This translation is provided for information only. Only the German version is legally binding.
Last updated: October 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Heyva Sor a Kurdistanê e.V.
Wilhelmstr. 12, 53840 Troisdorf
Phone: +49 (0) 2241 975 25 83
Email: heyvasor@web.de
Represented by the Board: Dr. Rojvan Bilgin (Chair), Vahdettin Kilic (Deputy Chair)
2. General information on data processing
We process personal data only to the extent necessary to operate a functional website, to answer your enquiries, to process donations or to manage memberships. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract/membership), (c) (legal obligation) and (f) GDPR (legitimate interest).
3. Hosting
This website is hosted by Neue Medien Münnich, ALL-INKL.COM, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
4. Server log files
When you visit our website, the host automatically stores information transmitted by your browser: IP address, date and time of access, page visited, referrer URL, browser type and operating system. This data is required for the technical provision and security of the website (Art. 6(1)(f) GDPR) and is automatically deleted after a short period.
5. Cookies
Our website uses only technically necessary cookies. The cookie pll_language stores the language you have selected so that the website is displayed in that language (valid for 1 year). When logging into the administration area, WordPress also sets session cookies; this only affects administrators. The legal basis is § 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We do not use analytics or marketing cookies.
6. Contact by email or phone
If you contact us by email or phone, we process your details (name, contact details, content of your enquiry) in order to deal with your request (Art. 6(1)(b) or (f) GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply.
7. Donations
Bank transfer: For donations by bank transfer, we receive the data transmitted by your bank (name, IBAN, amount, payment reference). We process this data to record the donation and, where applicable, to issue a donation receipt (Art. 6(1)(b) and (c) GDPR). We retain tax-relevant records in accordance with statutory periods (up to 10 years).
PayPal: Our website links to PayPal. Only when you click the link are you redirected to the website of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, where PayPal’s privacy policy applies: www.paypal.com/de/legalhub/privacy-full. We receive your name, email address and the amount donated from PayPal.
8. Membership
If you complete and send us the membership application, we process the information it contains to manage your membership and collect fees (Art. 6(1)(b) GDPR). The data is deleted after your membership ends unless statutory retention obligations apply.
9. Fonts
The fonts used on this website are loaded locally from our server. No connection is made to servers of Google or other third parties.
10. External links
Our website contains links to the websites of our partner organisations and other third parties. When you click on them, you leave our website; the respective operator is responsible for data processing there.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. To do so, please contact us at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.
12. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.