Privacy Policy

"Privacy Policy"

"As of January 2025"

"Responsible entity: Swisslamic Help Organization"

"1. Responsible entity"

"Swisslamic Help Organization"

"2. Overview of data processing"

"This privacy policy informs you about the processing of personal data by the Swisslamic Help Organization. We process data exclusively for humanitarian purposes and the handling of donations, without using commercial analysis or tracking systems."

"3. Types of data collected"

"3.1 Donation forms (projects and campaigns)"

"Purpose: Processing donations for humanitarian projects and campaigns."

"Data collected:"

"- Personal data: Salutation, first name, last name, email address, phone number"

"- Address data: Street, city, postal code, country"

"- Donation details: Amount, currency (CHF), payment method, comments"

"- Beneficiaries: Name, first name, family name, number of persons, deceased status"

"- Special types of donations: Qurban details, Zakat calculations"

"- Consent declarations: Newsletter, WhatsApp, Qurban authorization"

"- Technical data: IP address, user agent, timestamp, language, UUID"

"Legal basis: Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (contract fulfillment)"

"3.2 Newsletter registrations"

"Purpose: Sending information about projects and humanitarian activities."

"Data collected:"

"- Email address, first name, last name, phone number, salutation"

"- Preferences: Language, frequency, areas of interest"

"- Donation context: Type of donation, project ID, donation amount, donation status"

"- Technical data: Registration source, consent date, unsubscribe token"

"Legal basis: Art. 6 para. 1 lit. a GDPR"

"3.3 Contact forms"

"Purpose: Processing inquiries and communication."

"Data collected:"

"- First name, last name, email address, phone number"

"- Message text"

"- Technical data: IP address, timestamp"

"Legal basis: Art. 6 para. 1 lit. a GDPR"

"3.4 Sponsorship requests"

"Purpose: Facilitating sponsorships for needy children."

"Data collected:"

"- Sponsor data: Name, email, phone, full address"

"- Sponsorship details: Region, number, monthly amount"

"- Personal messages: Message to the child"

"- Technical data: IP address, timestamp"

"Legal basis: Art. 6 para. 1 lit. a GDPR"

"3.5 Needy children (sponsorships)"

"Purpose: Facilitating sponsorships for needy children."

"Data collected:"

"- Public data: Name, date of birth, gender, region, monthly amount, photo"

"- Sponsorship status: Availability and assignment status"

"Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest) and Art. 6 para. 1 lit. a GDPR (consent)"

"4. Used third-party providers"

"4.1 Email dispatch"

"Mailgun: Email dispatch for newsletters and notifications (Mailgun Technologies Inc., USA)"

"4.2 Payment processing"

"RaiseNow: Donation processing and payment processing (RaiseNow AG, Switzerland)"

"5. Data processing in detail"

"5.1 Donation processing"

"Purpose:"

"- Processing donations for humanitarian projects"

"- Issuing donation receipts"

"- Communication about donation status"

"- Newsletter registration (with consent)"

"Processing steps:"

"1. Data entry via donation form"

"2. Validation of entries"

"3. Storage of donation information"

"4. Forwarding to payment service provider"

"5. Email notifications"

"6. Newsletter registration (with consent)"

"Storage duration: 10 years (tax retention obligation)"

"5.2 Newsletter management"

"Purpose:"

"- Sending project updates"

"- Information about new campaigns"

"- Success stories and reports"

"Processing steps:"

"1. Registration via donation form or newsletter form"

"2. Confirmation of registration via email"

"3. Personalized email dispatch"

"4. Unsubscribe option in every email"

"Storage duration: Until unsubscribed + 3 years"

"5.3 Sponsorship management"

"Purpose:"

"- Facilitating sponsorships"

"- Managing sponsorship relationships"

"- Communication between sponsors and organization"

"Processing steps:"

"1. Sponsorship request via website"

"2. Assignment of children"

"3. Invoicing"

"4. Communication with sponsors"

"5. Managing the duration of sponsorship"

"Storage duration: 10 years after the end of sponsorship"

"6. Data transfer to third countries"

"USA (Mailgun):"

"- Legal basis: Art. 45 GDPR (adequacy decision) and standard contractual clauses"

"- Safeguards: Encryption, access controls"

"Switzerland (RaiseNow):"

"- Legal basis: Art. 45 GDPR (adequacy decision)"

"- Safeguards: Contractual agreements"

"7. Your rights"

"7.1 Right of access (Art. 15 GDPR)"

"You have the right to request information about the personal data we process."

"7.2 Right to rectification (Art. 16 GDPR)"

"You can request the rectification of inaccurate or the completion of incomplete data."

"7.3 Right to erasure (Art. 17 GDPR)"

"You have the right to have your data erased, provided there are no legal retention periods."

"7.4 Right to restriction (Art. 18 GDPR)"

"You can request the restriction of the processing of your data."

"7.5 Right to data portability (Art. 20 GDPR)"

"You have the right to receive your data in a structured, commonly used format."

"7.6 Right to object (Art. 21 GDPR)"

"You can object to the processing of your data for reasons relating to your particular situation."

"7.7 Right to withdraw consent (Art. 7 para. 3 GDPR)"

"You can withdraw your consent at any time."

"8. Data security"

"8.1 Technical measures"

"- Encryption: HTTPS/TLS"

"- Secure database: Encrypted storage"

"- Access control: Authorized access"

"- Spam protection"

"- Validation of all entries"

"8.2 Organizational measures"

"- Access restriction"

"- Data protection training"

"- Documentation"

"- Regular backups"

"9. Special provisions for children"

"For sponsorships of children under 16 years, the consent of the legal guardians is required. We do not collect data from children without consent."

"10. Cookies and tracking"

"We do not use:"

"- Google Analytics or similar tracking tools"

"- Facebook Pixel"

"- Advertising cookies"

"- Third-party tracking"

"We only use:"

"- Technically necessary cookies"

"- Session cookies"

"11. Contact and complaints"

"11.1 Data protection officer"

"Email: ""info@swisslamic.ch"

"11.2 Supervisory authority"

"Switzerland:"

"Federal Data Protection and Information Commissioner (EDÖB)"

"Feldeggweg 1, 3003 Bern"

"Tel: +41 58 462 43 95"

"Email: ""info@edoeb.admin.ch"

"Germany:"

"Federal Commissioner for Data Protection and Freedom of Information"

"Graurheindorfer Str. 153, 53117 Bonn"

"Tel: +49 228 997799-0"

"Email: ""poststelle@bfdi.bund.de"

"12. Changes to the privacy policy"

"We reserve the right to update this privacy policy. The current version can be found on our website."

"13. Applicable law"

"This privacy policy is subject to the Swiss Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR)."

"Last updated: January 2025"

"This privacy policy has been specifically created for the Swisslamic Help Organization."