Privacy

1. Controller

Controller for personal data on this website:

• Bildungsforum für Demokratie und Vielfalt NRW e.V. (BiFoDe e.V.)
• Represented by: Denis Vilensky, board
• Email: info@bifode.org
• Address: North Rhine-Westphalia

2. Hosting and server logs

The site is hosted by Vercel Inc. (USA). Requests produce technical logs: IP, time, URL, referrer, browser and OS.

Purpose: delivery, stability, abuse prevention. Legal basis: Art. 6 (1)(f) GDPR. Logs are not merged with other sources and are stored per the host’s retention.

Vercel is a processor. Servers may be in the EU or the US (standard contractual clauses). Vercel privacy: https://vercel.com/legal/privacy-policy

3. Forms and email

Location requests, host enquiries, and sign-up for an information evening or taster class are voluntary. We process the fields you enter.

Purpose: handling the request. Legal basis: Art. 6 (1)(b) and (f) GDPR.

Your message is stored on our server so that we can handle it; attachments to a job application are stored there as well. If we have set up our own mail server, we also get a notification by email at info@bifode.org. No external mailing service is used for this. If the server cannot be reached, your mail app opens.

4. Moodle and partners

Moodle (ulpan.bifode.org) is a separate system. Partner logos link to third-party sites.

5. Cookies (TDDDG)

When you visit the website we set no cookies and write nothing to localStorage or sessionStorage. Fonts are self-hosted. There is no analytics or marketing tracking. Only when you yourself choose “Continue to payment with Stripe” in the registration form does the payment provider Stripe load its payment page and set the cookies __stripe_mid and __stripe_sid for fraud prevention. This storage is strictly necessary for the payment you explicitly requested (§ 25 (2) no. 2 TDDDG), so no consent and no cookie banner are needed.

6. Your rights

Access, rectification, erasure, restriction, portability, and objection to Art. 6 (1)(f) processing. Email info@bifode.org. Complaint: LDI NRW, https://www.ldi.nrw.de/

7. Obligation to provide data

You can read the public pages without sending data. Form fields are required only if you choose to write to us.

8. Registration and payment processing

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe processes name, email address, payment details, amount and technical data of your device (including IP address) to carry out the payment and prevent fraud. Legal basis: Art. 6 (1)(b) GDPR. Stripe may transfer data to Stripe, Inc. in the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. Stripe's payment page is loaded only when you choose “Continue to payment with Stripe”. Stripe privacy policy: https://stripe.com/de/privacy

Registration for the courses runs through the registration form on this website. We process the data you enter (name, email address, date of birth, address, payment method and your declarations) on our server to check the registration. For payment we pass your name, email address, date of birth, address and the course details to Stripe, where they are stored with the payment. After a successful payment we store these details on our server so that BiFoDe e.V. can manage your participation and membership; no external mailing service is used for this.

The purpose is the conclusion and performance of the participation contract, including payment processing. Legal basis: Art. 6 (1)(b) GDPR (contract) and Art. 6 (1)(c) GDPR (tax and commercial retention obligations).

Contract and payment data are stored for the duration of the contractual relationship and thereafter within the statutory retention periods (in particular § 147 AO, § 257 HGB), and then deleted.