Privacy Policy
Privacy policy pursuant to GDPR
Version: February 2026
Introduction and Controller
This privacy policy explains how WorldChanger Foundation gGmbH (hereinafter "we", "us", "WorldChanger") collects, processes, and uses personal data when you visit or use our website, contact us, donate, or otherwise interact with our services.
Controller:
WorldChanger Foundation gGmbH
Nußbaumstr. 6
c/o Wendelstein Steuerberatung
D-80336 Munich, Germany
Hosting
This website is hosted by Vercel Inc. (440 N Baxter St, Los Angeles, CA 90004, USA). When you visit our website, technical data (e.g., IP address, browser type, time of access) is automatically processed by the hosting provider. This is necessary to deliver the website and ensure its security.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in the secure and efficient provision of our website.
Vercel is certified under the EU-US Data Privacy Framework. We have concluded a Data Processing Agreement with Vercel.
Web Analytics (Vercel Analytics)
We use Vercel Analytics, a privacy-friendly analytics service by Vercel Inc. (440 N Baxter St, Los Angeles, CA 90004, USA), to collect anonymized usage statistics of our website. Vercel Analytics uses no cookies and collects no personal data. Only aggregated, non-traceable metrics are collected (e.g., page views, visitor numbers, device categories).
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in analyzing and improving our web presence. Since no personal data is processed, no separate consent is required.
More information can be found in the . Vercel Analytics Privacy Policy.
Newsletter (Loops)
When you sign up for our newsletter, your email address is transmitted to Loops, Inc. (340 S Lemon Ave #4495, Walnut, CA 91789, USA) and stored there for the purpose of newsletter delivery.
Legal basis: Consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time by unsubscribing via the unsubscribe link in every email or by contacting us directly.
Processed data: Email address, registration timestamp, registration source.
Retention period: Your data is stored as long as you are subscribed to the newsletter. After unsubscribing, the data is deleted immediately.
Loops is certified under the EU-US Data Privacy Framework. More information can be found in the . Loops Privacy Policy.
Legal Basis
We process personal data only when we have a legal basis, including:
- Contract fulfillment or pre-contractual measures (Art. 6(1)(b) GDPR)
- Legitimate interests (Art. 6(1)(f) GDPR) such as website security and direct communication
- Consent, where obtained (Art. 6(1)(a) GDPR)
- Legal obligations (Art. 6(1)(c) GDPR)
Categories of Personal Data
Depending on the interaction, we may process the following data:
- Identification/contact data: Name, email address, postal address, phone number
- Account and form data: Messages submitted via contact or registration forms
- Payment data: Payer name, transaction IDs (PayPal), and metadata from bank transfers
- Technical data: IP address, device identifiers, browser type/version, operating system, timestamps, pages visited, referrer, cookies
- Communication preferences
Purposes of Processing
Website operation and security
Required for legitimate interests (security, availability)
Contact requests and communication
Contract fulfillment / legitimate interest / consent, as applicable
Donations and payments (PayPal, bank transfer)
Contract fulfillment, legal obligations, and fraud prevention
Web analytics (Vercel Analytics)
Legitimate interest (Art. 6(1)(f) GDPR) — anonymized, cookie-free usage statistics
Newsletter (Loops)
Consent (Art. 6(1)(a) GDPR) — You can unsubscribe at any time
Cookies and Similar Technologies
This website uses only technically necessary cookies. These cookies are required for the proper operation of the website and cannot be disabled.
No advertising or marketing cookies are used. Our analytics service (Vercel Analytics) operates entirely without cookies. Separate consent is therefore not required.
Your Rights
You have the right to:
- Access the personal data we store about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of data under certain conditions (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability, where applicable (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time
To exercise your rights, contact: contact@WorldChanger-foundation.org
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority (e.g., the Bavarian State Office for Data Protection Supervision) if you believe that our processing violates applicable law.
Retention Period
We store personal data only as long as necessary for the respective processing purpose or as required by legal retention obligations:
- Server log data: maximum 30 days, then automatic deletion
- Contact requests: until final processing of your inquiry, then deletion unless legal retention obligations apply
- Donation data: 10 years according to tax retention periods (§ 147 AO, § 257 HGB)
- Newsletter data: until revocation of consent (unsubscription), then immediate deletion
- Technically necessary cookies: deleted when closing the browser or after the respective cookie lifetime expires
After the respective period expires, data is routinely deleted or anonymized.
Security
We employ appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or disclosure.
Changes to This Policy
We may update this privacy policy. The current version will be published on the website.
Version date: February 2026
Contact
Privacy contact: