Data Policy

1. Controller

We The Women Global gUG (non-profit)
Mutschelle Str. 4
81673 Munich, Germany
Email: info@wethewomenglobal.com

2. General principles

We process personal data in accordance with applicable data protection laws, in particular the GDPR and the German Federal Data Protection Act (BDSG). Personal data means any information relating to an identified or identifiable individual.

3. Hosting and server log files

Our website is hosted and delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via its global network.
When you access our website, the hosting provider processes server log files (e.g., IP address, date/time, requested page, browser/OS, referrer).
Purpose: operation, security, stability.

Legal basis: Art. 6(1)(f) GDPR.
International transfers: possible; based on the EU Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and/or standard contractual clauses (Art. 46 GDPR).

4. Contact requests/contact form

If you contact us by email or contact form, we process the data you submit (e.g., name, email, message) to handle your request. Submissions are stored in a database operated by our processor Neon, Inc. (Postgres database hosting), and we are notified of new submissions by email via our processor Resend (Plus Five Five, Inc.). Newsletter sign-ups (your email address) are stored in the same way.
Legal bases: Art. 6(1)(b) GDPR (pre-contractual communication) and/or Art. 6(1)(f) GDPR (legitimate interest in communication).
Retention: as long as necessary; then deletion unless statutory retention obligations apply.

5. Web analytics (PostHog)

We use PostHog, a web analytics service provided by PostHog, Inc. (2261 Market St., #4008, San Francisco, CA 94114, USA), to understand how our website is used (e.g., pages visited, referrer, device/browser type, approximate location derived from the IP address). Data is processed on PostHog’s EU servers (Frankfurt, Germany).

With your consent: if you accept “Statistics” in our cookie banner, PostHog sets a cookie (ph_…_posthog, expiry 1 year) that lets us recognise returning visitors. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Without your consent: PostHog runs in cookieless mode. No cookies are set and nothing is stored on your device; visits are counted using a privacy-preserving hash generated on PostHog’s servers that changes daily and cannot be used to identify you. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving our website).

You can change or withdraw your consent at any time via the cookie settings on our Cookie Policy page. PostHog processes data on our behalf under a data processing agreement (Art. 28 GDPR). More information: PostHog Privacy Policy.

6. Embedded content and social media

Our website may embed third-party content (e.g., YouTube, Instagram, LinkedIn).
When such content is accessed, a connection to the provider’s servers may be established and personal data (in particular IP address, usage/device data) may be processed.
Legal basis: Art. 6(1)(a) GDPR (consent) where required.
International transfers: possible; handled under Art. 44 et seq. GDPR depending on provider.

7. Recipients/processors

We use service providers (hosting: Cloudflare; database: Neon; email notifications: Resend; analytics: PostHog; donations: FundraisingBox; consent tool) who process personal data on our behalf. Where required, processing is governed by Art. 28 GDPR data processing agreements.

8. Retention period

We store personal data only as long as necessary for the relevant purposes or as required by statutory retention obligations.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR).
You may withdraw consent at any time with future effect (Art. 7(3) GDPR).

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

11. SSL/TLS

This website uses SSL/TLS encryption to protect transmitted content.