DE

Privacy

Controller pursuant to Art. 4 para. 7 GDPR:

khisdapaze e.V. Claudiusstr. 7 10557 Berlin

Association Register of the Berlin Regional Court Charlottenburg Registration Number: VR 39505 B VAT ID: DE369471160

Authorized Board Members:

  • Felix Saade
  • Chiara Kusch
  • Jan Saade
  • Mirjam Schüller
  • Julien Emil Binetti

Contact: [email protected]

1. General Information

This privacy policy informs you about the processing of personal data on our website. Personal data is any information relating to an identified or identifiable natural person.

For questions regarding data protection, please contact us at: [email protected]

2. Hosting and Technical Infrastructure

Hosting Provider: UD Media GmbH Kölner Straße 28 D-41812 Erkelenz

The website is hosted with UD Media GmbH. When providing the website, certain data is automatically collected (server log data such as IP address, browser type, operating system, referrer URL, access date and time). This data is technically necessary and is processed by our hosting provider. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in technical stability and security).

Cloudflare: To protect our website against DDoS attacks and to manage nameservers, we use Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare processes IP addresses and access log data. Cloudflare is subject to the EU-US Data Privacy Framework and provides appropriate guarantees. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in IT security).

3. Cookies and Tracking

PageHitCounter Cookie: Our website uses the ProcessWire PageHitCounter module, which sets a session-based cookie for visitor counting. This cookie is GDPR-compliant and does not store personal data. The counting serves statistical purposes to improve our services. The cookie is deleted when your browser session ends. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. External Content and Resources

Adobe Fonts (TypeKit): Our website loads fonts from Adobe Fonts (Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA). Your IP address is transmitted to Adobe for this purpose. Adobe processes this data to provide the fonts. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. You can prevent font transfer through appropriate browser settings.

YouTube Videos: Our website contains partially embedded YouTube videos. YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) sets cookies and processes data about your usage behavior. Video embedding is done in enhanced privacy mode to minimize data collection. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in informative content). For more information, see Google's privacy policy.

5. Guestbook

When you make an entry in our guestbook, the following data is stored:

  • Your name
  • Your guestbook entry text

This data is published on the website. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR (your explicit consent through publication of the entry). You can request deletion of your entry at any time. Contact us at [email protected].

6. Online Shop (Pretix)

Our online shop is operated via a self-hosted instance of Pretix and hosted with DigitalOcean (DigitalOcean, LLC, 101 Ave of the Americas, New York, NY 10013, USA). All server locations are within Germany. When placing orders, necessary personal data (name, address, email, possibly payment data) is processed. This processing is based on Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance).

Payment Service Providers: For payment processing in the online shop, we use the following external payment service providers:

Stripe (Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA): When paying by credit card, your payment data is transmitted to Stripe. Stripe processes this data for payment processing. Stripe is subject to the EU-US Data Privacy Framework. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. For more information, see Stripe's privacy policy.

PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg): When paying via PayPal, you are redirected to PayPal. Your payment data is processed directly by PayPal. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. For more information, see PayPal's privacy policy.

7. Your Rights

You have the following rights regarding your personal data:

  • Right to Information (Art. 15 GDPR): You can request information about the processing of your data at any time
  • Right to Rectification (Art. 16 GDPR): You can have incorrect data corrected
  • Right to Erasure (Art. 17 GDPR): Under certain conditions, you can request deletion of your data
  • Right to Restrict Processing (Art. 18 GDPR): You can request restriction of processing
  • Right to Data Portability (Art. 20 GDPR): You can receive your data in a structured format
  • Right to Object (Art. 21 GDPR): You can object to processing

To exercise your rights, contact us at: [email protected]

8. Data Retention

Personal data is retained only as long as necessary:

  • Server log data is typically deleted after 30 days
  • Guestbook entries are stored until you request their deletion or we remove them for other reasons
  • Shop data (orders) is retained in accordance with legal retention obligations (e.g., commercial and tax records)

9. Data Security

We implement technical and organizational measures to protect your personal data from misuse, loss, unauthorized access, and falsification. These include SSL encryption, firewalls, and regular security audits. Despite these measures, we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect current legal requirements. The current version is available on our website.

11. Contact and Your Rights

For questions, requests, or complaints regarding data protection, please contact:

khisdapaze e.V. [email protected]

Right to Lodge a Complaint with a Supervisory Authority: You have the right to lodge a complaint with a data protection authority, in particular with the authority responsible for your place of residence, workplace, or the place of the alleged violation:

Berlin Commissioner for Data Protection and Freedom of Information Friedrichstraße 219 10969 Berlin Tel.: +49 (30) 13889-0 Email: [email protected]

Valid from: October 2025 Last Updated: October 2025