Skip to content
IKAZE
DE
Privacy

Privacy policy

GDPR-compliant information about data processing on ikaze-africa.org.

Last updated: August 2026

IKAZE — Ruandas Kulturverein takes the protection of your personal data seriously. This statement describes which data we process, for what purpose, and what rights you have.

1. Controller

IKAZE — Ruandas Kulturverein, Donau-City-Straße 1, 1220 Vienna · ZVR no. 1223358653 · [email protected]

2. Form data

When you submit a form (membership application, sponsorship inquiry, contact, event registration), we process the submitted data to address your request.

  • Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
  • Retention: membership and sponsorship data for the duration of the relationship; contact inquiries for 24 months.
  • Recipients: only the board and management. No third-party transfer without your consent.

3. Hosting and server logs

The website runs on a server operated by Hetzner Online GmbH, located in Germany (EU). Technically necessary data (IP address, browser, timestamp) is processed when you visit. We do not run web analytics and set no tracking cookies. The website, including images and documents, is delivered via Cloudflare’s content delivery network (see data processors).

4. Processors

We use the following service providers as processors:

  • Hetzner Online GmbH (Germany) — hosting of the website, the database and backups.
  • Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) — content delivery and attack protection. Cloudflare acts as a reverse proxy: your requests — including your IP address — pass through Cloudflare’s servers, and content such as images may be cached there. Cloudflare processes this data on our behalf under a data-processing agreement including EU Standard Contractual Clauses. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and performant delivery of this website).
  • Zoho Corporation (EU data centre) — the association’s mailboxes, including [email protected] and [email protected].
  • Resend, Inc. (USA) — delivery of automated confirmation and notification emails from our forms. The transfer to the USA is based on the EU Standard Contractual Clauses.
  • Payload CMS — our editorial system; it runs on the same server and transfers no data to third parties.
  • KUPF Services GmbH (Austria) — ticket sales for the AfriVision gala via KUPFticket and, where enabled, donation processing via kulturspenden.at. It processes the data you enter there; the purchase happens on their website, not on ours.
  • Stripe Payments Europe, Ltd. (Ireland) — payment processing on behalf of KUPF Services. Card details never reach our website at any point. Any transfer to Stripe, Inc. (USA) is based on the EU Standard Contractual Clauses.

5. Email communication

The association can be reached at [email protected] and the AfriVision programme at [email protected]. We store your message and contact details to handle your request and delete them once that purpose no longer applies.

6. Your rights

You have the right at any time to information, rectification, erasure, restriction, data portability, and objection. Complaints may be filed with the Austrian Data Protection Authority (dsb.gv.at).

7. Contact

For data protection inquiries, please contact [email protected].

8. AfriVision applications

When you apply to AfriVision Austria, we process the data you provide (name, email, phone/WhatsApp number, age, place of residence, African country of heritage, talent, motivation, and optionally social-media profile and how you heard about us; earlier applications may also contain occupation and a photo). We process it solely to run the selection procedure for the programme, on the basis of your explicit consent (Art. 6(1)(a) GDPR). The data is stored in our editorial system (hosted in the EU); confirmation and notification emails are sent through our processor Resend. Applications that are not selected are deleted by 31 December 2026 at the latest. You can withdraw your consent at any time, with effect for the future, at [email protected].

If you reach the page through one of our ads or a shared link, we also store the campaign details from the address with your application: source, campaign and motif (for example "meta", "bewerbung26", "M8"). They describe the ad, not you, and we use them only to count which ad leads to applications (legitimate interest, Art. 6(1)(f) GDPR). Nothing is stored on your device for this, and we do not take over click identifiers from ad platforms.

9. Photos and videos for AfriVision

Through ikaze-africa.org/afrivision/upload, AfriVision Austria participants can send us photos and videos. We process your name, your e-mail address (to match it with your application), the files themselves, and the wording and time of your consent. We use the files solely for AfriVision communication — on our website, on Instagram, LinkedIn and TikTok, and in press work — on the basis of your consent (Art. 6(1)(a) GDPR). The files are stored, not publicly, in our editorial system on a server of Hetzner Online GmbH in Germany; only the AfriVision team has access. When we publish a photo or video on Instagram, LinkedIn or TikTok, these platforms also process it under their own terms, partly outside the EU.

You can withdraw your consent at any time, with effect for the future, by e-mail to [email protected]. We then delete your files and remove posts with your photos or videos from our channels, as far as we can remove them ourselves. Without a withdrawal, files we have not used are deleted by 31 December 2027 at the latest.