Last updated: 4 August 2026
This privacy notice explains how Together For Ghana e.V. processes personal data when you visit this website, contact us, subscribe to our newsletter or make a donation.
1. Controller
Together For Ghana e.V.
81371 Munich
Email: contact@together4ghana.org
Telephone: +49 162 4191060
2. General principles
We process personal data only when this is necessary to operate the website, respond to enquiries, provide requested services, administer donations, fulfil legal obligations or protect legitimate interests. Depending on the situation, the legal bases are Article 6(1)(a), (b), (c) and (f) GDPR.
We do not sell personal data. We do not use website data for solely automated decisions that produce legal or similarly significant effects.
3. Website hosting and server logs
This website is hosted by ALL-INKL.COM – Neue Medien Münnich in Germany. When the website is accessed, the hosting systems may process technical connection data such as the IP address, date and time, requested page, referrer, browser, operating system and response status. Processing is necessary to deliver the website, maintain security and diagnose faults (Article 6(1)(f) GDPR).
Log data is retained only for as long as it is needed for operation, security and legal requirements and is then deleted or anonymised. Further information is available in the ALL-INKL privacy information.
4. Contact enquiries
Our contact forms collect your name, email address, subject and any message you choose to provide. We use this information to answer and administer your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps; otherwise it is Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries and coordinating our nonprofit work.
Contact Form 7 processes the submission within our WordPress installation. Website emails are delivered through Brevo, and contact details are stored in a Brevo contact list for enquiry and contact management. Do not submit medical records or other sensitive personal data through the contact form.
We retain correspondence until the enquiry has been resolved and thereafter only for as long as legitimate organisational or statutory retention requirements apply.
5. Newsletter
If you subscribe to our newsletter, we process your name and email address to send information about our nonprofit work. The legal basis is your consent under Article 6(1)(a) GDPR. Brevo is used to manage subscribers and deliver messages. The subscription uses a single opt-in process: after you actively accept the consent statement and submit the form, your details are added directly to our newsletter list without a separate confirmation step.
You may withdraw your consent at any time with effect for the future, for example by using an unsubscribe link in a newsletter or contacting us. We retain subscription data until you unsubscribe or withdraw consent, subject to limited retention of proof of consent and suppression information where necessary to honour your request.
Information about Brevo’s processing is available in the Brevo privacy policy.
6. Spam protection with Google reCAPTCHA
On production contact forms we use Google reCAPTCHA to distinguish legitimate submissions from automated abuse. Google may process technical data such as your IP address, browser and device information, page interaction and referrer information. We use reCAPTCHA to protect forms and website infrastructure against spam and misuse (Article 6(1)(f) GDPR).
Google’s Privacy Policy and Terms of Service apply. reCAPTCHA is disabled in our protected development and staging environments.
7. Donations through Fundraise Up
Donation forms and fundraising elements are provided through Fundraise Up. When you open or use a donation form, Fundraise Up processes the information required to administer the donation, which may include identity and contact information, donation amount, selected campaign, payment method, transaction information, device and fraud-prevention data, and information needed for receipts or recurring donations.
Together For Ghana e.V. determines the purposes of donor-data processing and acts as controller. Fundraise Up processes supporter data on our behalf as a processor. Depending on the selected payment method, payment information is processed by Stripe or another payment provider presented in the checkout. Together For Ghana e.V. does not receive full payment-card details.
The legal bases are Article 6(1)(b) GDPR for processing the requested donation, Article 6(1)(c) GDPR for tax and accounting obligations, Article 6(1)(f) GDPR for fraud prevention, security and donation administration, and Article 6(1)(a) GDPR where optional communications or optional technologies require consent.
Fundraise Up uses first-party technologies for checkout security, fraud prevention, preferences and, where consent is given, functional or statistical purposes. Details, durations and controls are described in Fundraise Up’s cookie documentation, privacy policy and GDPR information. Stripe provides further information in its Privacy Center.
8. Cookies and local storage
The website uses technically necessary cookies or comparable storage to provide requested functions, maintain security and remember settings such as language or consent choices. These technologies are used in accordance with Section 25(2) TDDDG and Article 6(1)(f) GDPR where they are strictly necessary.
Optional technologies are used only on the basis of consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change or withdraw your choices at any time through the cookie settings linked in the website footer. Withdrawal does not affect processing that occurred before it.
9. Social networks and external links
The website links to our profiles or contact channels on Facebook, Instagram, LinkedIn and WhatsApp and to other third-party websites. These are ordinary external links. Data is transmitted to the relevant provider only when you follow a link or otherwise interact with that provider. The provider’s own privacy information then applies.
10. Recipients and international transfers
Personal data is made available only to authorised association members and service providers who need it for the purposes described above. Service providers include the website host, email and newsletter provider, fundraising platform, payment providers and technical security providers.
Some providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, including the EU-US Data Privacy Framework for participating organisations, or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
11. Retention
We retain personal data only for as long as necessary for the relevant purpose. We may retain donation, payment and accounting records for statutory periods. Under German commercial law, different categories may be retained for ten, eight or six years. Data may also be retained for the establishment, exercise or defence of legal claims. Once the relevant purpose and retention obligations end, the data is deleted or anonymised.
12. Your rights
Subject to the applicable conditions, you have the right to access your personal data, obtain rectification or erasure, restrict processing, receive portable data, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, contact contact@together4ghana.org. You also have the right to lodge a complaint with a data-protection supervisory authority. For a nonprofit association based in Munich, the competent Bavarian authority is generally the Bavarian State Office for Data Protection Supervision (BayLDA).
13. Changes to this notice
We update this notice when our services, processing activities or legal requirements change. The current version is published on this page.