Imprint & Legal Disclosures

Without your consent we only store what is necessary in your browser: your chosen language (cookie), the editor login (cookie), your consent choice (localStorage) and short-lived notes for the current tab, e.g. a hidden donation bar (sessionStorage). Legal basis: § 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR.

Videos from YouTube (Google Ireland Limited) and Vimeo (Vimeo.com, Inc.) are only loaded with your consent. The provider then receives your IP address among other data; data may be transferred to the USA. Legal basis: § 25(1) TDDDG, Art. 6(1)(a) GDPR.

The FundraisingBox donation form (Wikando GmbH, Augsburg) only loads when you click “donate”. Legal basis: Art. 6(1)(b) GDPR. The site is delivered via Cloudflare (Cloudflare, Inc.) for protection and speed; Cloudflare processes your IP address (Art. 6(1)(f) GDPR, certified under the EU-US Data Privacy Framework).

Newsletter. If you subscribe to our newsletter, we process your e-mail address to send you news about our missions and projects. We use the double opt-in procedure: you only receive the newsletter after clicking the link in our confirmation e-mail. As proof of your consent we store the times of sign-up and confirmation. The e-mails are sent via Microsoft 365 (Microsoft Ireland Operations Limited, Dublin); data may be transferred to the USA (certified under the EU-US Data Privacy Framework). We do not track whether e-mails are opened or links are clicked. Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time – via the unsubscribe link in every e-mail or by writing to us. After unsubscribing you will receive no more e-mails; we keep a record of the unsubscription so that we do not contact you again (Art. 6(1)(f) GDPR). Unconfirmed sign-ups are deleted after 30 days.

Ticket orders. If you order tickets for an event on our website, we process your name, e-mail address, chosen language, the number, price and amount of the order and – if you would like a donation receipt (Spendenbescheinigung) – your postal address. For tickets for other people we store the guests’ names and, if given, their e-mail addresses; we use these addresses only to send the guest their ticket and information about the event. Purpose: processing the order, sending the tickets, admission by QR code (we store the time of admission), information about the event (e.g. changes) and the donation receipt. Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (retention obligations under tax and commercial law). The payment is processed by FundraisingBox (Wikando GmbH, Augsburg); we pass on your name, e-mail address, the amount, the booking reference and, where applicable, your postal address. The e-mails are sent via Microsoft 365 (Microsoft Ireland Operations Limited, Dublin); data may be transferred to the USA (certified under the EU-US Data Privacy Framework). We delete the data as soon as it is no longer needed for these purposes; data we must keep for tax or commercial law reasons (accounting and donation records: up to ten years) is deleted when these periods have expired.

Forms and protection against misuse. To prevent our forms (contact, newsletter, donations, tickets, requests for help) from being misused automatically, your browser receives a short-lived security token while you fill them in. It is only used to submit the form, contains no personal data and expires after two hours at the latest; no cookies are set for this and no third-party services are involved. To limit too many requests within a short time, we briefly keep your IP address in the server’s memory; it is not stored permanently and is discarded after one hour at the latest. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against spam and misuse).

You can change or withdraw your consent at any time: Cookie settings