The Institute for Digitalization in Tax law (IDSt) as operator of this website takes the protection of the personal data of users and interested individuals very seriously. The following information will provide you with an easy to navigate overwiew of what will happen with your personal data when you visit our website and your rights according to the GDPR:
1. Contact details
The data processing controller on this website is:
Institut für Digitalisierung im Steuerrecht e.V. (IDSt)
If you have questions about any data protection related issue and how to exercise your data protection rights do not hesitate to contact us under
2. What sources and data do we use?
We only process the personal data that is required for the respective purpose of the processing (see section 3). This is data that we have received directly from you (e.g.: Data that you have entered in a contact form or communicated to us in another form), contact data reported to us by members of their representatives in IDSt, and which we have obtained from publicly accessible sources (e.g.: Internet, media, press, etc.) in a permissible manner and which may be processed.
3. Who gets your data?
Access to your data within the IDSt is limited to those whose access is necessary for the purpose of fulfilling the processing. In some cases, IDSt uses service providers who receive data for this purpose. We only use these service providers if they comply with our written data protection instructions and guarantee compliance with the requirements of the EU General Data Protection Regulation and the BDSG. Otherwise, we may only pass on data to data recipients outside the IDSt if this is required by law, if you have given your consent and/or if a transfer is permitted under the data protection provisions of the General Data Protection Regulation.
4. How long will your data be stored?
The length of storage of your data depends on the purpose of the data processing. Accordingly, we only store your data for as long as is necessary for the purposes for which it is processed. If the data is no longer required to fulfill the purpose, it will be deleted on a regular basis, unless further processing is necessary for the purpose of fulfilling retention obligations under commercial and tax law or for the preservation of evidence under statutes of limitation.
5. Your data protection rights
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data in accordance with Art. 15 GDPR. In addition, you have the right to rectification under Article 16 of the GDPR, to erasure under Article 17 of the GDPR, to restriction of processing under Article 18 of the GDPR, the right to object to processing under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. You can contact at any time with questions regarding your data protection rights and other questions on the subject of personal data. In the event of violations of data protection law, you have a right of appeal pursuant to Art. 77 GDPR in conjunction with. § 19 BDSG at a competent supervisory authority.
You can revoke the consent you have given us for data processing at any time by informally notifying us by e-mail to . Your revocation is only valid for the future. The processing of your data already carried out on the basis of the consent until the revocation remains lawful.
Right of objection according to Art. 21 GDPR
You may object to the processing of your personal data for advertising purposes – including profiling related to direct marketing – at any time without stating reasons. In addition, you also have a general right of objection (cf. Art. 21 (1) GDPR). In this case, the objection to data processing must be substantiated.