01Legal
Privacy.
We process as little data as possible: no tracking or advertising cookies, no analytics tools, no user profiles. Here you can find out exactly what happens to your data.
021. Controller
Who is responsible?
The controller within the meaning of the General Data Protection Regulation (GDPR) is: Rescue Paws of Zanzibar e. V., Eichendorffstr. 28, 34327 Körle, Germany, phone: +49 (0) 5665 407609, email: rescuepawsofzanzibar@web.de. The association is represented by its board, see Imprint.
We have not appointed a data protection officer, as we are not legally required to do so. For data protection questions, contact us at the email address above. In case of doubt, the German version of this policy applies.
032. Overview
What we do and what we don't.
We only process personal data to the extent necessary to operate this website, handle your requests and look after sponsorships.
We do not use analytics, tracking or advertising services, we do not create user profiles and we do not sell data. There is no automated decision-making including profiling (Art. 22 GDPR).
043. Hosting and server log files
When you visit the website.
When you visit the website, our server automatically processes technical data sent by your browser: IP address, date and time of access, page or file requested, amount of data transferred, status code, referrer URL, and browser and operating system. This is necessary to deliver the website, ensure its stability and security and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and functioning website.
Server log files are deleted after 14 days at the latest, unless they are needed for longer to investigate a specific security incident.
To prevent abuse (e.g. mass form submissions or login attempts), the IP address is briefly evaluated in the server's memory and discarded after 30 minutes at the latest.
The website is operated by an external service provider that processes the data solely on our behalf and on our instructions (processing on behalf under Art. 28 GDPR). Data is transmitted in encrypted form (TLS).
054. Cookies and browser storage
Only what is technically necessary.
This website does not set any cookies for visitors.
After logging in to the sponsor portal or the admin area, we set a technically necessary session cookie (“rp_session”) so that you stay logged in. It only contains a random identifier, is deleted when you log out and expires after 7 days at the latest (Section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR).
In your browser's local storage (localStorage) we remember your language choice (German or English) so the question does not appear on every visit; the entry remains until you delete it in your browser. In the session storage (sessionStorage) we remember, if you close it, that the donation notice should stay hidden; this entry is deleted automatically when you close the tab. Neither entry contains personal data, and neither is transmitted to us. They only serve to display the website you are using as requested (Section 25(2) no. 2 TDDDG).
Fonts are loaded from our own server; no connection to Google or other providers is made.
065. Google Maps
Map only on click.
On the “Visit the shelter” page you can load a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only embedded when you click “Load map”. Before that, no connection to Google is made.
By clicking, you consent to Google processing data such as your IP address, date and time and browser information, and possibly using cookies or similar technologies (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).
Your consent only applies to the current page view. More information: policies.google.com/privacy.
076. Forms and email
When you write to us.
You can contact us via our forms (contact, sponsorship, volunteering, shelter visit, adoption) or by email. We process the information you provide, in particular name, email address, phone number if given, place of residence or country, preferred dates and your message.
The purpose is to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns a sponsorship, volunteering, a visit or an adoption, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering requests).
After submitting, you receive an automatic confirmation at the email address provided, and the association is notified of the request by email. We use an email service provider as a processor for sending.
Providing your data is voluntary. However, without the fields marked as required we cannot handle your request.
We delete requests 12 months after they have been completed, unless an ongoing sponsorship has resulted from them and no statutory retention obligations apply.
087. Transfer to Zanzibar Animal Care
When your request is carried out on Zanzibar.
Adoptions, volunteering and visits take place on Zanzibar and are handled on site by Zanzibar Animal Care (Zacare), Kidoti, Zanzibar, Tanzania. Where necessary to carry out your request, we pass on your name, contact details and the information required for your request to Zacare. Without this transfer, an adoption, volunteering or a visit on site is not possible.
Tanzania is a third country for which there is no adequacy decision by the European Commission; a level of data protection comparable to the EU is therefore not guaranteed. The transfer only takes place to the extent necessary to carry out your request or the measure you have asked for (Art. 49(1)(b) GDPR). We limit the transfer to what is necessary.
098. Sponsor portal
If you are a sponsor.
We operate a protected portal for sponsors. Accounts are only created by us; there is no public registration. For this we process your name, email address, optionally your postal address, your notification settings, the details of your sponsorship (animal, start, status, agreed amount, payment method and payments received) and messages you send us via the portal. The legal basis is Art. 6(1)(b) GDPR.
We only store your password as a cryptographic hash. Each time you log in, we store the IP address and browser identifier of the session to secure your account (Art. 6(1)(f) GDPR); this data is deleted when the session expires, after 7 days at the latest. We only notify you of new photos and updates about your sponsored animal if you choose this in your settings.
When the sponsorship ends, we delete your account and the related data unless statutory retention obligations apply (see section 10). You can request deletion at any time by email to rescuepawsofzanzibar@web.de.
109. Donations
Bank transfer, GoFundMe and PayPal.
Donations are not processed via this website. If you donate by bank transfer, we process the information from the payment (name, account details, amount, date, reference) and, if you would like a donation receipt, your postal address. This is necessary for bookkeeping and issuing the donation receipt (Art. 6(1)(b) and (c) GDPR).
For donations via GoFundMe or PayPal, we link to these providers' websites. Payment data is processed there directly by the respective provider under its own responsibility; their privacy policies apply. We only receive the information these providers pass on to us as the recipient of a donation.
1110. Storage period
How long we keep data.
We only store personal data for as long as necessary for the respective purpose; the specific periods are given in the sections above.
Records of donations, donation receipts and bookings are kept for up to ten years in accordance with statutory requirements (in particular Section 147 of the German Fiscal Code and Section 50 of the German Income Tax Implementing Ordinance). During this time, the data is blocked for other purposes.
1211. Instagram and external links
No data transfer when you visit.
On the homepage we show photos from our shelter or posts from our Instagram account @rescuepawsofzanzibar. This content is delivered by our own server; your browser does not connect to Instagram when you visit.
Instagram, Facebook, WhatsApp, GoFundMe, PayPal, Google Maps and Zanzibar Animal Care are only included as simple links. Only when you click such a link do you leave our website; the privacy policy of the respective provider then applies.
1312. Recipients
Who may receive data.
Personal data is only received by the board members of the association entrusted with processing and by our hosting and email service providers as processors. Data is only passed on to Zanzibar Animal Care in the cases described in section 7. Otherwise we only pass on data where we are legally obliged to do so (e.g. to tax authorities).
1413. Your rights
Your rights.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you can object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
An email to rescuepawsofzanzibar@web.de is enough to exercise your rights. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany, www.datenschutz.hessen.de.
Last updated: October 2026.