Privacy Policy

Kiwanuka e.V. takes the protection of personal data seriously. This privacy policy explains which data we process, for what purposes, and which rights data subjects have.

1. Controller

2. What data we process

• Account data, such as name, email address, and optional profile details when creating an account.
• Usage data, such as information about how the website is used, visited pages, and technical log data.
• Donation-related data, such as amount, currency, project reference, and, if provided, name or email address.
• Communication data when users contact us by form or email.

3. Purposes and legal bases

• Providing and operating the website.
• Managing user accounts and authentication.
• Processing and documenting donations.
• Handling inquiries and communication.
• Complying with legal obligations, especially retention obligations under association, tax, and commercial law.

Depending on the context, processing is based on Art. 6(1)(b) GDPR (contract or pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interests), or, where required, consent under Art. 6(1)(a) GDPR.

4. Payment processing

For online donations, we use Stripe as our payment service provider. In the course of payment processing, personal data such as name, email address, payment information, and transaction data may be transmitted to and processed by Stripe.

For donations made by bank transfer, we process the payment data necessary for booking and documentation.

5. Service providers we use

• Supabase: hosting, database, authentication, and potentially storage functions.
• Stripe: payment processing for online donations.
• Additional technical service providers may be used for hosting, email delivery, or security functions.

6. Retention period

We retain personal data only for as long as necessary for the respective purposes or as required by law. Donation and accounting data may be retained longer due to tax and commercial retention obligations.

7. Cookies and similar technologies

Where we use non-essential cookies or similar technologies, we do so only on the basis of valid consent. Technically necessary functions may be used without separate consent where legally permitted.

8. Rights of data subjects

Data subjects generally have the right to access, rectification, erasure, restriction of processing, data portability, and to object to certain processing activities. Consent may be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.

9. Contact for privacy requests

Privacy-related requests can be sent to kiwanukaverein@gmail.com.

10. Version and changes

We may update this privacy policy if our website, the services we use, or legal requirements change.