Privacy Policy


Each time a user accesses the website and each time a file is accessed, Versorgungsanstalt des Bundes und der Länder (VBL) collects and processes data relating to that process. With our privacy policy, we inform you about the processing of personal data when visiting our website.

VBL collects and uses personal data (e.g. name, e-mail address) – except for registering at and using My Dashboard – only if you enter it into an input field and send it to VBL. Entry of this information is voluntarily. Your personal data will be used exclusively for the relevant purpose. 

Legal framework for data protection

VBL collects, processes and uses personal data in compliance with the provisions of data protection law, in particular the German Telemedia Act (Telemediengesetz), the General Data Protection Regulation (GDPR) and the German Data Protection Act (Bundesdatenschutzgesetz – BDSG). In this context, VBL takes into account the principle of data minimisation, i.e. personal data is only collected and processed to the extent necessary for the provision of the services and the performance of the task.

VBL’s employees are obliged to maintain confidentiality. In accordance with the statutory requirements, VBL has implemented the necessary technical and organisational measures to protect personal data.


On visiting a VBL web-page, the data for this action will be stored on a log file. 

The information comprises:

  • the type and version of browser used
  • the used operating system 
  • Referrer URL
  • the hostname of the accessing computer
  • the time of the server inquiry 
  • the visited pages
  • possible access errors and
  • the IP address

The data stored is exclusively used for data security and customized development of the websites. It is not merged with other data sources. 

As operator of the website VBL has a legitimate interest in the technically error free depiction and the optimization of the website. In order to achieve this, server log files are necessary.

The website is hosted by an external service provider (host),

vzw SigedisEuropa esplanade 3 Zuidertoren 7e verdieping 1060 Brussel.

The data mentioned above and personal data collected on this website in general, is stored on the servers of the host. The servers are located exclusively on the territory of the European Union (EU) or the territory of the European Economic Area (EEA).

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.  

In addition to this the data will not be transferred to third parties, neither for commercial nor non-commercial purposes.

Use of cookies

You will find more detailed information on all the cookies used by VBL and the handling of these cookies in our Cookie Policy.

Registration for My Dashboard

You have the option to register on this website for the portal My Dashboard to use additional website functions. We use the data you enter only for the purpose of using the respective offer or service you have registered for. There is no need of further information at the time of registration since you may register through an individual PIN. To notify you of any important changes to the scope of our portfolio or in the event of technical modifications, we shall use the e-mail address provided after the registration process. We shall process the data entered after the registration process on the basis of your consent (Art. 6(1)(a) GDPR). The data recorded after the registration process shall be stored by us as long as you are registered on this website. Subsequently, such data shall be deleted. This shall be without prejudice to mandatory statutory retention obligations.

You will find more detailed information in our My Dashboard - Terms and Conditions and My Dashboard - Data Protection Principles.

Newsletter Data & Mautic Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need an e-mail address as well as information that allows us to verify that you are the owner of the e-mail address provided, and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties. The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6(1)(a) GDPR). 

You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date. The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to apply. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR. After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

If you would like more information about the newsletter please click here:


For our Newsletter we are using the marketing tool Mautic. The provider is Acquia Inc, 53 State St, Boston, Massachusetts 02109, USA. (hereinafter “Mautic”) but this open source software is hosted by ourselves (same hosting service provider). Mautic is a tool for optimizing and automating our marketing activities.

Website analysis

This website uses functions of the web analysis service Matomo

The provider of the service is:

We have integrated the Matomo component of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, on this website. 

Matomo is a software tool for web analysis, i.e. for collecting, collating and evaluating data on the behaviour of visitors to websites. Among other things, data is collected about the website from which a data subject has accessed a website (so-called referrer), which sub-pages of the website have been accessed or how often and for how long a sub-page has been viewed. This is used to optimise the website.

The software is operated on the server of our data processor Sigedis, and the log files, which are sensitive under data protection law, are stored exclusively on this server.

Matomo sets a cookie on your IT system. The setting of the cookie enables us to analyse the use of our website. Each time one of the individual pages of this website is called up, the Internet browser on your IT system is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical procedure, we obtain knowledge of personal data, such as the IP address of the person concerned, which we use, among other things, to trace the origin of visitors and clicks.

By means of the cookie, personal information, such as the time of access, the place from which access originated and the frequency of visits to our website are stored. Each time you visit our website, this personal data, including the IP address is transmitted to our server. This personal data is stored by us. We do not pass on this personal data to third parties.

You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Matomo from setting a cookie on your IT system. In addition, a cookie already set by Matomo can be deleted at any time via an internet browser or other software programmes.

Furthermore, you have the option of objecting to and preventing the collection of data generated by Matomo that relates to a use of this website. To do this, you must set an opt-out cookie. If your IT system is deleted, formatted or reinstalled at a later date, the data subject must set an opt-out cookie again. 

These processing operations are only carried out if express consent is given in accordance with Art. 6 Para. 1 lit. a DS-GVO. 

Further information and the applicable data protection provisions of Matomo can be found at

This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application. For more information on Google Web Fonts, please follow this link: and consult Google’s Data Privacy Declaration under: 

Font Awesome (local embedding)

This website uses Font Awesome to ensure the uniform use of fonts on this site. Font Awesome is locally installed so that a connection to Fonticons, Inc.’s servers will not be established in conjunction with this application. For more information on Font Awesome, please and consult the Data Privacy Declaration for Font Awesome under: 

Information service and advice regarding using E-mail

If you want to use our information service and send us an E-mail, your personal data (E-mail address) will automatically be transferred according to the configuration of your E-mail program. VBL uses your E-mail address as well as further personal data, which is contained in the E-mail, exclusively for the information service. It will not be transferred to third parties. Please note that currently the confidentiality of information on the Internet is not guaranteed without further measures (e.g. encoding) when using E-mail. The content which is sent with an E-mail that is not encoded should be no more confidential than the content of a post card. Messages with valuable content should be sent by post to protect them and avoid a third party gaining access to their content.

Rights of data subjects

If requested, we will provide you with information on the data concerning you stored by us (Article 15 GDPR and Article 34 BDSG). You can also arrange to have incorrect data rectified (Article 16 GDPR). If the statutory conditions are fulfilled, you may also demand the restriction of processing (Article 18 GDPR) or the erasure of data (Article 17 GDPR and Article 35 BDSG) or object to the processing of personal data relating to you (Article 21 GDPR and Article 36 BDSG). You also have a right to data portability (Article 20 GDPR).

VBL Data Protection Officer

In case of complaint and any further questions about data protection at VBL, please contact our data protection officer

Thilo Mangler
Hans-Thoma-Straße 19
76133 Karlsruhe
E-Mail Datenschutzspam

Data protection supervisory authority

As a public-law institution, VBL is under federal supervision by the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit – BfDI).

The BfDI monitors VBL’s compliance with the provisions of the General Data Protection Regulation and the German Data Protection Act, as well as other data protection regulations. You may contact the BfDI if you believe that your rights have been infringed in connection with the collection, processing or use of personal data by VBL (right to lodge a complaint).

The address is:
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn
E-Mail: poststellespam De-Mail: poststellespam