Privacy Policy

1. Data controller

Amal Hilfe e.V.
c/o Idriss El Moussaid
Nettekovener Straße 83b
53347 Alfter
Germany

info@amalhilfe.de
+49 176 31 08 16 68

2. Provision of the website and hosting

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owned by René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit the website, the following data in particular is processed: IP address, time of visit, page accessed, browser and operating system information, referrer and status messages. This is necessary for the delivery of the website, to ensure its stability and to defend against attacks. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest is the secure operation of the website.

3. Contact and membership enquiries

When you contact us by email, telephone or post, we process your contact details and the content of your enquiry in order to handle and respond to it. For enquiries regarding donations or membership, Article 6(1)(b) of the GDPR applies; for other enquiries, Article 6(1)(f) of the GDPR applies, based on our legitimate interest in reliable communication. Please provide only the information necessary for your enquiry.

4. Donations and donation receipts

To process a donation, we process, in particular, your name, email address, postal address, donation amount, date and time, purpose of the donation and payment status. Donations are managed using WooCommerce on our server. In the case of a bank transfer, the banks involved receive the data required for the payment. Our donation account is held with Volksbank Köln Bonn eG. The legal bases are Article 6(1)(b) of the GDPR for processing and Article 6(1)(c) of the GDPR for statutory record-keeping and retention obligations. We require your name and address to issue donation receipts.

5. Cookies and privacy settings

We use the Borlabs cookie to save your privacy settings. The ‘borlabs-cookie’ cookie stores your preferences for up to six months. When using the donation form, necessary WooCommerce cookies may be used to associate the donation amount with your session; session cookies expire when you close your browser, whilst the ‘wp_woocommerce_session_’ cookie typically remains active for two days. When you log in, necessary WordPress login cookies are set. These functions are based on Section 25(2)(2) of the TDDDG and, insofar as personal data is processed, Article 6(1)(b), (c) or (f) of the GDPR, in accordance with the respective purpose.

Google Analytics 4

With your consent, we analyse page views and the use of our website using Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Among other things, this involves the processing of device and browser information, pages visited, times of access and a pseudonymous cookie identifier. The IP address is transmitted automatically upon connection; according to Google, it is not logged or stored for visits originating from the EU. The cookies _ga and _ga_5BBNKE5N07 may remain active for up to two years. The retention period for the analytics data depends on the settings of the Analytics property. Processing by Google LLC in the USA is possible. Information on Google’s data processing and the transmission mechanisms used can be found in Google’s Privacy Policy. Our integration does not enable personalised advertising and does not transmit names, email addresses or form content to Analytics.

Google: Privacy Policy

6. Protection against attacks

We use Wordfence from Defiant Inc., USA, to protect against unauthorised access and malware. In doing so, IP addresses, URLs accessed, browser information and security-related events may be processed. When detecting and defending against attacks, security-related data may be transmitted to Defiant. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest is the protection of the website and the data entrusted to us. Information from the provider can be found at https://www.wordfence.com/privacy-policy/.

7. Fonts and language versions

The fonts and translations are hosted on our server. When visiting a language version, no content or visitor data is transferred to a translation service or to Google Fonts.

8. Recipients and international data transfers

Data is only provided to organisations that require it for the stated purposes, in particular hosting and IT service providers, relevant banks and public authorities where there is a legal obligation to do so. In the case of Wordfence, processing may take place in the USA. For transfers outside the European Economic Area, the requirements of Articles 44 et seq. of the GDPR apply, in particular appropriate safeguards such as EU Standard Contractual Clauses. You can obtain information on the safeguards applicable to your data via our contact details.

9. Retention period

We delete personal data as soon as it is no longer required for the relevant purpose and there are no legal obligations or legitimate grounds for further storage. In the case of enquiries, this is determined by the completion of processing; in the case of security data, by the need to investigate and prevent incidents. Donation and accounting records are retained in accordance with the applicable tax and commercial law retention periods. Further storage may be necessary to assert or defend legal claims.

10. Your rights

In accordance with the statutory requirements, you have the right to access your data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with future effect, without this affecting the lawfulness of any processing carried out previously. To do so, please contact info@amalhilfe.de.

11. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular at your place of residence, your place of work or the place where the alleged infringement occurred (Article 77 of the GDPR). For North Rhine-Westphalia: State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, email: poststelle@ldi.nrw.de, website: https://www.ldi.nrw.de/.

12. Provision of data

No registration is required to use our information pages. The relevant details are required to process a donation or enquiry; without these, we may not be able to deal with your request. No automated decision-making, including profiling, within the meaning of Article 22 of the GDPR takes place.