Epithesis Project logo
ENARDE
Donate

Privacy

How your data is handled.

What happens to personal data when you open this site or write to us, set out the way Art. 13 GDPR requires it to be.

Last revised

Who is responsible

Who is responsible
Alkawakibi Verein e.V.Triftstr. 813353 BerlinGermany
Email
info@alkawakibi.org

What is processed, and why

Each entry says what data is involved, what it is used for, which ground under Art. 6 GDPR makes it lawful, and how long it is kept.

  • Opening the site

    Data
    IP address, the date and time of the request, the page asked for, the page you came from, browser and operating system.
    Purpose
    Delivering the pages, keeping the site secure, and tracing faults.
    Legal ground
    Legitimate interests — Art. 6(1)(f) GDPR
    Kept for
    Server log entries are kept briefly and then deleted.

  • Writing to us by email

    Data
    Your name, your address, and whatever you choose to put in the message.
    Purpose
    Answering your enquiry and the correspondence that follows from it.
    Legal ground
    Contract, or steps before one — Art. 6(1)(b) GDPR
    Kept for
    Kept while the matter is open, then as long as retention rules require.

  • Making a donation

    Data
    Name, bank details and the amount, as they reach us through the bank.
    Purpose
    Receiving the donation, issuing a receipt, and keeping the books.
    Legal ground
    Legal obligation — Art. 6(1)(c) GDPR
    Kept for
    Ten years, as commercial and tax law require.

If you write to us about a medical condition

Patients and their families are invited to describe their situation so a clinician can say whether an epithesis is possible. Anything you tell us about your health is data of a special category under Art. 9 GDPR, protected more strictly than ordinary correspondence.

It is processed only on your explicit consent under Art. 9 (2) (a) GDPR, given by choosing to write to us, and only to answer you. It is seen by the clinicians handling your case and by nobody else. You may withdraw that consent at any time, with effect from then on.

Ordinary email is not a secure channel. Send only what you are content to have travel that way, and say so if you would rather continue by another route.

Who else sees it

Data is passed on only where running the site or answering you requires it. Each recipient below acts on our instructions or under its own legal duties.

  • Vercel Inc.

    What it does
    Hosting the site and delivering its pages.
    Where
    United States, served from data centres in the European Union
    Safeguard
    Data processing agreement and EU standard contractual clauses.
    Their privacy notice
    https://vercel.com/legal/privacy-policy

  • ALL-INKL.COM – Neue Medien Münnich

    What it does
    Running our email mailbox; messages you send us are stored there.
    Where
    Germany
    Safeguard
    Inside the EU; data processing agreement under Art. 28 GDPR.
    Their privacy notice
    https://all-inkl.com/datenschutzinformationen/

Data leaving the EEA

Where a service processes data outside the European Economic Area, we rely on an adequacy decision of the European Commission, or on standard contractual clauses under Art. 46 (2) (c) GDPR together with further safeguards.

The project works with partners in Syria, for which no adequacy decision exists. Correspondence reaches them only where you have consented, or where it is necessary to answer you.

Your rights

Write to the address above to use any of these. We answer within a month, and there is no charge.

  • Access — Art. 15

    To be told whether data about you is held here, and to be given a copy of it.

  • Rectification — Art. 16

    To have what is wrong corrected and what is incomplete completed.

  • Erasure — Art. 17

    To have data deleted where there is no longer a reason to keep it.

  • Restriction — Art. 18

    To have processing held still while a question about the data is settled.

  • Portability — Art. 20

    To receive what you gave us in a common, machine-readable form.

  • Objection — Art. 21

    To object to processing that rests on legitimate interests, on grounds arising from your situation.

  • Withdrawing consent — Art. 7 (3)

    To withdraw consent at any time, with effect from then on. What was done beforehand stays lawful.

Supervisory authority

Supervisory authority
Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit)Alt-Moabit 59–6110555 Berlinhttps://www.datenschutz-berlin.de/

Cookies and local storage

This site sets no advertising or analytics cookies and does not follow visitors across other sites. What it keeps in your browser goes no further than making the page work — remembering the language you chose, for one.

Because nothing is stored beyond what is strictly necessary, no consent banner is shown. Should that ever change, consent will be asked for before anything is set.

Typefaces and embedded film

The typefaces are served from our own servers. Your browser asks nothing of a font provider, and no address is passed on.

Where a film is embedded from a video platform, that platform learns your IP address once you start it. Nothing is requested from it before then.

Security

The site is served over an encrypted connection, so what passes between your browser and our servers cannot be read on the way.

Changes to this notice

This text is revised when the site or the way the project works changes. The date at the top says when that last happened; the version shown here is always the one in force.