Protecting your personal data matters to us. We process your data solely in accordance with the law, in particular the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This policy explains which data we collect when you visit our website or make a donation, what we use it for and what rights you have.
The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:
Austria Yetim EliFor any questions about data protection or to exercise your rights, please contact us at info@austriayetimeli.at or at the postal address above. Our association is not legally required to appoint a data protection officer and has not appointed one.
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany; our database and the emails sent via the website are processed there as well. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR.
Each time our website is accessed, the web server automatically stores the following information transmitted by your browser in server log files:
This data is not combined with other data sources. It is processed in order to provide the website, ensure its stability and security, and prevent misuse (e.g. attacks). The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The log files are only kept for as long as necessary for these purposes and are then deleted or anonymised.
To understand which content and projects interest our visitors and to improve our website, we compile anonymous visitor statistics. We do not use any external analytics tool for this, but our own method that runs exclusively on our server. No cookies are set and no data is stored on your device.
When a page is opened, your browser transmits to our server: the page visited, the previously visited website (domain and path only), the page title, any campaign tags in the link (utm parameters), the screen width, the time zone and language of your browser, the time spent on the page and the scroll depth, as well as certain clicks (e.g. "Add to basket", WhatsApp, phone or email links, submitting a form). From the time zone we only derive the approximate country, and from the browser identifier only the device type, browser and operating system.
Your IP address and the full browser identifier are not stored. To group the page views of one visit, we create a shortened checksum (hash) from the IP address, the browser identifier and a random value that is generated anew every day and then deleted. A visitor can therefore only be recognised within the same day; tracking across days, a user profile or attribution to you as a person is not possible. The statistics are not combined with donation or contact data. We delete the raw data after 13 months at the latest.
The legal basis is our legitimate interest in data-minimising audience measurement and in improving our services (Art. 6(1)(f) GDPR). If your browser sends a "Global Privacy Control" or "Do Not Track" signal, your visit is not recorded. You can also object to the recording at any time (Art. 21 GDPR); the cookie aye_nt is then set so that your objection is respected:
Cookies are small text files that your browser stores on your device. We also use your browser's local storage ("localStorage" and "sessionStorage"). We exclusively use cookies and storage technologies that are strictly necessary for you to use functions you have expressly requested. Under § 165(3) TKG 2021 no consent is required for these; the legal basis for the associated processing is Art. 6(1)(b) and (f) GDPR.
| Name | Purpose | Retention |
|---|---|---|
PHPSESSID (cookie) | Session cookie for donation forms and payment; protects forms against misuse (CSRF protection) and matches your return from the payment provider to your donation. | until the browser is closed or after 2 hours of inactivity |
aye_lang (cookie) | Remembers the language you selected (Turkish, German, English). | 12 months |
aye_consent (cookie) | Remembers your decision regarding external content (YouTube, Google Maps). | 12 months |
aye_nt (cookie) | Remembers your objection to the visitor statistics (see section 3); only set if you object, and for staff using the administration area. | approx. 13 months |
ayeCart (localStorage) | Your donation basket (selected projects and amounts). | until the donation is completed or you empty it |
| Form and chat data (sessionStorage) | Temporary storage of your form entries and your conversation with the Donation Assistant, so nothing is lost when you change pages. | until the browser tab is closed |
Data in local storage remains on your device and is not automatically transmitted to us. You can delete or block cookies and local storage in your browser settings at any time; some functions (e.g. the donation basket) may then not be available.
When you donate via our website (donation basket, Quick Donation or project page), we process the following data:
We use this data to receive your donation and allocate it to the intended purpose, to send you a confirmation of receipt and payment (donation receipt) by email, to remind you by email of a payment that is still outstanding, to clarify questions about your donation and to comply with our statutory accounting and retention obligations.
The legal bases are Art. 6(1)(b) GDPR (carrying out the donation you requested), Art. 6(1)(c) GDPR (statutory record-keeping and retention obligations, in particular § 132 of the Austrian Federal Fiscal Code, BAO) and Art. 6(1)(f) GDPR (our legitimate interest in preventing misuse and clarifying queries). Providing the data is voluntary; without it, however, we cannot process your donation via the website.
Please only enter the name of another person (e.g. "on behalf of …") if you are entitled to do so. We use it exclusively to carry out the respective donation. The type of donation (such as Qurbani, Zakat or Fitrah) may allow conclusions to be drawn about religious beliefs; we use this information solely to process your donation, treat it in strict confidence and do not share it for any other purpose.
If you choose bank transfer, we receive the details you provide with the transfer (name, IBAN, amount, payment reference) from our bank.
For online payments we redirect you to the secure payment page of the respective provider. You enter your card, account or login details only there; we do not receive them. We transmit the donation amount, the reference number, a description of the donation and – where required for the payment – your email address to the provider. We receive confirmation of the payment status and the transaction number from the provider.
Card payments, Apple Pay, Google Pay and EPS transfers are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). Stripe also processes data for fraud prevention. More information: stripe.com/at/privacy.
Payments with PayPal are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). More information: paypal.com/at/legalhub/privacy-full.
The legal basis is Art. 6(1)(b) GDPR (processing the payment). Stripe and PayPal are in part independent controllers for the processing that takes place on their side. Processing by affiliated companies in the USA cannot be ruled out (see section 13).
If you contact us via the contact form, by email or by phone, we process the details you provide (name, email address, phone number if given, subject and message) to handle your enquiry and any follow-up questions. For the contact form we additionally store the time and IP address to prevent misuse and spam; the message is also forwarded to us by email. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a donation or a matter you want us to handle, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Our website contains links to WhatsApp. No WhatsApp program code is embedded in our pages; only when you click the link and write to us does WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, process your data under its own terms (whatsapp.com/legal/privacy-policy-eea). If you do not want this, please use email or phone instead.
If you request a free donation box via our website, we process your first and last name, email address, phone number, delivery address, desired quantity, an optional message, and the time and IP address (to prevent misuse). We use this data to process and ship your request; for this purpose, your name and delivery address are passed on to the postal or delivery company. The legal basis is Art. 6(1)(b) GDPR.
If you subscribe to our newsletter, we store your email address and – as proof of your subscription and to prevent misuse – the time, source (form) and IP address. We use your email address solely to send you information about our projects, campaigns and donation appeals. The legal basis is your consent (Art. 6(1)(a) GDPR).
You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every newsletter email or by sending a short message to info@austriayetimeli.at. Once you unsubscribe, we remove your address from the mailing list. The lawfulness of processing carried out before the withdrawal remains unaffected.
Our Donation Assistant runs entirely in your browser. Your messages are not transmitted to our server or to third parties and are not stored; the conversation history is kept only in your browser's session storage (sessionStorage) and is deleted when you close the tab. No external artificial intelligence service is used. Any name, email address, phone number or message you enter in the assistant is only used if you choose "Proceed to payment": it is then transferred to the payment form and only becomes part of your donation data once you submit your donation (see section 5).
On some pages we show videos from our YouTube channel, and on the contact page a map from Google Maps. Both services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When this content is loaded, your browser connects to Google's servers; Google receives in particular your IP address, information about your browser and the page from which the content was accessed, and may use cookies or similar technologies. If you are logged in to a Google account, Google may associate the access with your account.
This content is therefore only loaded once you consent: either generally via our notice ("Allow all") or individually by clicking "Play video" or "Show map". We embed videos in privacy-enhanced mode via youtube-nocookie.com. Video preview images are served from our own server; the list of our videos is fetched from YouTube by our server without transmitting any data about our visitors.
The legal basis is your consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). You can withdraw your consent at any time via "Cookie settings" at the bottom of every page:
More information: policies.google.com/privacy.
Fonts (Inter, Outfit, Poppins), icons (Font Awesome), libraries for image galleries and sliders (Swiper, Fancybox) and country flags are loaded from our own server. No connections to Google Fonts, content delivery networks or other third parties are established for this when you open our pages. The gold, silver and exchange rates for the Zakat calculator are retrieved exclusively by our server from public rate services; no data about our visitors is transmitted in the process.
Within our association, your data is only accessible to those who need it for the respective task. Depending on the process, external recipients are our host (section 3), the payment providers Stripe and PayPal (section 6), our bank, postal and delivery services (section 8), Google for external content after your consent (section 11) and, where required by law, tax advisers, auditors and public authorities.
Stripe, PayPal and Google may also transfer data to affiliated companies in the USA. For the USA there is an adequacy decision of the European Commission (EU-US Data Privacy Framework), under which the companies concerned are certified. Otherwise, transfers are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
Under the GDPR you have the right at any time to:
Simply contact us informally at info@austriayetimeli.at. To protect your data, we may ask you to verify your identity.
If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)Our website is encrypted throughout via SSL/TLS (recognisable by "https://" and the padlock icon in your browser). Access to donation and contact data is restricted to authorised persons and protected by personal login credentials; we back up our database regularly. Please note that data transmission over the internet, for example by unencrypted email, may have security gaps.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
We object to the use of the contact details published on this website for sending unsolicited advertising.
We update this privacy policy whenever our website, our processes or the legal situation change. The version published on this page applies. This policy is also available in German and Turkish; the German version is binding.
YouTube video
This video is played via YouTube (Google). When you play it, Google receives your IP address and information about your device.
Google map
The map is loaded from Google Maps. When you show the map, Google receives your IP address.
TR
DE
EN