Privacy Policy

The association takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations (GDPR) as well as this Privacy Policy. We process your personal data solely for internal association purposes. We assure you that your personal data will not be disclosed to unauthorized third parties.

Of course, under certain conditions, you have the right to have your personal data deleted. In some cases, we are legally required to retain certain data for a specified period of time. In these specific cases, we cannot delete the data. Of course, we will delete your data once the statutory retention period has expired.

Information on Data Processing

We hereby inform you about the processing of your personal data—such as your address, email address, phone number, date of birth, and, if provided, your IBAN, payment amounts, and the reason for the payments (donations, fees, etc.)—by the association, as well as the rights to which you are entitled under the General Data Protection Regulation. The entity responsible for data processing is:

Association/Organization: Beratungsstelle stop mutilation Deutschland e.V.
Contact Person: Jawahir Cumar
Address: Schiessstraße 8-10, 40549 Düsseldorf
Phone: 0211-75843400
Email: j.cumar@stop-mutilation.org

Under the GDPR, our association is not required to appoint a data protection officer.

Purpose and Legal Basis for Data Processing

We process your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable laws.

If you support our organization with a donation, we will need the information you provide to process your contribution. We process this data to issue tax-deductible donation receipts, to provide information about how your donation is used, and to send you appeals for donations from our organization by mail, phone, or email, provided you have consented to such use.

Your data is processed lawfully on the basis of Article 6(1)(a)-(f) of the GDPR.

In the rare instances where we store special categories of personal data, we will first obtain your consent in accordance with Article 9(2a) in conjunction with Article 7 of the GDPR.

We also process your data when it is necessary, pursuant to Article 6(1)(f) of the GDPR, to protect our legitimate interests or those of third parties. This may be the case, in particular, to ensure the security of our systems or to prevent and investigate criminal offenses.

Recipients of Your Data

We make every effort to share your personal data only with those individuals and organizations that need it for their work or to comply with legal requirements. These include:

Data Retention Period

We will delete your personal data as soon as it is no longer necessary for the purposes mentioned above and any applicable legal retention requirements have expired.

Record-keeping and retention periods are set forth, among other sources, in the German Commercial Code (HGB), the German Fiscal Code (AO), and the Money Laundering Act. According to these provisions, the retention periods are up to ten years.

If claims can be brought against our association, we will retain the data until the statutory statute of limitations expires. We will retain personal data that is relevant to an ongoing legal dispute until the dispute is resolved.

Your Rights

You may request information about the data we have stored about you at any time using the contact information provided above. You also have the right to request the correction of inaccurate data or, if the legal requirements are met, the correction, restriction, or deletion of your data. You may object to the use of your data for direct marketing or market research purposes at any time without having to provide a specific reason. Upon request, we will provide you with the data we have stored about you.

Permission

Consent to the collection, processing, and use of your personal data is not required if the data must be collected as part of a contractual relationship (e.g., membership).