GitCover Commons gUG (hereinafter referred to as "we" or "GCC") takes the protection of your personal data very seriously. This statement describes the data we collect, how we use it, and the rights you have.

1. Data Controller

GitCover Commons gUG (limited liability)
Talstraße 2, 61381 Friedrichsdorf E-Mail: info@gitcover.org

2. Data We Collect

a) When Visiting This Website

When merely visiting this website, no personal data is collected via tracking, cookies, or analytics services. We do not use analytics tools (no Google Analytics, no Plausible, no Matomo). The page only loads external fonts (Google Fonts) and Mermaid (via jsDelivr CDN). When accessing these resources, your IP address and browser headers are transmitted to the respective providers. You can prevent this transmission by using local fonts and self-hosting Mermaid — a corresponding extension is in development.

b) Via Email Contact

If you contact us via email (e.g., for an official donation receipt), we store the data you provide (name, address, email address, donation details) to process your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interest).

c) Official Donation Receipts

To issue official donation receipts pursuant to Section 50(1) EStDV, we store the name, address, donation amount, donation date, and purpose. Legal basis: Section 147 AO (10-year retention obligation), Art. 6(1)(c) GDPR (legal obligation). After the retention period expires, the data will be deleted.

3. Disclosure to Third Parties

We do not disclose your personal data to third parties, unless:

• You have explicitly consented (Art. 6(1)(a) GDPR)
• A legal obligation exists (e.g., disclosure to tax authorities, Section 147 AO)
• It is necessary for contract fulfillment (e.g., bank for donation processing)

We do not use any data processors to process your data on our behalf (no newsletter tool, no CRM, no cloud storage with personal data).

4. Retention Period

• Email correspondence: until fully processed + 2 years retention
• Official donation receipts: 10 years (Section 147 AO)
• Booking records: 10 years (Section 147 AO)

5. Your Rights

You have the right at any time to:

• Access to data stored about you (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data, provided no retention obligations apply (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

Please direct requests in writing to info@gitcover.org.

6. Right to Complain

You have the right to lodge a complaint with the competent data protection supervisory authority. For us, this is the Hessian Data Protection Commissioner, Postfach 31 63, 65021 Wiesbaden (datenschutz.hessen.de).

7. SSL/TLS Encryption

This website is served via HTTPS (TLS 1.2/1.3). The connection between your browser and the server is encrypted.

8. Email Encryption

Emails to us can be encrypted with PGP. Our PGP key is available upon request. Please send sensitive data (address for official donation receipts) encrypted or by mail.

9. Changes to This Statement

We will update this privacy statement if our practices or the law change. The current version is always available on this page.

---

Sources and Community (Linking)

This website links — without integration — to the authoritative sources of GitCover Commons:

• Primary / SSoT: git.gitcover.org/GCC
• Public OSS Mirror / CDN: codeberg.org/org/gitcover-commons
• Community Hub: github.com/gitcover-commons

Note: This assignment may change; the canonical source on gitcover.org always prevails.