Privacy policy
Thank you for your interest in Ayiti Dijital. You can read this site without disclosing any personal data whatsoever: we ask for none and collect none.
Should you one day wish to use a particular service of the association — writing to us, joining, subscribing to the newsletter — processing your data could become necessary. Where such processing is necessary and no legal basis covers it, we obtain your consent first.
This notice explains which data we process as controller, which data the processors we appoint handle — our host, for instance — and what rights you have. By “personal data” we mean information within the meaning of Art. 4(1) GDPR: a name, an email address, a postal address.
Last updated17 July 2026
- This site ayitidijital.org, and any other site the association may come to operate.
- Our public profiles Our presence on social networks, as far as we control it there.
- Email correspondence Any exchange you begin with us at contact@ayitidijital.org.
The association runs neither an online shop nor a mobile app, so those cases are not covered — they do not exist.
- We don't track you. No cookies, no third-party pixels, no fingerprinting, no analytics.
- No third-party content. Images and fonts are served from our own domain. Browsing this site, your browser contacts no other server.
- No collection. No form on this site transmits or stores any data at present.
- Controller
- Ayiti Dijital (Verein in Gründung), Ursberger Str. 15, 81673 München, Deutschland
- Contact
- contact@ayitidijital.org
We are not required to appoint a data protection officer: neither the Art. 37 GDPR nor the § 38 BDSG thresholds are met. For any question about your data, write to the address above.
This page uses the regulation's vocabulary. Here is what those terms mean, in the sense given by Art. 4 GDPR.
- Personal data Any information relating to an identified or identifiable natural person, directly or indirectly: a name, a number, location data, an online identifier (Art. 4(1)).
- Data subject The identified or identifiable natural person whose data is processed — in this case, you.
- Processing Any operation performed on data: collection, recording, organisation, storage, consultation, disclosure, erasure, destruction (Art. 4(2)).
- Restriction of processing Marking stored data so as to limit its future processing (Art. 4(3)).
- Profiling Automated processing to evaluate or predict personal aspects — behaviour, interests, economic situation, movements (Art. 4(4)).
- Pseudonymisation Processing such that data can no longer be attributed to a person without additional information, kept separately (Art. 4(5)).
- Controller Whoever determines the purposes and means of processing (Art. 4(7)). For this site, the association.
- Processor A third party processing data on the controller's behalf and on its instructions (Art. 4(8)) — here, our host.
- Recipient Any body to which data is disclosed, whether a third party or not; authorities acting under a specific inquiry are not recipients (Art. 4(9)).
- Third party Any body other than the data subject, the controller, the processor, and persons authorised to process the data under their authority (Art. 4(10)).
- Consent A freely given, specific, informed and unambiguous indication that you agree to a processing operation (Art. 4(11)).
These are the regulation's own definitions, restated here for clarity; they describe the vocabulary, not our practices. We carry out neither profiling nor pseudonymisation.
Processing personal data is lawful only where it rests on one of the grounds in Art. 6 GDPR.
- Consent — Art. 6(1)(a) You explicitly agree to a particular processing operation, and may withdraw that agreement at any time.
- Contract — Art. 6(1)(b) The processing is necessary to perform a contract or to take pre-contractual steps.
- Legal obligation — Art. 6(1)(c) The law requires us to process or retain certain data, for instance for accounting.
- Legitimate interest — Art. 6(1)(f) The processing is necessary to run the site securely and your rights and freedoms do not override it.
Today only legitimate interest applies to this site, and only for the technical data required to deliver the pages. We ask for no consent, because we do nothing that requires one.
This site is hosted by Vercel Inc. (United States), acting as our processor. To deliver a page, your browser necessarily transmits technical data to the host: your IP address, the date and time of the request, the address requested, the referring site and your browser type. That data serves to deliver the site, keep it secure and diagnose faults. It is not used to identify you and is not combined with any other information.
This processing is essential to making the site available and rests on our legitimate interest (Art. 6(1)(f) GDPR). As Vercel is a US company, a transfer of this technical data to a third country within the meaning of Art. 44 ff. GDPR cannot be excluded.
This site is served over HTTPS only: everything exchanged between your browser and the server is encrypted using TLS. You can tell by the address, which begins with “https://”. That encryption stops third parties reading what you look at in transit, and forms part of the technical measures required by Art. 25 and Art. 32 GDPR.
None. We use neither Google Analytics, nor Plausible, nor any other analytics, tracking or advertising tool. We do not know how many people visit this site.
Fonts are installed on and loaded from our own domain: your browser contacts no Google server. The same goes for images. The site embeds no video, maps, fonts, widgets or scripts from any third-party service.
We maintain profiles on several social networks, and the footer links to them. Those are plain links: no “like” button, no thumbnail and no script from those platforms is embedded in this site. Your browser does not contact them, and they learn nothing about your visit unless you click.
The moment you follow such a link you leave this site: the terms and privacy policy of that platform then apply, and we have no influence over the data it collects.
The contact form sends nothing to our servers: it opens a pre-filled message in your own mail program, which you send yourself. We then handle that email as ordinary correspondence (see “Data protection contact”). The newsletter forms are not yet connected to a sending service: the information entered is neither transmitted nor stored. As soon as one of these forms transmits data to our servers, this page will be updated before any collection.
We retain no personal data from this site, because we collect none. The technical data needed to deliver the pages is processed by our host and kept for a limited period, for security and diagnostics.
Were we to collect data — through a working form, say — we would keep it only as long as the purpose requires, or as long as a legal obligation demands, and then erase it.
The GDPR grants you the following rights over your personal data.
- Right of access Obtain confirmation that data about you is processed, and a copy of it.
- Right to rectification Correct any inaccurate or incomplete data.
- Right to erasure Request deletion of your data, unless a legal obligation requires otherwise.
- Right to restriction Restrict the processing of your data in certain cases.
- Right to portability Receive your data in a structured, reusable format.
- Right to object Object at any time to processing based on our legitimate interest.
- Withdrawal of consent Withdraw a consent at any time, without affecting the lawfulness of processing before withdrawal.
- Automated decisions Not be subject to a decision based solely on automated processing. We make none.
To exercise these rights, write to contact@ayitidijital.org; we respond within 30 days. Exercising them is free of charge.
Independently of any recourse to us, you may lodge a complaint with a supervisory authority. Ours is:
- Authority
- Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
- Address
- Promenade 18, 91522 Ansbach, Deutschland
- Telephone
- +49 981 180093-0
- Website
- lda.bayern.de
Bavaria splits supervision between two bodies: the BayLfD oversees public bodies, the BayLDA private ones — associations included.
For any question about the protection of your data, exercising your rights, a complaint or a request, write to us directly.
contact@ayitidijital.org