Privacy policy
Last updated: July 2026
1. Controller
The controller for data processing on this website is Sanabel Initiative, [Straße und Hausnummer], [PLZ] [Ort], Deutschland.
Contact: hello@sevensanabel.org
2. What data we process, and why
Server and access data: when you open the site, our hosting provider processes technically necessary data (e.g. IP address, time, page requested) to deliver the site securely.
Donations: when you donate, your payment and the data required for it (e.g. name, email, amount) are handled by our payment providers Stripe and PayPal. Full payment details (e.g. card numbers) are processed only by the payment providers; we store only donation details (amount, time, type, status).
Contact: if you email us, we process your information to answer your request.
Language choice: we store your chosen language in a strictly necessary cookie ("lang"). It serves only the site's function and requires no consent.
3. Legal bases
Processing is based on Art. 6(1)(b) GDPR (carrying out the donation), (f) GDPR (legitimate interest in a secure, functioning website), and where applicable (a) GDPR (consent), where such consent is obtained.
4. Recipients / processors
Hosting: Vercel Inc. (USA) — serving the website.
Database: Neon (server location Frankfurt, EU) — storing donation records.
Payments: Stripe Payments Europe, Ltd. and PayPal (Europe) — processing payments, subject to their own privacy notices.
Where required, data-processing agreements are in place with these providers; for transfers to third countries, appropriate safeguards (e.g. EU Standard Contractual Clauses) are used.
5. Retention
We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations (in particular tax and commercial law).
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw any consent given at any time with effect for the future.
To exercise your rights, a message to hello@sevensanabel.org is sufficient.
7. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.