Privacy Policy

Effective from 9 June 2026.

This Privacy Policy applies to anyone who browses the Donbat Institute website, views its content, uses its forms, subscribes to a newsletter, submits a request or otherwise interacts with the Donbat Institute through the website.

The Donbat Institute is committed to protecting users’ personal data in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection legislation.

This policy explains what data may be collected, the purposes for which it is processed, how long it is retained, the possible recipients of the data and the rights available to the individuals concerned.

Data Controller

The data controller is:

Donbat Institute
Represented by: Jérémie Pujau
Website: www.institut-donbat.org
Email: contact (at) institut-donbat.org

Personal Data That May Be Collected

When the website is used, the Donbat Institute may collect certain personal data voluntarily provided by users.

This data may include:

  • first and last name;
  • email address;
  • the subject and content of a message submitted through the contact form;
  • information provided in connection with a proposal for collaboration, partnership, support or participation in a project;
  • data required to subscribe to a newsletter, where one is offered;
  • technical data relating to the use of the website, to the extent necessary for its proper operation, security or the production of anonymised or consent-based statistics.

The Donbat Institute does not ask users to provide sensitive personal data unless this is specifically required in connection with a project, collaboration or particular situation. In such cases, only the data strictly necessary for the relevant purpose is processed.

Contact Form

When a user submits the website’s contact form, the information provided is used solely to respond to the request, follow up on the exchange, propose a collaboration or process an enquiry addressed to the Donbat Institute.

The data collected may include the user’s name, email address, the subject of the message and the content of the request.

This data is not used for commercial purposes and is not shared with third parties except where technically necessary, legally required or explicitly agreed to by the individual concerned.

Newsletter and MailPoet

The Donbat Institute uses MailPoet to manage newsletter subscriptions, send emails and, depending on the settings enabled, collect certain statistics relating to sent campaigns.

When someone subscribes to the newsletter, the data collected may include their email address, first name where provided, subscription date, source of the subscription, the IP address used when subscribing and subscription status.

Newsletter subscriptions are based on the user’s consent. Where double opt-in is enabled, the subscription is confirmed only after the user validates it using a link sent by email.

Each newsletter contains a link allowing the recipient to unsubscribe at any time. Subscription data is retained until the user unsubscribes or withdraws consent, subject to any data that may need to be retained as evidence of consent or to comply with legal obligations.

If MailPoet statistics are enabled, certain information relating to email openings or clicked links may be processed to assess how newsletters are received. These statistics may be disabled or limited depending on the selected settings.

MailPoet may act as a technical service provider for sending and managing the newsletter. Where necessary, the Donbat Institute ensures that such processing is based on an appropriate legal basis and a GDPR-compliant data processing agreement.

News and Comments

The website may publish articles, news, announcements, texts, resources or documents relating to the activities of the Donbat Institute.

If comments are enabled on certain pages or publications, information submitted by users in this context may be collected to enable the publication, moderation and management of those comments.

Comments may be moderated before publication. The Donbat Institute reserves the right not to publish, or to remove, any comment that is clearly unlawful, insulting, discriminatory, defamatory, abusive, promotional or unrelated to the purpose of the website.

Purposes of Processing

Personal data collected by the Donbat Institute may be used for the following purposes:

  • to ensure the proper operation of the website;
  • to respond to requests submitted through the contact form;
  • to manage exchanges with users;
  • to send a newsletter where the user has consented to receive it;
  • to process proposals for collaboration, partnership, support or participation;
  • to manage possible registrations for events, workshops, meetings or calls for participation;
  • to ensure the technical security of the website;
  • to prevent abusive, fraudulent or unlawful use;
  • to comply with applicable legal obligations;
  • to improve the clarity, usability and operation of the website.

Legal Bases for Processing

Depending on the circumstances, personal data may be processed on the basis of:

  • the user’s consent, particularly for newsletter subscriptions or the use of certain non-essential cookies;
  • the legitimate interests of the Donbat Institute, particularly when responding to received messages, ensuring the security of the website or managing its activities;
  • the performance of pre-contractual measures or contractual obligations where an exchange concerns a collaboration, intervention, service, partnership or participation in a project;
  • compliance with legal obligations where certain data must be retained or disclosed by law.

Retention Period

Personal data is retained only for as long as necessary for the purposes for which it was collected.

As a general indication:

  • data submitted through a contact form is retained for as long as necessary to process the request and follow up on the exchange;
  • newsletter subscription data is retained until the user unsubscribes or withdraws consent;
  • data relating to a collaboration, partnership or project may be retained for as long as necessary to manage and follow up on that relationship;
  • technical data required for website security may be retained for a limited period;
  • certain data may be retained for longer where required by law or where necessary for the establishment, exercise or defence of legal claims.

Recipients of Personal Data

Personal data collected through the website is intended for the Donbat Institute and the individuals authorised to process it as part of the Institute’s activities.

Certain data may be accessible to technical service providers involved in the operation of the website, including the hosting provider, maintenance tools, email services, newsletter tools and security systems.

These service providers may access the data only to the extent necessary to perform their services.

Personal data is not sold or rented to third parties.

It may, however, be disclosed to competent authorities where required by law, judicial proceedings or a regulatory obligation.

Website Hosting

The website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

The hosting provider may process certain technical data required for the operation, security and availability of the website.

Data Security

The Donbat Institute implements reasonable technical and organisational measures to protect personal data against loss, unauthorised access, disclosure, alteration or destruction.

Depending on the circumstances, these measures may include securing access, using passwords, updating the website, protecting the hosting environment, maintaining backups and using WordPress security tools.

Users nevertheless remain responsible for the security of their own devices, connections, software and data.

Cookies

The website may use cookies or similar technologies.

Cookies are small files stored on a user’s device while browsing. They may be required for the proper operation and security of the website, to remember preferences, measure audiences or integrate external services.

Cookies that are strictly necessary for the operation of the website may be placed without prior consent.

Non-essential cookies, particularly those relating to audience measurement, statistical tracking, marketing or certain third-party services, are used only with the user’s consent where that consent is required.

Users may configure their browser at any time to accept, refuse or delete cookies. Refusing certain cookies may, however, limit access to some features of the website.

Audience Measurement

The website may use an audience measurement tool to understand website traffic, the pages viewed and general patterns of use.

Where such a tool involves placing non-essential cookies or transferring personal data to a third party, it is subject to the user’s prior consent.

Fonts, Embedded Content and External Services

The website may use web fonts, embedded content or external services to support its operation or presentation.

This may include typefaces, videos, maps, forms, newsletter tools, content from third-party platforms or elements embedded from other websites.

Where these services are loaded from external servers, certain technical data, such as the user’s IP address or browser information, may be transmitted to the relevant service provider.

Transfers Outside the European Economic Area

Where possible, the Donbat Institute gives preference to service providers established within the European Union or the European Economic Area.

Where certain services involve transferring data to a country outside the European Economic Area, the Donbat Institute ensures that the transfer is based on an appropriate legal mechanism in accordance with the GDPR.

Users’ Rights

Under the applicable legislation, users have rights relating to their personal data.

These rights include:

  • the right to access their personal data;
  • the right to rectify inaccurate or incomplete data;
  • the right to erasure where the relevant legal conditions are met;
  • the right to restrict processing;
  • the right to object to processing in the circumstances provided for by law;
  • the right to data portability where this right applies;
  • the right to withdraw consent at any time where processing is based on consent.

To exercise these rights, users may submit a request to:

contact (at) institut-donbat.org

The Donbat Institute may request proof of identity where necessary to process the request.

Complaint to a Supervisory Authority

Users also have the right to lodge a complaint with a competent data protection supervisory authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Accuracy of Submitted Information

Users undertake to provide accurate, complete and up-to-date information when using the website’s forms, subscribing to a newsletter or submitting a request to the Donbat Institute.

Changes to This Privacy Policy

This Privacy Policy may be amended at any time, particularly to reflect changes to the website, the tools used, the activities of the Donbat Institute or the applicable legislation.

The applicable version is the version published on the website at the time of browsing.

Contact

For any question concerning this Privacy Policy or the processing of personal data, users may contact the Donbat Institute at:

Donbat Institute
Email: contact (at) institut-donbat.org
Website: institut-donbat.org