Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is the association named in the legal notice.

The site is delivered via Azure Static Web Apps, a service of Microsoft Corporation. As with any website, your browser transmits technically necessary data to the server: your IP address, the time of access, the address requested, the amount of data transferred, and information about your browser and operating system.

This data is needed for the site to be displayed at all. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure and error-free operation. We do not analyse this data or combine it with other data.

Microsoft processes it on our behalf as a processor. A transfer to the United States cannot be ruled out.

We do not set cookies or use analytics tools. Fonts, images, videos and stylesheets are hosted on our own server. Two small scripts are delivered, also from our server: one records when the contact form was opened so that automated submissions can be detected; the other lets you browse back and forth in the enlarged view of the picture gallery. Neither processes anything else or stores anything.

We process what you enter in the form solely to answer your enquiry: your name and email address are required for this; phone and subject are optional. The message goes to the association’s mailbox and is sent via Azure Communication Services, a service of Microsoft Corporation.

The legal basis is Article 6(1)(b) GDPR where a donation or membership is concerned, and otherwise Article 6(1)(f), our legitimate interest in answering enquiries. We keep the message for as long as we need it to deal with your enquiry and any follow-up questions.

To prevent automated abuse of the form, the server remembers for ten minutes which IP addresses messages came from and rejects more than five submissions in that period. This information is held only in memory and then expires.

If you donate, we receive your name and account details from the bank. If you include your address in the payment reference, we use it to issue you a donation receipt. We keep this information for as long as tax law requires.

You have the right to information about the data stored about you, to rectification, erasure and restriction of processing, to data portability, and the right to object to processing. To exercise these rights, please write to the address given in the legal notice.

You can also lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

To prevent automated abuse of the form, Cloudflare Turnstile checks before submission whether the request comes from a human. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

In doing so, your IP address is transmitted to Cloudflare and evaluated together with technical characteristics of your browser and your behaviour on the page, such as mouse and keyboard input. Turnstile sets no cookies for advertising or recognition purposes and creates no cross-device profiles.

The purpose is to fend off automated submissions. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the trouble-free operation of the contact form. We have concluded a data processing agreement with Cloudflare under Article 28 GDPR. For transfers to the United States, Cloudflare relies on the European Commission’s standard contractual clauses and is certified under the EU-US Data Privacy Framework.