1. Data controller

This policy explains what personal data we process when you visit this website or get in touch with us, for what purposes, and on what legal basis.

The data controller is:

DCB – Rumänische Diaspora Initiative e.V. c/o Bunescu, Oderstraße 16, 10247 Berlin, Germany Email: [email protected] Phone: +49 30 221 84083 Register of associations: Amtsgericht Berlin-Charlottenburg, VR 38094 B

We are not legally required to appoint a data protection officer. For any question concerning data protection, please write to the email address above.

2. General principles

We process personal data only where necessary, and only to the extent necessary. We do not sell data, we do not use it for advertising, and we do not build user profiles.

This website uses no web analytics or visitor tracking. There are no contact forms, user accounts or comment sections.

3. Hosting and log files

The website is hosted on GitHub Pages, a service provided by GitHub, Inc. (San Francisco, USA), part of Microsoft Corporation.

Each time the site is accessed, the hosting provider automatically records the technical data your browser transmits: IP address, date and time of access, the page requested, browser type and version, operating system, and the referring page if there is one.

This data is necessary to deliver and secure the website and to detect abuse. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. We do not combine this data with other sources and do not use it to identify you.

4. Cookies

The website uses no analytics, advertising or tracking cookies.

When you dismiss the cookie banner, your preference is stored locally in your browser for 30 days so that the banner does not reappear on every visit. That information stays on your device and is not transmitted to us.

The embedded content described in sections 5 and 6 may set its own cookies once you activate it.

5. Web fonts

The website loads the Josefin Sans and Roboto typefaces from Google Fonts servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the page loads, your browser transmits your IP address to Google, which may involve a transfer of data to Google LLC in the United States.

The legal basis is our legitimate interest in presenting the site with a consistent visual identity, under Art. 6(1)(f) GDPR. If you wish to avoid this transfer, you can block third-party scripts in your browser.

The icons (Font Awesome) are hosted on our own servers and generate no third-party requests.

6. Embedded content

YouTube videos

Some pages embed videos from YouTube (Google Ireland Limited). The video loads only after you press play; only at that point is a connection to Google’s servers established, and Google may receive your IP address and information about your device. The preview image may likewise be retrieved from Google’s servers.

The legal basis is your consent, given by starting the video, under Art. 6(1)(a) GDPR. Further information is available in Google’s privacy policy.

Newsletter signup form

Our home page embeds a signup form provided by Substack Inc. (United States). If you interact with the form, the data you enter and your technical connection data are processed by Substack.

7. Newsletter

Our newsletter is distributed through Substack Inc. (548 Market Street, San Francisco, CA 94104, USA).

Subscribing requires your email address. Subscription is based on your consent under Art. 6(1)(a) GDPR. Substack may record statistical data on message opens and link clicks.

You can unsubscribe at any time using the link in every message, or by writing to us. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

8. Donations

We offer several ways to donate:

• Bank transfer to our account at GLS Gemeinschaftsbank eG. We receive your name, IBAN and any payment reference.
• PayPal, operated by PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg). The payment takes place on PayPal’s infrastructure, under its own privacy policy.
• Patreon, operated by Patreon, Inc. (United States), for recurring contributions.

We process donor data in order to process the donation, to issue a donation receipt on request, and to meet our accounting and tax obligations. The legal bases are Art. 6(1)(b) and Art. 6(1)(c) GDPR. Accounting records are retained for the statutory German retention periods, generally ten years.

9. Communication by email and telephone

If you write or call us, we process your contact details and the content of your message in order to answer your enquiry. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where the enquiry concerns a contractual or membership relationship.

Please note that email is not automatically encrypted in transit. For sensitive information we can offer an alternative channel on request.

10. Members, volunteers and event participants

To administer the association we process data about members and volunteers: name, contact details, information on membership fees and involvement in activities. The legal basis is Art. 6(1)(b) GDPR together with our statutes.

Photographs or video recordings may be made at our events to document and present our work. We inform you about this on site and, where necessary, ask for your consent under Art. 6(1)(a) GDPR. You may object at any time to the publication of an image in which you appear.

11. Social media

We maintain profiles on Facebook, Instagram, LinkedIn, Meetup and Substack. This website contains plain links to those pages only: no plugins, share buttons or tracking pixels are embedded, and visiting our site transmits no data to those platforms.

If you follow a link, the privacy policy of the platform concerned applies. On our profiles within those platforms, data processing is primarily the responsibility of the platform operator.

12. Transfers to third countries

Some of the providers named above are established in the United States or process data there. In those cases the transfer is based on the European Commission’s standard contractual clauses or on the provider’s certification under the EU–US Data Privacy Framework.

13. Retention periods

We keep personal data only as long as necessary for the purpose for which it was collected, or as long as the law requires us to. After that, the data is deleted. Records relevant for accounting are kept for the statutory retention periods.

14. Your rights

Under the GDPR you have the right:

• of access to your data (Art. 15)
• to rectification of inaccurate data (Art. 16)
• to erasure of your data (Art. 17)
• to restriction of processing (Art. 18)
• to data portability (Art. 20)
• to object to processing based on legitimate interest (Art. 21)
• to withdraw consent at any time (Art. 7(3))

To exercise these rights, please write to [email protected].

15. Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61, 10555 Berlin, Germany

16. Changes to this policy

We update this policy when our activities or the services used on this website change. The version applicable is the one published on this page.

Last updated: October 2026.