bundesministerium für Gesundheit, BMG)

Primary Office: Rochusstr. 1, 53123 Bonn
Secondary Office: Mauerstr. 29, 10117 Berlin (Mitte)

Phone: +49 (0)228 99441-0

If you have concrete questions on the protection of your data or need further information regarding the handling of personal data by the Federal Ministry of Health, please feel free to also contact the Federal.

Federal Ministry of Health
– Data Protection Officer –
11055 Berlin


Information about the collection of personal data

The Federal Ministry of Health (BMG) has commissioned the Gesellschaft für Internationale Zusammenarbeit (GIZ) with the development of this website.  The website is hosted by the Federal Institute for Drugs and Medical Devices (BfArM). The Federal Office of Administration, provides the domain management service.

Every visit to our website is stored on a protocol file to ensure data security. To this end, the following data is stored for a maximum of 7 days:

  • date and time of access
  • volume of data transferred
  • notice whether data was successfully accessed
  • pseudonymized IP address of the user or provider
  • internet address of website visited directly before (referrer)
  • information about the programme retrieving the data (user agent)


The Global Health Protection Programme (GHPP) is not able to directly link IP addresses to users and rules it out. IP addresses are only analysed in cases of attacks against our website, breaches of public order or other cases of illegal actions in connection with the website. An analysis of the IP address to reveal the identity of the user can only be conducted with the help of the user’s provider and only in connection with investigations by the police or public prosecutors. This data is not used for statistical purposes. We do not pass on this data to third parties for commercial or non-commercial use.


Cookies policy

The use of cookies is not required for this website. Cookies are short text files that store information from a website or domain on your computer for a period of time and send it back to the server when the site is visited again. Most browsers are set up to automatically accept cookies. Users can deactivate or reset this function so that cookies are only stored for the time of the particular session.Some website functions do require the use of cookies to work properly:


Borlabs Cookie Plugin

This website uses a Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie preferences. Borlabs Cookie does not collect any personal data. The borlabs-cookie cookie stores the consent you have given when you entered the website. If you wish to revoke these consents, simply delete the cookie from your browser. If you re-enter/reload the website, you will be asked again for your cookie consent.


Matomo web analysis service

1. Scope of processing of personal data

Our website uses Matomo, an open source software for the statistical analysis of visitor access. Matomo uses cookies that are stored on your computer and which enable an anonymous analysis of your use of the website. This information cannot be used to identify a specific person, as your IP address is anonymised immediately after processing and storage.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data using cookies is Art. 6(1) lit. f GDPR.

3. Purpose of data processing

Matomo is used for the purpose of improving the quality of our website and its contents. It tells us how the website is used so that we can constantly optimise our offer.

4. Duration of storage, right of objection and removal

The cookies used by Matomo are stored on the user’s computer, from which they are transmitted to our website. This means that you, the user, have full control over the use of cookies. Cookies that have already been stored can be erased at any time. This can also take place automatically.

You can object to the storage and analysis of this data by Matomo at any time. Open Cookie Preferences

In this case, an op-out cookie is permanently stored in your browser, which prompts Matomo not to collect any data for storage or analysis. However, if you intentionally or unintentionally delete this cookie, this also withdraws the objection to the data storage and analysis, which can be renewed using the above link.

Alternatively, most modern browsers have a “Do Not Track” option, which tells websites not to track your user activities. Matomo respects this option.

Social Media-Plugins – YouTube with enhanced privacy

This website integrates YouTube videos. The sites are operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about the users of this website before they view the video. However, the forwarding of data to YouTube partners is not necessarily prevented by the enhanced privacy mode. YouTube therefore establishes a connection to the Google DoubleClick network irrespective of whether you view a video. A connection to YouTube’s servers is established as soon as you start a YouTube video on this website. This informs the YouTube server about which of our webpages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your search behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. In addition, YouTube can store various cookies on your terminal after starting a video. These cookies allow YouTube to obtain information about visitors to this website. This information is used to prepare video statistics, improve user-friendliness and prevent fraud attempts, among other things. The cookies are stored on your terminal until they are deleted by you. In some cases, starting a YouTube video may trigger other data processing operations over which we have no influence. We wish to draw your attention to the fact that the BMG has no control over the conditions for the use of the above-mentioned services and their operators. We, for our part, will always handle your data carefully but cannot accept liability for the conduct of social network operators or third parties. We cannot take responsibility for what information YouTube retrieves and how they protect your information. Information on this can be found on the websites of these providers. You can disable third-party cookies by adjusting your browser settings accordingly. YouTube is used in the interest of ensuring an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. If consent has been requested (e.g. consent to store cookies), processing takes place based on Art. 6(1) lit. a GDPR; the consent can be revoked at any time. You can find more information on privacy at YouTube in its privacy policy at:


Processing of personal data when contacting us

When users contact us, the provided data is processed to handle the inquiry. The following contact options are available:

Alternatively, it is possible to contact the GHPP secretariat using the provided email addresses. In this case, the personal data of the user transmitted with the email (such as name, address) or at least the email address itself, as well as the information contained in the email, will be stored solely for the purpose of establishing contact and processing the inquiry. The legal basis for processing the data transmitted via email is Article 6(1)(e) of the GDPR in conjunction with § 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz).


Legal basis for the collection of personal data

The use of our website is generally possible without providing personal information. If we collect personal data from you on this page, it will only be done with your revocable consent (e.g., when sending newsletters, according to Article 6(1)(a) of the GDPR).

Furthermore, we only process personal data if we are legally obligated to do so (according to Article 6(1)(c) of the GDPR) or if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, as part of the GHPP (according to Article 6(1)(e) of the GDPR in conjunction with § 3 of the Federal Data Protection Act).


Disclosure of Personal Data

Your data will not be disclosed to third parties unless required or authorized by legal provisions.


Transfer of Data to Third Countries

Data is not transferred to third countries.


Duration of Data Storage

Personal data is routinely erased, if it is no longer required to execute a contract (for example, employment, grant, rental, purchase or service contracts), no separate consent has been provided by the data subject and statutory retention obligations and periods do not require any extended data retention.


IT Security of User Data

The protection of personal data is of great importance to the GHPP. Therefore, technical and organizational security measures are in place to protect the data against accidental and intentional manipulation, accidental deletion, and unauthorized access. These measures are regularly updated in accordance with technological advancements and continuously adapted to address emerging risks.


Protection of minors

Persons under the age of 18 should not submit personal information to us without the consent of their parent or legal guardian. We do not request personal data from children or young people without the consent of their parents or legal guardian. We do not knowingly collect such data, and we do not pass it on to third parties.


Your Rights

You have the following rights regarding your personal data, vis-a-vis the responsible entity:

  • Right to information, Article 15 of the GDPR
  • Right to correction, Article 16 of the GDPR
  • Right to correction and erasure, Article 17 of the GDPR
  • Right to restriction of processing, Article 18 of the GDPR
  • Right to object to the collection, processing, and/or use, Article 21 of the GDPR
  • Right to data portability, Article 20 of the GDPR

Where the processing of personal data is based on your consent (Article 6 (1) (a) GDPR), you may revoke such consent at any time for the purpose in question. The lawfulness of processing your data based on your given consent continues until such time as the revocation of such consent has been received. You may assert the above-mentioned rights at: or Furthermore, you are entitled to make a complaint to the data protection supervisory authority (Federal Commissioner for Data Protection and Freedom of Information).


June 2023