Privacy Policy
The English version of legal agreements and policies is considered as the only current and valid version of this document. Any translated version is provided for your convenience only, to facilitate reading and understanding of the English version. Any translated versions are not legally binding and cannot replace the English versions. In the event of disagreement or conflict, the English language legal agreements and policies shall prevail.
Purpose of collecting personal data
Esther’s Heart e.V. collects personal data for the following limited purposes:
- Error-free provision of web services
- Creation and management of donation information
- Recording of donor preferences
- Creation and management of contact and mailing lists
Insofar as contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order enquiries.
How & what data do we collect?
On the one hand, your data is collected when you provide it to us. This may include, for example, data that you enter in a contact form. All messages are sent directly to Esther’s Heart e.V. email inboxes and treated confidentially. Esther’s Heart e.V. will never sell or pass on your emails to third parties.
For purely informational use of our website, if you do not register or otherwise provide us with information, we only collect data that is technically necessary for the provision of the service. This is usually data that your browser directly transmits to our server. This data is collected automatically as soon as you enter this website. The following may be collected in server log files:
- browser type and version used,
- the operating system used by the accessing system,
- the website from which an accessing system reaches our website (so-called referrer),
- the subpages that are accessed on our website,
- the date and time of access to the website and
- an Internet Protocol address (IP).
These server log files are stored separately from all personal data provided by a data subject, and we do not draw any conclusions about your person when using this data. This data is collected on the basis of Art. 6(1)(f) GDPR.
Cookies
Cookies are small data packets that your browser automatically creates and that are stored on your system (laptop, tablet, etc.) when you visit our site. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Persistent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies can originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services). We only use technically necessary cookies without which certain website functions would not work (e.g. the display of videos). All cookies used by us are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified.
You can delete cookies, allow only selected cookies or deactivate cookies completely at any time via the settings of your browser. Further information is available on the support pages of the respective providers.
Detailed information about individual cookies
Detailed information about individual cookies and services can be found in the consent tool. You can access the tool at any time by clicking on ‘Consent’ in the footer of our website. The consent tool itself also sets a cookie to store your cookie preferences.
Disclosure & storage
Disclosure to Third Parties
In the course of our business activities, we work with various external parties. This sometimes requires the transfer of data to these external parties (also called processors). We only disclose personal data to external parties if:
- this is necessary for the purposes of contract fulfilment,
- we are legally obliged to do so (e.g. disclosure of data to tax authorities),
- we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the disclosure of data.
When using processors, we only pass on our customers’ personal data on the basis of a valid data processing agreement.
Storage
Unless a more specific storage period is specified in this privacy policy, your data will only be stored by us for as long as is necessary to achieve the purpose of storage and exclusively for the fulfilment of these purposes. The only exception to this rule is if we are obliged to disclose personal data in order to comply with a legal or statutory obligation.
Donations
When you make a donation via our website, we may ask you to provide certain personal information (e.g. credit card details) so that we can process your donation. We use the credit card details you provide solely to process the transaction you have requested. We store your contact details in our records for accounting purposes only.
How your donation will be used
Esther’s Heart e.V. undertakes to respect your preferences regarding the use of your donation. However, if more funds than necessary are received for a specific project, programme or purpose, Esther’s Heart will use the surplus funds for another project or programme within its remit.
General online transactions
Esther’s Heart e.V. will never ask you to confirm your bank details by email. If you receive an email requesting such information, please contact us. This type of email may be sent by individuals attempting to obtain your bank details (“phishing”).
Further notes & information
Hosting with Hostinger UAB
We host our website with Hostinger UAB, Jonavos str. 60C, 44192 Kaunas, Lithuania. External hosting is used for the purpose of fulfilling contracts with our potential and existing customers and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).
When you visit our website, your personal data (e.g. IP addresses in log files) is processed on the German servers of Hostinger UAB. Hostinger UAB will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.
Further information on Hostinger UAB’s privacy policy can be found here: https://www.hostinger.com/legal/privacy-policy
Akismet
We use Akismet on this website. The provider is Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter referred to as Aut O’Mattic), whose parent company is based in the USA. Akismet enables us to check comments and contact requests for spam. For this purpose, form or comment data is evaluated and stored securely for a short retention period.
You can find further details here: https://akismet.com/gdpr/.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential information, such as donations, orders or contact requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser bar.
Objection to advertising emails
We hereby object to the use of contact details published within the scope of the legal notice obligation for sending unsolicited advertising and information materials. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example via spam emails.
Responsible body
The responsible body is Esther’s Heart e.V. If you have any further questions regarding data privacy, please contact us using one of the following methods:
By post:
Esther’s Heart e.V.
Dorfstrasse 11d
02708 Rosenbach
E-Mail: info@esthersheart.net