Privacy policy

1. Controller

Islamische Gemeinschaft Millî Görüş e.V. (IGMG), Colonia-Allee 3, 51067 Köln, Germany
Phone: +49 221 942240-100 · E-mail: students@igmg.org
Further details: see our imprint.

2. In short

This website uses no cookies for visitors, no third-party analytics and no advertising. Fonts and images are loaded from our own server. We only process personal data when you contact us or register for an event.

3. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, your browser automatically sends technical data, in particular your IP address, date and time, the requested page and browser information. Cloudflare needs this data to deliver the website and to protect it against attacks. The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in a secure and reliable website). Cloudflare processes this data on our behalf (Art. 28 GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, the EU standard contractual clauses apply. More information: cloudflare.com/privacypolicy.

4. Visitor statistics

To understand how many people are interested in our events and how they find us, we run our own simple visitor statistics on our server, without cookies and without any third-party analytics service. For every visit to uniyes.de, uniyes.de/bolge and uniyes.de/sm, and for every click on “Register now”, we store:

• date and time, the page and whether “Register now” was clicked,
• the approximate location (country, region and city), which Cloudflare derives from the IP address; the IP address itself is not stored,
• the website you came from (only its domain name, e.g. instagram.com) or a campaign name in the link,
• device type (mobile, desktop, tablet), browser, operating system and browser language,
• a short code that changes every day. It is calculated from your IP address and browser with a secret key that also changes daily, so we can count how many different people visited on one day. It cannot be traced back to you and cannot be linked to your visits on other days.

We only look at this data in summary form (e.g. “120 visitors from Cologne this week”). It is deleted automatically after 90 days. The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in planning and promoting our events). Nothing is stored on or read from your device. You can object at any time by writing to students@igmg.org.

Only authorised IGMG Students staff can access the statistics page (password protected). When they log in, a technically necessary cookie keeps them signed in for up to 30 days.

5. Event registration (Google Forms)

Registration for our events takes place via Google Forms. When you click “Register now”, you leave our website and go to a form of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data you enter there (e.g. name, contact details, university, travel and accommodation details) is used by us solely to organise the event, for example to plan rooms and arrivals. The legal basis is Art. 6 (1) (b) GDPR. Google may also process data in the USA; Google is certified under the EU-U.S. Data Privacy Framework. We delete registration data when it is no longer needed for the event, unless statutory retention periods apply. Google’s privacy policy: policies.google.com/privacy.

6. Contact form and e-mail

If you send us a message via the contact form or by e-mail, we process your name, e-mail address and message in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to an event, otherwise Art. 6 (1) (f) GDPR. Messages from the contact form are forwarded to our mailbox students@igmg.org using a Google service (Google Ireland Limited) and stored there with our e-mail provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Google may also process this data in the USA; Google is certified under the EU-U.S. Data Privacy Framework. Providing your name, e-mail address and message is voluntary, but we need them to answer you. We delete your data once your request has been fully dealt with, unless statutory retention periods apply.

Spam protection. To protect the contact form against spam and misuse, we allow a maximum of five messages per day from the same connection. For this, we store a keyed, irreversible code (HMAC-SHA-256) derived from your IP address and the date, together with a counter, for up to 24 hours; the IP address itself is not stored. We also use a hidden field that only bots fill in, and we check how many seconds passed between opening the page and sending the form, as well as which page the form was sent from. This data is used only to detect spam and is not stored beyond the message itself. The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in protecting our website and mailbox against abuse).

7. Links to social media

Our website only contains simple links to Instagram. No data is sent to Instagram (Meta) when you visit our pages. Only if you click on a link does the respective provider’s privacy policy apply.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw any consent at any time with effect for the future. To exercise your rights, simply write to students@igmg.org.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, ldi.nrw.de.

9. Changes

We may update this privacy policy if our website or the law changes. The current version is always available on this page.

Status: October 2026