1. Who is responsible?
Bondhu Förderverein Deutschland e.V.
Steinstraße 42, 81667 München, Germany
Email: info@bundubundu.com
Represented by the Chair, Michael Kranz.
We are a small association run by volunteers and are not required to appoint a data protection officer. Please send questions about data protection to the email address above.
2. In short
- We use no cookies and no tracking. There are no analytics or advertising services.
- Fonts and images come from our own servers or our content management system, not from Google.
- Videos from Vimeo and YouTube only load once you click “Play”.
- Anything you send us (for example through the contact form) is only used to reply to you.
3. Hosting and server log files
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, the server processes technically necessary data: IP address, date and time, the page requested, referrer, browser and operating system. This is needed to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR). Log files are deleted after a short time.
We have a data processing agreement with Vercel. Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.
4. Content from our content management system
We manage texts, images and our own videos with Sanity (Sanity AS, Oslo, Norway). Images and video files are delivered through Sanity's content delivery network (cdn.sanity.io). This sends your IP address to Sanity, as delivery is not possible otherwise (Art. 6(1)(f) GDPR). We have a data processing agreement with Sanity.
5. Contact form and email
When you write to us through the form or by email, we process your name, email address and message to answer your request (Art. 6(1)(b) and (f) GDPR). Messages from the form are delivered by email to our mailbox at Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We delete messages once the request is settled and no retention obligations apply. We have a data processing agreement with Google.
6. Donations
On our donation page we embed the donation form of betterplace.org (gut.org gemeinnützige Aktiengesellschaft, Berlin). When you open the donation page, your browser loads the form and a script from betterplace's servers. At least your IP address is transmitted. What you enter in the form, such as your name, email address, payment details and, for a donation receipt, your postal address, is processed by betterplace to handle your donation. Betterplace processes this data under its own responsibility, and its privacy policy applies. The legal basis is Art. 6(1)(b) and (f) GDPR.
For existing standing orders we link to betterplace.org (gut.org gemeinnützige Aktiengesellschaft, Berlin). Data is only sent to betterplace once you click the link; their privacy policy applies there.
If you donate by bank transfer, our bank passes your account details to us. For donation receipts we keep your name and address for as long as tax law requires (Art. 6(1)(c) GDPR).
7. Videos from Vimeo and YouTube
We embed videos from Vimeo (Vimeo.com, Inc., New York, USA) and YouTube (Google Ireland Limited, Dublin) so that nothing is loaded from these services at first. Only when you click “Play” does your browser connect to the service. At least your IP address and the page you are on are transmitted, and the service may set cookies. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). For YouTube we use the privacy-enhanced mode (youtube-nocookie.com), for Vimeo the “Do Not Track” parameter. For transfers to the USA, the providers rely on the EU-US Data Privacy Framework or standard contractual clauses.
Older videos play from our own storage at Sanity (see section 4).
8. Links to social networks
We link to Instagram and Facebook with plain links only. No plugins are loaded. The network's privacy policy only applies once you follow a link.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). You can withdraw consent at any time with effect for the future. Just send us an email.
You can also lodge a complaint with a data protection authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Encryption
The website is only delivered over an encrypted connection (HTTPS).
Last updated: November 2026