Support us

Projects

About us

Support us

Privacy policy

This is a translation of our German privacy policy, provided for convenience. In case of any discrepancy, the German version is authoritative.

1. Controller

The controller responsible for data processing on this website is:

communia e.V.
Im Winkel 1
32816 Schieder-Schwalenberg
Germany
represented by the board

Phone: +49 1573 7024823
Email: info@communia.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Hosting and server log files

Hosting

This website runs on a server operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. All data generated when you visit this website or use its forms is processed on this server in Germany. We have concluded a data processing agreement with netcup pursuant to Art. 28 GDPR. Under it, netcup undertakes to process the data only on our instructions and in compliance with the GDPR. For more information, see netcup’s privacy policy.

Server log files

Each time this website is accessed, our server automatically logs the following data:

  • IP address of the requesting device
  • date and time of access
  • requested address (URL) and HTTP status code
  • amount of data transferred
  • referrer URL (the previously visited page)
  • browser and operating system used (user agent)

We need this data to deliver the website, analyse errors and fend off attacks. Repeated failed login attempts lead to an automatic, temporary block of the IP address concerned. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in operating the website securely and reliably. Access logs are deleted automatically after 14 days. Other technical logs are limited in size and continuously overwritten. This data is not combined with other data sources.

3. Cookies and storage on your device

This website does not use cookies for analytics or advertising. We only use technically necessary cookies:

  • a language cookie that remembers the selected language version (German/English)
  • login cookies for logged-in editors
  • a cookie that stores your consent to loading YouTube videos, if you have given it (see section 8)

The legal basis for storing these cookies is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as they are strictly necessary for the service you have requested. The associated data processing is based on Art. 6(1)(f) GDPR. You can delete or block cookies in your browser settings at any time. Some features of the website may then no longer be available.

4. Security

SSL/TLS encryption

This website uses SSL/TLS encryption. Data you send to us, for example via the donation form, therefore cannot be read by third parties. You can recognise an encrypted connection by “https://” and the lock icon in your browser’s address bar.

Wordfence

To protect against attacks, we use the security plugin Wordfence by Defiant Inc. (USA). It checks requests to this website for attack patterns and processes your IP address and technical details of the request for this purpose. The checks take place exclusively on our own server. No visitor data is transmitted to the provider. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting the website and its users against attacks.

5. Web analytics with Matomo

We use the open-source software Matomo to analyse the use of this website statistically. Matomo runs on our own server, and the data is not passed on to third parties. We use Matomo without cookies. Your IP address is shortened before it is stored, so it can no longer be attributed to you.

The data collected includes: the shortened IP address, pages visited and time of access, the previously visited page (referrer), external links and downloads clicked, browser, operating system, screen resolution and approximate region. We do not create user profiles from this data and make no attempt to identify you.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in understanding which content is used and improving our website. Raw data is deleted after six months. After that, only aggregated statistics without any personal reference are kept.

6. Donations

If you make a donation by SEPA direct debit via our donation form, we process the following data: first and last name, address, email address, account holder, IBAN and bank, donation amount and type (one-off, monthly, yearly), and an optional message to us. For donations by bank transfer, we receive your name, IBAN, the amount and the payment reference via our bank account.

We use this data solely to process your donation, issue a donation receipt (Zuwendungsbestätigung) and contact you if there are questions about your donation. Form data is stored on our server and processed by us directly. To collect the direct debit, we transmit the necessary details to our bank. Beyond that, we only disclose your data where we are legally required to do so, for example to tax authorities.

The legal basis is Art. 6(1)(b) GDPR (processing your donation). Retention is based on Art. 6(1)(c) GDPR in conjunction with statutory retention obligations under tax law. Providing the data is voluntary, but without it we cannot process a direct-debit donation. We store the data for as long as statutory retention periods require (up to ten years under the German Fiscal Code) and delete it afterwards. You can cancel recurring donations at any time by email.

7. Newsletter

We send our newsletter via CleverReach, a service of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. We have concluded a data processing agreement with CleverReach pursuant to Art. 28 GDPR.

To subscribe, we need your email address. Any further information is optional. We use a double opt-in procedure: after signing up, you receive an email asking you to confirm your subscription. This ensures that nobody can sign up with someone else’s email address. As proof of your subscription, we store the time of sign-up and confirmation as well as your IP address.

Our newsletters include performance tracking: we can analyse statistically whether a newsletter was opened and which links in it were clicked. We use this to improve our newsletters.

The legal basis for sending the newsletter and for performance tracking is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, for example via the unsubscribe link in every newsletter. This does not affect the lawfulness of processing carried out before withdrawal. Logging the sign-up is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to prove valid consent.

After you unsubscribe, we delete your data from the mailing list. Your email address may be kept on a block list so that you receive no further newsletters. We use this data for this purpose only (Art. 6(1)(f) GDPR). You may object to this storage if your interests outweigh our legitimate interest. For more information, see CleverReach’s privacy policy.

8. YouTube videos

On some pages we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are only loaded once you explicitly agree. Until then, no data is transmitted to YouTube.

As soon as you load a video, a connection to YouTube’s servers is established. This transmits, among other things, your IP address and the page you are visiting to YouTube. YouTube may also store cookies or similar technologies on your device. If you are logged in to a Google account, YouTube may link your usage to that account. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission.

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw it at any time by deleting this website’s cookies in your browser. For more information, see Google’s privacy policy.

9. Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, contact details, content of your enquiry) to deal with your request. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your enquiry. We do not pass this data on without your consent. It is deleted once your request has been dealt with, unless statutory retention obligations apply.

10. Retention and recipients

Unless a more specific retention period is stated in this privacy policy, we store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Recipients of your data are only the service providers and bodies named in this privacy policy. No automated decision-making, including profiling, takes place.

11. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to info@communia.de is sufficient.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

Last updated: October 2026