Privacy Notice on the Protection of Personal Data
We process the personal data of our donors and site visitors in line with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the transparency obligations of the Turkish Personal Data Protection Law No. 6698 (KVKK).
Last updated: October 2026
This translation is provided for convenience only; the German version is legally binding.
The legal review of this text has not been completed yet.
1. Data controller
The controller of your personal data is ISAR GLOBAL — International Society Awareness Responsibility, an association registered in Austria.
- Address: Neilreichgasse 18, 1100 Vienna, Austria
- Email: info@isarglobal.org
- Phone: +43 1 997 7236
2. Personal data we process
- Identity and contact details: full name, email address, phone number, country/city.
- Donation and transaction details: donation amount, project donated to, payment method, transaction date and receipt records. We do not store your card details; payments are processed by licensed payment institutions supporting 3D Secure.
- Transaction security data: IP address, session logs and verification (SMS/WhatsApp code) records.
- Preferences: your visibility preference on the donor wall and your communication consents.
3. Purposes of processing
- Receiving donations, allocating them to projects and issuing receipts
- Sending video and report notifications for projects such as Qurbani by proxy and water wells
- Creating your account, verifying sign-ins and keeping your account secure
- Meeting legal obligations (accounting, auditing and tax legislation)
- Sending campaign and impact report updates, where you have given explicit consent
4. Legal bases
Your data is processed on the legal bases of Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) (legal obligation), Art. 6(1)(f) (legitimate interests) and Art. 6(1)(a) (consent). For donors resident in Türkiye, the corresponding processing conditions in Art. 5 KVKK apply.
5. Sharing of data
Your personal data is shared only to the extent required to provide the service: with payment institutions, SMS/WhatsApp verification providers, cloud hosting infrastructure and, where legally required, competent public authorities. Under no circumstances is your data sold or rented to third parties for marketing purposes.
6. Retention period
Your data is kept for as long as the purpose of processing requires and for the minimum retention periods set out in the relevant legislation (e.g. 7 years under Austrian accounting law); once that period ends, it is deleted, destroyed or anonymised.
7. Your rights
Under Art. 15–22 GDPR and Art. 11 KVKK, you have the right to:
- Find out whether your data is processed and request information about it
- Ask for incomplete or inaccurate data to be corrected
- Request the erasure of your data or the restriction of processing
- Ask to receive your data in a portable format
- Object to processing and withdraw your consent at any time
You can send your requests to info@isarglobal.org. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).
8. Cookies
For detailed information on the cookies and similar technologies used on our site, please see our Cookie Policy.
9. Preselection of language, currency and country code
So that you see our website in your language and currency on your first visit wherever possible, our own server determines only the country of the request from your browser’s IP address. The lookup is performed locally on our server using a freely licensed (CC0) country database; your IP address is not transmitted to any third party for this purpose, is processed only transiently in memory, and is neither stored nor logged together with the result for this purpose.
The country code determined is kept in your browser’s session storage (sessionStorage) until the tab is closed and is used only to open the matching language version once on your first visit and to preselect the displayed currency and the country code in phone fields. Your own choice always takes precedence; the fact that the automatic language selection took place and the language you chose yourself are noted in your browser’s local storage (localStorage). Search engines are not redirected. The legal basis is our legitimate interest in a user-friendly multilingual presentation (Art. 6(1)(f) GDPR).