Privacy policy

1. Controller

The controller for data processing on this website is Sahem e.V., Alte Steige 17, 91448 Emskirchen, Deutschland.

Contact: sabaa.sanabel.sy@gmail.com

2. What data we process, and why

Server and access data: when you open the site, our hosting provider processes technically necessary data (e.g. IP address, time, page requested) to deliver the site securely.

Donations: when you donate, your payment and the data required for it (e.g. name, email, amount) are handled by our payment providers (Stripe or PayPal). Full payment details (e.g. card numbers) are processed only by the respective payment provider; we store only donation details (amount, time, type, status).

Donation receipt: if you request a German donation receipt (Zuwendungsbestätigung), we additionally collect and store your name and postal address to issue the receipt as required by tax law. The legal basis is Art. 6(1)(c) GDPR (legal obligation); retention follows the statutory tax periods.

Contact: if you email us, we process your information to answer your request.

Language choice: the language is selected via the URL ('/' for Arabic, '/de', '/en'). We additionally store your choice in a strictly necessary cookie ("lang") so emails and payment flows use your language. It serves only the site's function and requires no consent.

3. Legal bases

Processing is based on Art. 6(1)(b) GDPR (carrying out the donation), (f) GDPR (legitimate interest in a secure, functioning website), and where applicable (a) GDPR (consent), where such consent is obtained.

4. Recipients / processors

Hosting: Vercel Inc. (USA) — serving the website.

Database: Neon (server location Frankfurt, EU) — storing donation records.

Payments: Stripe Payments Europe, Ltd. — processing card payments, subject to their own privacy notices.

Payments: PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg) — processing PayPal payments, including recurring sponsorships, subject to their own privacy notices (paypal.com).

Where required, data-processing agreements are in place with these providers; for transfers to third countries, appropriate safeguards (e.g. EU Standard Contractual Clauses) are used.

5. Retention

We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations (in particular tax and commercial law).

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw any consent given at any time with effect for the future.

To exercise your rights, a message to sabaa.sanabel.sy@gmail.com is sufficient.

7. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.