What the GDPR Check evaluates
Associations process member, donor, and volunteer data. The check evaluates your processes against GDPR, BDSG employee data protection (§ 26 BDSG analogously for volunteers), and German association law (§§ 21–79 BGB).
Legal foundations
GDPR Art. 6; BDSG § 26 (employee data protection, analogous for volunteers); BGB §§ 21–79 (association law); for religious bodies KDG or DSG-EKD. Placeholder — Phase 46 provides the target-group-specific ContentBlock.
How the check works
1. Choose your association type (registered association, federation, foundation, non-profit GmbH, sports, culture, social, religious) 2. Answer twelve questions with association terminology (members, donors, volunteers) 3. Receive an instant assessment with references to association law
Your benefits
• Free and without registration • Legal status April 2026 with § 26 BDSG analogy • Points to religious-body regulators (KDG/DSG-EKD) where relevant • Concrete recommendations for volunteer-led organizations
Frequently asked questions
- Do volunteers count as employees under BDSG?
- § 26 BDSG addresses employees directly; volunteers are covered by analogous application. When crossing the 20-person threshold (staff plus volunteers), a DPO appointment is generally required per § 38 BDSG.
- Does the GDPR apply to small associations as well?
- Yes, the GDPR applies regardless of association size. The actual effort needed should be adapted to the nature and scope of the processing.
- My association is religious — what should I know?
- Religious bodies are governed under Art. 91 GDPR by religious data protection laws (KDG for Catholic, DSG-EKD for Protestant bodies). Our check points you to the competent religious regulator.
This initial assessment is not legal advice and does not replace consultation with a qualified lawyer. Legal status: April 2026.