1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Any Lebnene in Deutschland (ALED) e. V., Kurneystr. 8c, 48161 Münster, e-mail info@aled-verein.de. The persons authorised to represent the association are listed in the legal notice.
No data protection officer has been appointed, as the statutory conditions that would require one (Article 37 GDPR, section 38 of the German Federal Data Protection Act) do not apply.
2. Visiting the website
When you access this website, the hosting provider automatically processes data transmitted by your browser: IP address, date and time, the address requested, volume transferred, status message, browser type and operating system.
This processing is technically necessary in order to deliver the page and ensure its secure operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in stable and attack-resistant operation.
The website is hosted with Cloudflare. A data processing agreement is in place. Delivery takes place via servers within the European Union.
3. No cookies, no analytics
This website sets no cookies for advertising or analytics purposes and embeds no reach measurement. That is why no consent banner appears.
The fonts used are stored on our own server. There is no connection to Google Fonts or any other font service.
Your language choice and your light or dark mode setting are stored solely in your own browser (localStorage). This information does not leave your device.
4. Forms
Four forms are available on this website: the membership application, the request for a donation receipt, the contact form and the registration for the honouring of Lebanese graduates. Only the information you enter yourself is transmitted.
Delivery takes place via Brevo (Sendinblue GmbH, Cologne, and Brevo SAS, Paris). A processing agreement pursuant to Article 28 GDPR is in place; processing takes place within the European Union.
Legal bases: for the membership application, Article 6(1)(b) GDPR (initiation and performance of membership). For the donation receipt, Article 6(1)(c) GDPR in conjunction with tax retention obligations. For the contact form and the graduates' registration, Article 6(1)(a) GDPR (your consent), which you may withdraw at any time with effect for the future.
Graduates' registration: the details — including date and place of birth and an uploaded proof of the degree — are used solely to verify participation and to organise the honours ceremony. In addition to the email to the association, they are stored in a participant list in Google Sheets and the proof in Google Drive, in the association's Google Workspace account (Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland); a data processing agreement under Article 28 GDPR is in place. Only the organising team has access. Data may be transferred to the USA in the process: Google LLC is certified under the EU-US Data Privacy Framework; we rely on the European Commission's adequacy decision (Article 45 GDPR), supplemented by the EU standard contractual clauses (Article 46(2)(c) GDPR). The details are deleted once the event has been completed, at the latest six months afterwards; if it does not take place, at the latest twelve months after receipt of the registration. The proof and the date of birth are deleted as soon as the verification is complete.
Retention: contact enquiries are deleted once they have been dealt with and no statutory retention obligation applies. Membership data is retained for the duration of the membership and beyond within the commercial and tax law periods. A statutory period of ten years applies to donation receipts.
5. Protection against automated requests
Cloudflare Turnstile may be used to protect the forms against automated submissions. Turnstile works without cookies and without picture puzzles, evaluating technical characteristics of the request in order to distinguish humans from machines. Your IP address is transmitted to Cloudflare in the process.
The legal basis is Article 6(1)(f) GDPR; the legitimate interest is to protect the association from bulk submissions.
6. References to social networks
The reference to our Instagram profile is a plain link. No Instagram content is embedded and no data is transferred to Meta unless you click the link. Once you do, the privacy terms of that provider apply.
7. Your rights
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing (Article 21). You may withdraw consent at any time; the lawfulness of processing carried out until then remains unaffected.
Right to object: where we process data on the basis of Article 6(1)(f) GDPR (sections 2 and 5), you may object to that processing at any time on grounds relating to your particular situation.
An informal message to info@aled-verein.de or by post to the address given above is sufficient.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
8. Status and changes
This policy will be adjusted whenever something changes on the website or in the legal situation that makes an adjustment necessary.