Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Represented by the board pursuant to Section 26 of the German Civil Code (BGB): Lukas Neuwirth, Girens-Mario Canda and Elke Keller-Olgun. Further details can be found in our legal notice.

2. The key points in brief

We process as little personal data as possible. This website does not set any cookies, does not use any analytics or tracking tools and does not embed any third-party content such as videos, maps or social media plugins. Consequently, no information is stored on or read from your device (Section 25 TDDDG). Personal data is only processed when you visit the website (technically necessary access data), contact us or make a donation.

3. Hosting and access data

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (All-Inkl). All-Inkl processes the data on our behalf (Art. 28 GDPR). Details can be found in All-Inkl's privacy policy.

Each time you access the website, your browser necessarily transmits the following information to the server:

• IP address of the requesting device
• date and time of access
• page or file accessed
• referrer URL (the page visited previously)
• browser type and version and the operating system used

The server needs this data to deliver the website to your device. The legal basis is our legitimate interest in a working website under Art. 6(1)(f) GDPR. We have disabled the storage of this data in server log files in our hosting. The data is not combined with other data sources.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in the address bar and the padlock symbol in your browser.

5. Fonts

The fonts used on this website are loaded locally from our server. No connection is made to servers of Google or other providers.

6. Contacting us by email or phone

If you contact us by email or phone, we process your details (e.g. name, email address, phone number and the content of your enquiry) in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a membership, regular support or a donation, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data as soon as your request has been dealt with, unless statutory retention obligations apply.

7. Donations, supporting membership and membership

If you donate to us by bank transfer or become a supporting member or member, we process the data required for this, in particular your name, address, email address, bank details and the amount of your contribution. We use this data to process the donation or membership and to issue donation receipts. The legal bases are Art. 6(1)(b) GDPR (membership, regular support) and Art. 6(1)(c) GDPR (tax obligations). We retain accounting records and donation receipts in accordance with the statutory periods, in particular for up to ten years under the German Fiscal Code (Abgabenordnung).

Donations via PayPal

If you donate via PayPal, you will be redirected to the PayPal website. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes your payment data under its own responsibility. We receive your name, your email address and the amount donated from PayPal. Further information can be found in PayPal's privacy policy.

8. Links to other websites

Our website contains links to external websites, for example to scientific studies. No data is transmitted to these providers when you visit our pages. Only when you click on a link do the data protection provisions of the respective provider apply.

9. Your rights

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR)

Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, simply send an email to info@direct-transfers.org.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Data Protection Commissioner of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, www.lfd.niedersachsen.de.

10. Storage period

Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations.

11. Changes to this privacy policy

We will adapt this privacy policy if our website or the legal requirements change. The version published here applies in each case.