Privacy policy

This is a courtesy translation. The German version is the legally binding one.

Controller

The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

Watoto wa Nest e.V.
Trostberger Str. 35
83342 Tacherting, Germany
Email: watotowanest@gmail.com

Your rights

Using the contact details above, you can exercise the following rights at any time:

• access to your data stored by us and its processing (Art. 15 GDPR),
• rectification of inaccurate personal data (Art. 16 GDPR),
• erasure of your data stored by us (Art. 17 GDPR),
• restriction of processing, where we may not yet delete your data due to legal obligations (Art. 18 GDPR),
• objection to the processing of your data by us (Art. 21 GDPR), and
• data portability, provided you have consented to the processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you can withdraw it at any time with effect for the future – for cookies and Google services directly via the cookie settings. You may lodge a complaint with a supervisory authority at any time, e.g. the authority of the German federal state in which you live, or the authority responsible for us (Bavarian State Office for Data Protection Supervision). A list of supervisory authorities with addresses is available at bfdi.bund.de.

Hosting (GitHub Pages)

Nature and purpose of processing: This website is provided as a static website via GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (EU representative: GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam, Netherlands). When you access the website, GitHub automatically collects information in server log files transmitted by your browser, such as IP address, date and time of access, page requested, browser type and operating system. This data is processed solely to deliver the website and to ensure security and stability. We ourselves have no access to these log files.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and efficient delivery of the website).

Third-country transfer: GitHub is certified under the EU-US Data Privacy Framework. Further information: GitHub privacy statement.

Retention: According to GitHub, log data is kept briefly for security purposes and then deleted.

Cookies and consent (cookie banner)

Nature and purpose of processing: On your first visit we show you a cookie banner. There you decide whether we may use Google analytics and advertising services (see below). We store your decision only locally in your browser (local storage, key “wwn-consent”) so the banner does not reappear on every page view. This storage is technically necessary and contains no personal data.

Legal basis: Storing your decision is based on § 25 (2) no. 2 of the German TDDDG. Setting cookies and reading information on your device by Google services only takes place with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Withdrawal: You can withdraw or change your consent at any time with effect for the future by opening the cookie settings (link also in the footer). As long as you have not consented, no Google services are loaded and no cookies are set.

Google Analytics 4

Nature and purpose of processing: With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website (e.g. pages viewed, time spent, approximate location, device type, source of the visit, donation clicks). Google Analytics 4 does not store the IP address; it is used only for coarse geolocation and then discarded. We use Google Consent Mode: without your consent, no cookies are set and no personal data is transmitted to Google.

Purpose: evaluating the use of the website, compiling reports on website activity and improving our offering and our fundraising appeals.

Legal basis: Art. 6 (1) (a) GDPR (consent), § 25 (1) TDDDG.

Recipient: Google as processor. We have concluded Google's standard data processing terms (Google Ads Data Processing Terms).

Retention: The retention period for user-level data in Google Analytics is set to 14 months. After that, the data is deleted automatically.

Third-country transfer: Data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition.

Withdrawal of consent: via the cookie settings (see above) or via the browser add-on to deactivate Google Analytics. Further information: Google privacy policy and privacy information on Google Analytics.

Google Ads and Google Ad Grants (conversion tracking)

Nature and purpose of processing: As a non-profit organisation we use the Google Ad Grants programme to draw attention to our work via Google Ads. With your consent we use Google Ads conversion tracking. If you reach our website via a Google ad, a cookie is set that allows Google and us to recognise whether you have visited certain pages or performed actions (e.g. clicking “Donate now” or sending the contact form). We only receive anonymous statistical evaluations and no information that would allow us to identify you personally.

Legal basis: Art. 6 (1) (a) GDPR (consent), § 25 (1) TDDDG.

Recipients and third-country transfer: Google Ireland Limited; a transfer to Google LLC in the USA is possible (EU-US Data Privacy Framework, EU standard contractual clauses).

Retention: Conversion cookies expire after 90 days.

Withdrawal: via the cookie settings or at adssettings.google.com.

Google Forms (embedded forms)

Nature and purpose of processing: For individual purposes (e.g. sign-ups for campaigns or surveys) we may embed or link forms from Google Forms. When you open or fill in such a form, the data you enter as well as technical data (IP address, browser) is processed by Google Ireland Limited and stored in our Google account. Embedded forms are only loaded after your consent in the cookie banner; linked forms you open deliberately yourself.

Legal basis: Art. 6 (1) (a) GDPR (consent) or Art. 6 (1) (b) GDPR where the form serves to carry out a measure you have requested.

Retention: We delete form data as soon as the respective purpose has been fulfilled, at the latest after 12 months, unless statutory retention obligations apply.

Email communication via Google Workspace / Gmail

Nature and purpose of processing: Our email mailbox is operated by Google (Gmail or Google Workspace for Nonprofits). When you email us – including via our contact form or the newsletter sign-up – your message and contact details are stored and processed on Google servers. The same applies to documents we keep in Google Drive as part of our association work (e.g. donation receipts, gift certificates).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in efficient and secure communication and administration) or Art. 6 (1) (b) GDPR for pre-contractual enquiries.

Recipients and third-country transfer: Google Ireland Limited as processor on the basis of a data processing agreement (Google Workspace Data Processing Amendment). Transfers to the USA take place under the EU-US Data Privacy Framework and the EU standard contractual clauses.

Retention: Enquiries are deleted at the latest 6 months after processing, unless statutory retention obligations (e.g. for donation receipts, usually 10 years) apply.

Contact form and newsletter sign-up

Nature and purpose of processing: Our contact form and the newsletter sign-up open your own email program with a prepared message to us. Data is only transmitted when you send the email yourself. We store the details you submit (name, email address, subject, message) for the purpose of individual communication with you in our Google mailbox (see above). A valid email address and your name are required to assign and answer your enquiry; further details are optional.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry) or Art. 6 (1) (a) GDPR (consent) for the newsletter sign-up. You can unsubscribe from the newsletter at any time by emailing us.

Retention: Data from enquiries is deleted at the latest 6 months after processing, unless statutory retention obligations apply. Newsletter data is stored until you withdraw consent.

Donations

Online donations via betterplace.org: If you donate via the “Donate online” link, you leave our website and use the platform of gut.org gemeinnützige Aktiengesellschaft, Schlesische Straße 26, 10997 Berlin, Germany. The betterplace.org privacy policy applies to data processing there. We receive from betterplace the data required for processing the donation and issuing the receipt (name, address, amount), provided you agree to this being shared.

Donations by bank transfer: For bank transfers we process the data transmitted to us via our bank (name, IBAN, amount, reference) to record the donation, issue donation receipts and fulfil tax obligations (Art. 6 (1) (c) GDPR). The data is stored in accordance with statutory retention periods (usually 10 years).

Gift certificates: We use the email address given in the payment reference solely to send the gift certificate.

Fonts and scripts

The fonts and scripts used on this website are loaded from our own web space. No connection to Google Fonts or other font providers is established.

Links to social networks

We link to our profiles on Instagram and Facebook (Meta Platforms Ireland Ltd.). These are plain links – no plugins are embedded and no data is transferred to Meta when you visit our website. Only when you click the link do you reach the respective provider's pages, to which its privacy policy applies.

SSL encryption

To protect the security of your data during transmission, this website is delivered exclusively encrypted via HTTPS.

Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services, e.g. when introducing new services. The new privacy policy then applies to your next visit.

Questions about data protection

If you have questions about data protection, please email us at watotowanest@gmail.com or write to the address above.

Last updated: October 2026