The controller responsible for data processing on this website pursuant to Art. 4 (7) GDPR is:
Koinonia Impact
Okongo, Ohangwena Region, Namibia
Email: info@koinoniaimpact.org
Phone: +49 176 86360896
For all data protection matters, you may contact us at the above address or by email at info@koinoniaimpact.org.
We collect and use personal data of our users only insofar as this is necessary to provide a functional website and our content and services. The collection and use of personal data of our users regularly takes place only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and where the processing of the data is permitted by statutory provisions.
The legal bases for our data processing are:
This website is hosted on servers located in the Federal Republic of Germany. When you visit our website, the hosting provider automatically collects and stores information in server log files which your browser automatically transmits to us.
These are:
This data is not merged with other data sources. The legal basis for data processing is Art. 6 (1)(f) GDPR, based on our legitimate interest in the technically error-free presentation and optimisation of our website. Server log files are typically deleted after 7–30 days.
Cookies are small text files that are stored on your device when you visit a website. They serve various purposes such as enabling technical functionality or storing user preferences. This website uses cookies as described below.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
ki_cookie_consent |
Stores your cookie consent preference so the banner is not shown on every page visit. | 12 months | koinoniaimpact.org (first party) |
Essential cookies do not require your consent pursuant to § 25 (2) TDDDG, as they are strictly necessary for the transmission of information or to provide the service you have requested.
At this time, this website does not set any analytics, marketing or tracking cookies. If we introduce such cookies in the future, your prior explicit consent will be obtained via the cookie consent banner in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG.
You can change or withdraw your cookie consent at any time by clicking the "Cookie Settings" button in the footer of this page. Additionally, you can configure your browser to block or delete cookies. Please note that disabling essential cookies may affect the functionality of this website.
When you contact us via the contact form on our website or by email, the information you
provide – including your name, email address, telephone number (optional), subject and the
content of your message – is transmitted to our web server, processed by a server-side
script (send-mail.php) and forwarded by email to
info@koinoniaimpact.org for the purpose of
handling your enquiry and any follow-up communication.
The legal basis for processing data submitted via the contact form is Art. 6 (1)(a) GDPR (your explicit consent given via the GDPR consent checkbox at the bottom of the form), in conjunction with Art. 6 (1)(b) GDPR (processing in connection with pre-contractual or contractual communication) and Art. 6 (1)(f) GDPR (legitimate interest in responding to your enquiry).
Submitting the form is technically protected by a same-origin CORS policy, a stateless CSRF token, an anti-spam honeypot field, rate limiting (max. 5 submissions per IP address per hour) and standard input sanitisation. Submissions are transmitted over HTTPS only.
We will not share this data with third parties without your consent. The data is deleted once your enquiry has been fully resolved, generally within 12 months of the last communication, unless statutory retention obligations (e.g. commercial or tax law) require longer storage.
Withdrawal of consent: You may withdraw your consent for this processing at any time with future effect by emailing us at info@koinoniaimpact.org. The lawfulness of processing based on consent before its withdrawal is not affected.
This website uses the typefaces Playfair Display and DM Sans to render text. Both fonts are self-hosted on our own server in Germany and are delivered directly with the rest of the website's static assets.
No connection to Google Fonts or any other third-party font provider is established
when you load this website. Your IP address is therefore not transmitted to Google
LLC or any other external CDN for the purpose of font delivery. The font files are
distributed by Google under the SIL Open Font License and are stored locally in our
/fonts/ directory.
The legal basis for serving these fonts as part of the website is Art. 6 (1)(f) GDPR (legitimate interest in providing a visually consistent and accessible website). No personal data is processed beyond the standard server log entries described in section 3.
Our website contains links to external websites (including social media platforms such as Facebook, Twitter/X, YouTube and Instagram). These links are implemented as standard HTML hyperlinks. Simply displaying the page does not cause any data to be transmitted to these platforms.
Data is only transferred to the respective social media platform when you actively click on the link. We have no influence over the data collected by these platforms. Please refer to the privacy policies of the respective platforms for details on how they process your data.
Our contact page (/contact.html) offers an embedded Google Maps view of our location in Okongo, Namibia. Google Maps is operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
To protect your privacy, the map is not loaded automatically. Instead, a placeholder is shown and you must explicitly click the "Load interactive map" button before any request is sent to Google. This implementation is known as a "two-click solution" and is designed to comply with Art. 6 (1)(a) GDPR (explicit consent) and § 25 TDDDG.
If you choose to load the map, the following data may be transmitted to Google: your IP address, browser type and version, operating system, the URL of the page you are visiting, device-related information, the date and time of the request, and, where enabled, your approximate location. The transfer to the USA is based on the EU–US Data Privacy Framework adequacy decision or, where applicable, on standard contractual clauses (Art. 46 GDPR).
You can optionally choose to remember your consent for future visits via a checkbox on the
consent placeholder. This preference is stored only on your device (in
localStorage under the key ki_map_consent) and can be cleared at
any time via your browser settings. Google's privacy policy is available at
policies.google.com/privacy.
Under the GDPR, you have the following rights with respect to your personal data:
You have the right to request confirmation as to whether personal data concerning you is being processed, and if so, to receive a copy of that data.
You have the right to request the correction of inaccurate personal data concerning you without undue delay.
You have the right to request the deletion of personal data concerning you, provided the conditions of Art. 17 GDPR are met ("right to be forgotten").
You have the right to request restriction of processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used and machine-readable format.
You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 (1)(e) or (f) GDPR.
If processing is based on your consent, you may withdraw that consent at any time with future effect. The lawfulness of processing based on consent before its withdrawal is not affected.
You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for our hosting provider in Germany is the respective state data protection authority. You may also contact the German Federal Commissioner for Data Protection and Freedom of Information (BfDI):
www.bfdi.bund.de
To exercise any of these rights, please contact us at: info@koinoniaimpact.org
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law. Contact enquiry data is generally deleted within 12 months of the final communication, unless a longer retention period is required by law (e.g. commercial or tax retention obligations).
Cookie consent records are retained for a period of 3 years in order to demonstrate compliance with our consent obligations under the GDPR and TDDDG.
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. This website is served via HTTPS (SSL/TLS encryption) to protect data in transit. Our hosting provider maintains appropriate server-side security measures.
Despite these measures, data transmission over the internet cannot be guaranteed to be completely secure. You transmit data at your own risk.
We reserve the right to update this Privacy Policy at any time to reflect changes in legal requirements or our data processing activities. The current version will always be available on this page. We recommend reviewing this page periodically.
Last updated: March 2026 | Version 1.0