Data protection is an important concern for the TUM Think Tank. We want you to know when we store which data and how we use it. Personal data is only collected on the central web server to the extent technically necessary. Data processing is subject to the applicable data protection regulations, in particular the General Data Protection Regulation (DSGVO) the Bavarian Data Protection Act (BayDSG) and the German Telemedia Act (TMG).

In the following, we inform you about the type, scope and purpose of the collection and use of personal data. This information can be accessed at any time from our website.

Technical implementation

The web servers of the TUM Think Tank are operated by

ALL-INKL.COM - New Media Münnich
Main street 68, 02742 Friedersdorf


When you access this or other web pages, you transmit data to our web server via your Internet browser. The following data is temporarily recorded in a log file during an ongoing connection for communication between your Internet browser and our web server:

  • IP address of the requesting computer
  • Date and time of access
  • Name, URL and transferred data volume of the retrieved file
  • Access status (requested file transferred, not found, etc.)
  • Identification data of the browser and operating system used (if transmitted by the requesting web browser)
  • Web page from which access was made (if transmitted by the requesting web browser)
  • The data in this log file is processed as follows:

The log entries are continuously evaluated automatically in order to detect attacks on the web servers and to be able to react accordingly.
In individual cases, i.e. in the event of reported malfunctions, errors, and security incidents, a manual analysis is carried out.
Log entries older than seven days are anonymized by shortening the IP address.
The anonymized logs are used to create access statistics. The software used for this purpose is operated by
The IP addresses contained in the log entries are not merged with other data, so cannot draw any conclusions about individual persons.

Active components

Active components such as JavaScript or Active-X-Controls are used in this website. This function can be switched off by you through the settings of your Internet browser.

Evaluation of user behavior (web tracking)

In this website, data is collected and stored using the web analysis service software Matomo (, a service of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, ("Matomo") on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes pursuant to Art. 6 (1) lit. f DSGVO. From this data, pseudonymized usage profiles can be generated for the same purpose.

Pseudonymized usage profiles can be created and evaluated from this data for the same purpose. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's Internet browser. Among other things, the cookies enable the recognition of the Internet browser. The data collected using Matomo technology (including your pseudonymized IP address) is processed on servers of the LRZ.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

You can prevent the installation of cookies by setting your browser accordingly. However, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.

We recommend that you read the entire Matomo privacy policy:

Deactivation Matomo Tracking (Opt-Out)

If you do not agree with the storage and analysis of this data by Matomo from your visit, then you can object to the storage and use below by mouse click at any time. In this case, a so-called opt-out cookie will be placed in your browser, which means that Matomo will not collect any session data.

Opt-out Matomo
If you delete your cookies, this has the consequence that the opt-out cookie is also deleted and may have to be reactivated by you.


In order to extend the range of functions of our Internet offer and to make the use more comfortable for you, we partly use so-called "cookies". With the help of these cookies, data can be stored on your computer when you call up our website. However, you can deactivate the storage of cookies or set your browser so that cookies are only stored for the duration of the respective connection to the Internet. However, this could limit the functionality of our offer.

Online forms

Personal data that you may send to us via contact forms, registration forms and similar web pages on our web servers will only be accepted with your consent and will only be used for the purpose stated in the forms. Please note the corresponding information on the forms.

In all forms, only the personal data that is absolutely necessary is collected. Your data will not be passed on to third parties unless this is explicitly stated in the form.

Your personal data will be deleted after the purpose has been fulfilled, unless you have given your consent for further contact.

You can revoke your consent at any time for the future. To do so, please contact Your data will then be deleted immediately.

Electronic mail (e-mail)

Information that you send to us unencrypted by electronic mail (e-mail) can possibly be read by third parties on the transmission path. As a rule, we are also unable to verify your identity and do not know who is hiding behind an e-mail address. Legally secure communication by simple e-mail is therefore not guaranteed. Like many e-mail providers, we use filters against unwanted advertising ("SPAM filters"), which in rare cases automatically classify even normal e-mails as unwanted advertising by mistake and delete them. E-mails that contain harmful programs ("viruses") are automatically deleted by us in any case.

Use of YouTube plugins (videos)

Our website integrates plugins from, which is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

When you call up pages of our website that are provided with such a plugin, a connection is established to the Youtube servers and the plugin is displayed on the website by informing your browser. This transmits to the Youtube server which of our Internet pages you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your respective personal user accounts of these platforms. When using these plugins, such as clicking/starting buttons of a video or sending a comment, this information is assigned to your e.g. YouTube user account, which you can only prevent by logging out before using the plugin. For more information on the collection and use of data by the platform or plugins, please refer to the privacy policy of YouTube at the following link:

We use embedded YouTube videos in extended data protection mode. This means: YouTube does not store cookies for a user who views a web page with an embedded YouTube video player, but does not click on the video.

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.


This website uses MailerLite to send newsletters. The provider is UAB “MailerLite”, J. Basanaviciaus 15, LT-03108 Vilnius, Lithuania (hereinafter referred to as MailerLite).

MailerLite is a service that, among other things, can be used to organize and analyze the sending of newsletters. The data you enter to subscribe to the newsletter is stored on MailerLite’s servers.

If you do not want MailerLite to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

Data analysis by MailerLite

MailerLite enables us to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened, and which links were clicked on, if any. In this way we can determine which links were clicked on particularly often. We can also see whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can see whether you have made a purchase after clicking on the newsletter. MailerLite also enables us to divide the newsletter recipients into different categories (“clustering”). The newsletter recipients can be divided according to age, gender, or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups.

Detailed information on the functions of MailerLite can be found at the following link:

The MailerLite privacy policy can be found at:

Legal basis

Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time for the future.

Storage period

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to apply. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR. This does not affect data stored by us for other purposes.

After you have been removed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6(1)(f) GDPR). There is no time limit on storage in the blacklist.

Two clicks for more data protection

Only when you click on a social network button does it become active and your browser establishes a direct connection with the respective servers. The first click on the button thus means that you give your consent to the transmission of data to the corresponding provider.

By activating the button, the provider receives the information that you have accessed the corresponding page of our website. If you are logged into the respective social network, the visit can be assigned to your account from this moment on, even if you do not confirm the button a second time. If you interact with the plugins, for example by submitting a comment by pressing the button a second time, the corresponding information is transmitted from your browser directly to the provider and stored there.

Change of the data protection provisions

We reserve the right to occasionally adapt our data protection provisions so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting the personal information we collect. Your continued use of the Service constitutes your agreement to this Privacy Policy and any updates to it.

Data Protection Officer

You can contact the official data protection officer at the Munich School of Politics and Public Policy by e-mail at

Information and correction

You have the right, upon written request and free of charge, to receive information about the personal data that is stored about you. In addition, you have the right to have incorrect data corrected, blocked and deleted.

Don't lose track of innovation.

Sign up to our newsletter and follow us on social media.