1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is the association named in the legal notice. You will find the contact details there.
No data protection officer has been appointed; the legal requirements for doing so are not met.
2. Visiting the website
When you access this website, the hosting provider automatically processes data transmitted by your browser: IP address, date and time, the address requested, volume transferred, status message, browser type and operating system.
This processing is technically necessary in order to deliver the page and ensure its secure operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in stable and attack-resistant operation.
The website is hosted with Cloudflare. A data processing agreement is in place. Delivery takes place via servers within the European Union.
3. No cookies, no analytics
This website sets no cookies for advertising or analytics purposes and embeds no reach measurement. That is why no consent banner appears.
The fonts used are stored on our own server. There is no connection to Google Fonts or any other font service.
Your language choice and your light or dark mode setting are stored solely in your own browser (localStorage). This information does not leave your device.
4. Forms
Three forms are available on this website: the membership application, the request for a donation receipt and the contact form. Only the information you enter yourself is transmitted.
Delivery takes place via Brevo (Sendinblue GmbH, Cologne, and Brevo SAS, Paris). A processing agreement pursuant to Article 28 GDPR is in place; processing takes place within the European Union.
Legal bases: for the membership application, Article 6(1)(b) GDPR (initiation and performance of membership). For the donation receipt, Article 6(1)(c) GDPR in conjunction with tax retention obligations. For the contact form, Article 6(1)(a) GDPR (your consent), which you may withdraw at any time with effect for the future.
Retention: contact enquiries are deleted once they have been dealt with and no statutory retention obligation applies. Membership data is retained for the duration of the membership and beyond within the commercial and tax law periods. A statutory period of ten years applies to donation receipts.
5. Protection against automated requests
Cloudflare Turnstile may be used to protect the forms against automated submissions. Turnstile works without cookies and without picture puzzles, evaluating technical characteristics of the request in order to distinguish humans from machines. Your IP address is transmitted to Cloudflare in the process.
The legal basis is Article 6(1)(f) GDPR; the legitimate interest is to protect the association from bulk submissions.
6. References to social networks
The reference to our Instagram profile is a plain link. No Instagram content is embedded and no data is transferred to Meta unless you click the link. Once you do, the privacy terms of that provider apply.
7. Your rights
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing (Article 21). You may withdraw consent at any time; the lawfulness of processing carried out until then remains unaffected.
An informal message to the address given in the legal notice is sufficient.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
8. Status and changes
This policy will be adjusted whenever something changes on the website or in the legal situation that makes an adjustment necessary.