social.bund.de
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
A government site logs visits and contact details; it is not an AI app and does not describe training or ads.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Visit logs (IP, browser, pages) plus name and email if you contact them.
Read the exact line
Privacy policy
“Specifically, for every instance of access/data retrieval, the following data will be processed:Request (requested URL ) or name of the requested fileDate and time of the request/queryReferrer URL (referring website)IP addressBrowser”
Training
They use logs for stats, security, and to answer messages you send.
Read the exact line
Privacy policy
“Any time the website is accessed and any time a file is retrieved, data related to this process is processed in a log file for a limited time for statistical and backup purposes.”
Sharing
Staff, IT processors, and other public bodies if needed to handle your request.
Read the exact line
Privacy policy
“If such disclosure is necessary in order to process your query, the personal data you transmit will be disclosed to the competent authority.”
Kept
IP addresses are deleted after 80 days; tracking cookies last 13 months.
Read the exact line
Privacy policy
“The IP address is deleted automatically after 80 days.”
Controls
You can use Do Not Track for stats and ask them to access, fix, or erase your data.
Read the exact line
Privacy policy
“You can prevent Matomo from collecting data by activating the “Do Not Track” function in your internet browser.”
Fine print
The policy we read has no terms on accounts, payments, or who pays if something goes wrong.
Read the exact line
Privacy policy
“It is generally possible to use the bundeswehr.de website without disclosing personal data.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn on Do Not Track for Matomo
Browser Settings -> Privacy
Ask to access, correct, or erase your data
Contact the data protection commissioner at DSBGBBMVg@bmvg.bund.de
Refuse the contact form if you do not consent
Contact form checkbox; without it the form is not submitted
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can keep visit data longer than your visit if they think it is needed to protect government systems.
Read the exact line
Privacy policy
“Based on Article 6(1)(e) of the EU in conjunction with Section 5 of the German Act on the Federal Office for Information Security, we are also entitled to store data for protection against attacks on the internet infrastructure of the FMoD and the federal government’s communications technology even past the time of your visit.”
For example, your IP could stay in security logs after you leave the site.
Visit logs can be used if they investigate attacks on their systems.
Read the exact line
Privacy policy
“This data is used to initiate legal and criminal proceedings in the event of attacks on the communications technology.”
For example, they might use your IP in a case about a cyber attack.
A cookie for visit stats can stay on your device for 13 months.
Read the exact line
Privacy policy
“Tracking cookies, on the other hand, are used for statistical analysis of use of the website; they are stored for 13 months and only passed on to Matomo (see 4(a)) in an form so that no conclusions can be drawn about the user.”
For example, a cookie from a visit in January could still be there the next year.
If you use embedded social or video services, those companies follow their own rules, not this site’s.
Read the exact line
Privacy policy
“We would therefore like to draw your attention to the fact that services such as YouTube, Facebook, Instagram, X, Mastodon and Bluesky, which are also integrated into our web presence, store user data in accordance with their own data use policies and use such data for commercial purposes.”
For example, clicking a YouTube video on the site can send data to YouTube.
Emails you send are kept as official records so they can reply.
Read the exact line
Privacy policy
“If you contact us by e-mail, the data you send (particularly your surname, first name and address, but at the very least your e-mail address and the information/personal data contained in the e-mail) will be processed in accordance with the guidelines for handling and managing records in the Federal Ministries.”
For example, a complaint you email is stored with your name and address.
They say they do not share visit logs except when the law or an investigation requires it.
Read the exact line
Privacy policy
“We will not disclose data under any other circumstances or merge it with other data sources.”
For example, they say they will not sell your browsing log to advertisers.
Turning on Do Not Track in your browser stops their visit stats tool from recording you.
Read the exact line
Privacy policy
“You can prevent Matomo from collecting data by activating the “Do Not Track” function in your internet browser.”
For example, you can switch on Do Not Track in browser privacy settings.
The IP they log when you visit is wiped after 80 days.
Read the exact line
Privacy policy
“The IP address is deleted automatically after 80 days.”
For example, an IP from a visit in March should be gone by June.
Contact-form messages are encrypted in transit and stored on servers in Germany.
Read the exact line
Privacy policy
“The contents of the contact form will be transmitted via SMTP/TLS encryption. The contact e-mail address will store your data on secure servers in Germany.”
For example, a form message is sent with TLS and kept on German servers.
A normal helpline call is not stored as personal data unless you ask for a call back or a letter.
Read the exact line
Privacy policy
“If you contact us via the Citizens’ Helpline by calling +49(0)30/1824-24242, no personal data will be processed.”
For example, just calling the number does not create a named file about you.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- GDPR
- Europe's privacy law, which requires a legal reason for using your data and gives you strong rights over it. For example, an EU user can demand to know why the app keeps their location history.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
How we got here · grade B · score 50/100 · 14 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
Besides contact details you send, they log IP address, browser, referrer, pages, and cookies for stats and security.
Does it record your voice, face or body, and what happens to that?
They do not describe recording voice, face, or body. A helpline call is not processed as personal data unless you ask for a callback.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They describe Matomo stats and cookies, not advertising profiles. Embedded social and video services follow those companies’ own rules.
Do they sell or share your data, and can you opt out?
They share with processors and other public bodies when needed, and for legal or security cases. They say they will not disclose visit data otherwise.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
IPs are deleted after 80 days and tracking cookies last 13 months. Deleting other personal data is through your GDPR rights by contacting them, not an in-app button.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They mention TLS for the contact form and storage on secure servers in Germany. No independent audit is described.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The policy text we read does not explain how they will tell you about changes.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
No paid features or subscriptions are described.
The privacy policy is 1,927 words at a professional or legal expert level (Flesch reading ease 27.7).
