Legal

Privacy policy

1. Controller

Ka'a Harmony Foundation gUG (haftungsbeschränkt)
Buttmannstraße 7A
13357 Berlin

2. Overview

This website is a purely informational website. We do not use tracking or analytics tools. Fonts are served from our own server; no data is transmitted to Google or other third parties when you visit the site.

Language: if you open an address without a language marker (e.g. without “/de” or “/en”), we forward you to the German or English version based on your browser’s language setting. If you choose the language yourself using the switcher, we store this choice in a cookie (“kaa-lang”, valid for one year) and in your browser’s local storage so that you land in your language on your next visit. Only “de” or “en” is stored, nothing else. The legal basis is § 25(2) no. 2 TDDDG (strictly necessary for the function you requested); we set no other cookies.

3. Hosting and server log files

The website is operated on our behalf by a web service provider and hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, and delivered via its network. When you visit the site, the host processes technically necessary data (IP address, date and time, requested page, browser and operating system information) in order to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free provision of the website. The data is processed on Cloudflare servers, including in the USA; Cloudflare is certified under the EU-US Data Privacy Framework. Server log data is used only to operate and secure the website and is not combined with other data.

4. Contact by e-mail

If you contact us by e-mail, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply.

5. Donations and external services

Donation buttons link to payment pages of Stripe Payments Europe Ltd. (Dublin, Ireland) or PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg). The newsletter sign-up links to a form hosted by Tally B.V. (Ghent, Belgium). Data is only transmitted to these providers once you follow the link and enter it there; their respective privacy policies apply. For bank transfers, we process your name, account details and the transfer reference to record your donation and issue a donation receipt (Art. 6(1)(b) and (c) GDPR); records are kept for the statutory retention periods.

Links to Instagram, LinkedIn, Linktree and partner websites are plain links; no data is transferred to these services until you click them.

Some pages embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We initially only show a preview image from our own server; the video is loaded in privacy-enhanced mode (youtube-nocookie.com) only after you click “Play video”, at which point data such as your IP address is transmitted to YouTube. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Google’s privacy policy applies.

6. Your rights

Within the limits of the law, you have the right at any time to

access the personal data we hold about you (Art. 15 GDPR),
rectification (Art. 16) and erasure (Art. 17) of your data,
restriction of processing (Art. 18) and data portability (Art. 20),
object to processing based on legitimate interests (Art. 21),
lodge a complaint with a supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.