Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Further details can be found in our legal notice. We have not appointed a data protection officer, as the legal requirements for doing so do not apply to us. For any data protection matter, please contact the address above.

2. Legal bases

Personal data is any information relating to an identified or identifiable person. We only process such data where we have a legal basis for it:

• Consent (Art. 6 (1) (a) GDPR) – for example when you sign up for our newsletter.
• Contract or pre-contractual steps (Art. 6 (1) (b) GDPR) – for example when processing a donation.
• Legal obligation (Art. 6 (1) (c) GDPR) – for example tax retention duties.
• Legitimate interest (Art. 6 (1) (f) GDPR) – for example the secure and stable operation of this website.

We do not sell your data and do not pass it on for advertising purposes. Data is only shared with service providers who support us in operating this website, and where we are legally obliged to do so.

3. Hosting and server log files

This website is operated in a data centre of IONOS SE in Germany (Berlin location). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Each time a page is requested, the server automatically records data sent by your browser:

• IP address of the requesting device
• date and time of access
• address requested and volume of data transferred
• whether the request was successful
• browser type, browser version and operating system
• the previously visited page (referrer), where transmitted

This data is technically necessary in order to deliver the website, ensure its stability and defend against attacks (Art. 6 (1) (f) GDPR). It is not merged with other data sources and not analysed for marketing purposes. Log data is deleted after a short period, at the latest after 30 days, unless it is needed to investigate a specific security incident.

4. Encrypted transmission

This website uses TLS encryption throughout (recognisable by “https” in the address bar and the padlock symbol in your browser), so the data you send us cannot be read by third parties.

5. Contact form and e-mail

Our contact form collects your name, e-mail address, the selected subject and your message. These details are forwarded by e-mail to info@contribyoute.org and are not stored permanently on the web server.

We process this data in order to answer your enquiry (Art. 6 (1) (b) or (f) GDPR). Your message remains in our mailbox for as long as it is needed to deal with your request and is then deleted, unless statutory retention periods apply. The same applies if you contact us directly by e-mail or telephone.

6. Newsletter

To send you our newsletter we need your name, your e-mail address and your explicit consent. The legal basis is Art. 6 (1) (a) GDPR.

You may withdraw your consent at any time with effect for the future – simply send an e-mail to info@contribyoute.org. We will then remove your data from the distribution list. This does not affect the lawfulness of processing carried out before the withdrawal.

7. Donations via Stripe

If you would like to donate, we redirect you to a payment page of our payment provider:

You enter your payment details – such as card or account data – directly with Stripe. We do not receive this data. Stripe processes the payment under its own responsibility, which may involve a transfer to Stripe, Inc. in the USA. Such transfers are based on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on standard contractual clauses pursuant to Art. 46 GDPR. For details see stripe.com/privacy.

From Stripe we receive the information we need to allocate your donation (name, e-mail address, amount, time). We process it to handle the donation (Art. 6 (1) (b) GDPR) and to meet tax obligations such as donation receipts (Art. 6 (1) (c) GDPR). Accounting records are retained for up to ten years in line with German commercial and tax law.

8. External fonts and icons

Google Fonts

This website uses fonts from the Google Fonts service, which are loaded from servers of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) when a page is opened. Your IP address is transmitted to Google in the process; a transfer to the USA cannot be ruled out. The basis is our legitimate interest in a consistent and appealing presentation (Art. 6 (1) (f) GDPR). More information: policies.google.com/privacy.

Font Awesome

The icons on this website come from the Font Awesome library and are loaded via the cdnjs content delivery network operated by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Your IP address is likewise transmitted to the provider. The legal basis is Art. 6 (1) (f) GDPR. More information: cloudflare.com/privacypolicy.

9. No cookies, no tracking

This website does not set any cookies and does not use analytics, advertising or audience measurement services. We do not create usage profiles and do not track you across pages or websites. That is also why no cookie banner is required.

10. Links to social networks

In the footer we link to our profiles on Instagram and LinkedIn. These are plain links, not embedded plug-ins: a connection to those networks is only established once you actively click the link. From that point on, the privacy policy of the respective provider applies.

11. Your rights

You have the right at any time to

• request information about the data we hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• request erasure of your data (Art. 17 GDPR),
• request restriction of processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR), and
• object to processing based on a legitimate interest (Art. 21 GDPR).

You may withdraw any consent you have given at any time with effect for the future. An informal message to info@contribyoute.org is sufficient.

Right to lodge a complaint

If you believe that we are not processing your data lawfully, you may lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

12. Changes to this policy

We update this privacy policy whenever the website or the legal requirements change. The version published here is the one that applies.