Privacy Policy

Last updated: 01-10-2026

1. Responsible party

Nizam - Netzwerk der Sufi-Gemeinden e.V
Voltastraße 16-22
63225, Langen
Hessen
Deutschland

2. Overview

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.

This privacy policy applies to the data processed through our website and its related services.

3. Data collection on this website

3.1 Server log files

The website provider automatically collects and stores information in server log files that your browser transmits to us.

The following data is collected:

Browser type and version
Operating system
Referrer URL (previously visited page)
IP address of the requesting device
Date and time of the request
Pages visited and data volume transferred

We use this data solely to keep the website running and secure, and it is deleted automatically once it is no longer needed for that. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

3.2 Hosting

This website is provided as an online service by our IT service provider and hosted with Microsoft Ireland Operations Limited (Ireland), within the European Union. Both process data solely on our behalf under a data processing agreement (Art. 28 GDPR).

4. Cookies

Our website sets no cookies. Only the fact that you closed the privacy notice is kept in your browser's storage, so the notice does not come back on every visit.

4.1 Types of cookies used

Cookie	Type	Purpose	Duration
`cookie-consent`	Essential cookies	Remembers that you closed the privacy notice	Persistent (localStorage)

This setting is strictly necessary to avoid showing the notice on every visit and therefore needs no consent. You can remove it at any time by clearing your browser's storage.

5. Analytics

No analytics or tracking services are used on this website. Your visit is not measured, no profiles are built and no behavioural data is collected.

6. Contact form

If you contact us via the contact form, your details will be stored for the purpose of processing your request.

The data you provide in the contact form (name, email, phone, subject, message) is transmitted via email and stored for as long as necessary to process your inquiry. Legal basis: Art. 6 (1) (b) GDPR (contract performance) and Art. 6 (1) (f) GDPR (legitimate interest).

7. Donations

To process your donation and send you a confirmation, we ask for your name and email address. These are stored together with the amount, the date, the purpose you selected and the payment reference of the transaction.

7.1 Donation receipt

If you would like a donation receipt for the tax authorities, we additionally ask for your full address — and, for a one-off donation, your telephone number. Those details are legally required to issue a valid receipt and are only requested when you tick the box for it. If you do not, we do not ask for them.

7.2 Storage and retention

Your donation data is stored with our service provider Google Ireland Limited, within the European Union. Only board members we have authorised have access. We keep this data to trace payments and prevent abuse, and because tax law requires us to.

Legal basis: Art. 6(1)(b) GDPR (performance of the donation), Art. 6(1)(c) GDPR (statutory retention obligation for financial records) and Art. 6(1)(f) GDPR (legitimate interest in preventing fraud).

7.3 Religious nature of donations

A donation for a religious purpose, such as zakat, fitre or fidye, can reveal your religious beliefs. That is a special category of personal data (Art. 9 GDPR). We process this data as a body with a religious aim, solely in the course of our activities and relating to people in regular contact with us, and do not disclose it outside our association without your consent (Art. 9(2)(d) GDPR). Where you also give explicit consent, the processing additionally rests on Art. 9(2)(a) GDPR.

8. Third-party services

To process donations we work with a payment service provider, and our contact form is protected against automated abuse by a specialised service; that check is only loaded once you start filling in the form. These providers process data such as your IP address and, for a donation, your payment details, solely for that purpose. Legal basis: Art. 6(1)(b) GDPR (carrying out the donation) and Art. 6(1)(f) GDPR (legitimate interest in protection against abuse).

9. Transfers outside the EU

Some of our service providers may also process data in the United States. This is covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); standard contractual clauses have also been agreed (Art. 46(2)(c) GDPR).

10. Your rights

You have the right to request information about your stored personal data free of charge at any time. You also have the right to request correction, blocking or deletion of this data.

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR) — You can request information about the personal data we hold about you.
Right to rectification (Art. 16 GDPR) — You can request the correction of inaccurate data.
Right to erasure (Art. 17 GDPR) — You can request the deletion of your data under certain conditions.
Right to restriction (Art. 18 GDPR) — You can request restriction of processing of your data.
Right to data portability (Art. 20 GDPR) — You can request your data in a machine-readable format.
Right to object (Art. 21 GDPR) — You can object to processing based on legitimate interest.
Right to lodge a complaint — You have the right to file a complaint with a supervisory authority.

To exercise any of these rights, contact us at: info@nizam-ev.org

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live or work. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, datenschutz.hessen.de.

11. Right to object

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process your data unless we demonstrate compelling legitimate grounds that override your interests, or the processing is needed for the establishment, exercise or defence of legal claims. You can send your objection to info@nizam-ev.org.

12. Automated decision-making

We do not use automated decision-making or profiling (Art. 22 GDPR).

13. Data security

Our website uses SSL/TLS encryption (HTTPS) for secure data transmission. We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

14. External links

Our website may contain links to external websites. We have no influence on the content of these external websites.

15. Changes to this privacy policy

We reserve the right to update this privacy policy to reflect changes in our practices or legal requirements. The updated version will be published on this page with a new "last updated" date.