Haiti-Med
Service

Data Protection.

We take the protection of your personal data seriously and treat it confidentially in accordance with the GDPR and BDSG. This statement describes which data we collect, how we use it, and what rights you have.

Vintage padlock on a stack of paper
1. Verantwortlicher

Wer für die Datenverarbeitung verantwortlich ist.

Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Haiti-Med e.V.
c/o Kleinsimlinghaus
Anton-Schneider-Weg 1
40723 Hilden
Germany

Phone: +49 (0)2103 8804992
Email: [email protected]

Authorized board member: Dr. Yves Polynice (Chairman). Register of associations: Local court Langenfeld, VR 496.

2. Which data we collect

Data you provide to us — and data logged by the server.

Server log files. When visiting our website, our hosting provider automatically collects information your browser transmits: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. These data cannot be assigned to a specific person and are automatically deleted after a maximum of seven days. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in stable operation).

Contact form. When you write to us via the contact form, we process name, email address, optionally telephone number, subject, and message — exclusively to handle your inquiry. The information is stored in our website database and additionally sent as a notification to the office. Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in response).

Konbit reservation. When making a reservation for the annual Konbit event, we process first and last name, email, number of adults and children, buffet preference, optional language indication, and optional allergies. These data serve exclusively the hall and kitchen planning of the respective Konbit edition and are deleted four weeks after the event. Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

Membership and community entry. If you become a member or register as a Haitian or supporter related to Haiti in our community, we collect the data provided in the respective forms — typically name, address, date of birth, languages, and connection to Haiti. We process these data based on the membership contract (Art. 6 para. 1 lit. b GDPR) or your consent (Art. 6 para. 1 lit. a GDPR).

Donations and donation receipts. For donations via bank transfer or online payment services, we process the data required for accounting and donation receipts — name, address, donation amount, date, purpose. These data are subject to commercial and tax retention obligations (ten years, § 257 HGB, § 147 AO). Legal basis: Art. 6 para. 1 lit. c GDPR (legal obligation).

3. Cookies and reach measurement

What we store on your device.

Technically necessary cookies. Our website uses only session and security cookies necessary for operation, for example for language recognition (German/French/Kreyòl) and to store the cookie banner decision. These cookies are technically required to keep the site operable. Legal basis: Art. 6 para. 1 lit. f GDPR and § 25 para. 2 no. 2 TTDSG.

Reach measurement. We deliberately do not use trackers from Google Analytics, Facebook, or comparable providers. A reach measurement with Plausible or Matomo (privacy-friendly, without cookies, without personal reference) is planned — as soon as active, we will supplement this statement with a separate section including opt-out.

Cookie banner. On your first visit, you receive a notice and can adjust settings. Your decision is stored in a technical cookie for six months.

4. Recipients and processors

Who processes your data on our behalf.

Hosting. This website is operated on servers of a German hosting provider. There is a contract for commissioned data processing with the provider according to Art. 28 GDPR. Server location: EU.

Email dispatch. Confirmation emails and newsletters (once active) are sent via a GDPR-compliant provider with a commissioned processing contract and EU servers. Which provider exactly will be added here as soon as mailings go live.

Banks and payment services. Donations are processed exclusively via the bank accounts named in our imprint or via established payment services (e.g., PayPal Giving Fund). These providers are independent controllers within the meaning of the GDPR.

Translation pipeline. This website is automatically translated into French and Haitian Kreyòl. For this purpose, only the editorial content (public texts and headings) are sent to a language model provider (OpenRouter / DeepL or comparable). No personal data from forms, reservations, or membership management are processed in this process — the pipeline works only on publicly visible page content.

5. Storage duration

How long we keep data.

We store personal data only as long as necessary for the respective purpose or as long as legal retention obligations apply.

  • Server logs: maximum seven days
  • Contact form inquiries: automatic deletion 90 days after receipt. If an inquiry results in a case with commercial or tax relevance, it is archived separately and in accordance with legal deadlines.
  • Konbit reservations: four weeks after the event
  • Member data: for the duration of membership, thereafter retention according to tax requirements
  • Donation receipts: ten years (§ 147 AO)
6. Your rights

What you can request at any time.

Under the GDPR, you have the following rights vis-à-vis us:

  • Information about your personal data stored with us (Art. 15 GDPR)
  • Correction of incorrect data (Art. 16 GDPR)
  • Deletion of your data, insofar as no legal retention obligation exists (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability in a structured, common, machine-readable format (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Revocation of given consents, with effect for the future (Art. 7 para. 3 GDPR)

Send us a short email at [email protected] or by post to the address given in the imprint. We respond within the legally prescribed deadlines.

7. Right to complain

Who you can contact.

You have the right to complain to a data protection supervisory authority if you believe that we are not processing your data in compliance with data protection regulations. The competent supervisory authority for our association’s registered office is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Phone: 0211 384 24-0
Email: [email protected]
Web: www.ldi.nrw.de

8. Currency and changes

Status and adjustments of this statement.

This data protection statement is regularly adapted to current legal and technical requirements — for example, when new features such as newsletters, cookie banners, or reach measurement go live. The current version can always be found at /datenschutz.

Status: May 2026. If you have questions about this text or about the processing of your data, you can reach us at [email protected].

Fragen?

Etwas unklar? Frag nach.

Datenschutz ist ein komplexes Thema. Wenn etwas in dieser Erklärung unklar ist oder du wissen möchtest, welche Daten wir konkret zu dir gespeichert haben, schreib uns einfach.