Privacy

Short version: no tracking, no analytics cookies, no third-party scripts except the Vue library from jsDelivr and flag images from our own library server. We store what you send us through the forms, for as long as we need it to handle your request, and nothing else.

Who is responsible

Westiefund e. V. i. G., non-profit association in formation, represented by the founding members named in the imprint. E-mail: [email protected].

What happens when you visit the site

The web server logs each request with IP address, time, requested page, browser and referrer, as every web server does. These logs are used only to keep the site running and to detect abuse, and are deleted after [14 days – check with your hoster]. Legal basis: Art. 6 (1) f GDPR, our legitimate interest in a working, secure website.

The site is delivered through Cloudflare, which processes the IP address of every request to protect the site against attacks (Art. 6 (1) f GDPR; Cloudflare Inc., USA, under the EU–US Data Privacy Framework).

The site sets one cookie, wf_lang, which only remembers the language you chose (12 months, no tracking). Fonts and images are served from this server; the Vue user-interface library is loaded from jsDelivr (a content delivery network; your IP address reaches their servers when the script loads) and flag images from library.goo1.de, which we run ourselves. Videos are linked, not embedded – nothing loads from YouTube, TikTok or Instagram until you click a link and leave this site.

Application form

When you apply for a grant, we process the data you enter: name, e-mail, country and city, WSDC number, level and role, the event and its date, the costs and amount you ask for, your own contribution, your motivation, the video link, your social profile and how you heard about us. We also store the time of submission, your browser type and a hashed (non-reversible) form of your IP address to prevent abuse.

The application is sent by e-mail to the team mailbox ([email protected]) and stored as a file on our server. You receive a confirmation by e-mail. Legal basis: Art. 6 (1) b GDPR – processing is necessary to handle your application – and, for the anti-abuse data, Art. 6 (1) f GDPR.

We keep applications until the decision is made and, for approved grants, until the grant is fully settled and published; at most two years after submission. Rejected or withdrawn applications are deleted after twelve months. If you agreed to be named, your name, event and grant amount are published on the transparency and scholars pages for as long as the fund exists; you can withdraw that consent at any time and we will anonymise the entry.

Contact form and e-mail

Messages via the contact form are processed like e-mails: sent to the team mailbox, stored on our server, deleted once your request is handled and no follow-up is expected – at most twelve months. Legal basis: Art. 6 (1) b or f GDPR depending on the request.

Who else sees your data

Our hosting provider, 1blu AG, Berlin, and our e-mail service, Amazon Web Services (Amazon SES, EU–US Data Privacy Framework), process data on our behalf under data processing agreements. Nobody else. We do not sell or share data, and we transfer it outside the EU only through the services named here or where you yourself send us links to platforms based elsewhere.

Your rights

You can ask us at any time what data we hold about you, have it corrected or deleted, restrict its processing, receive it in a portable format, or object to processing based on legitimate interest. Consent you gave can be withdrawn with effect for the future. Write to [email protected]. You also have the right to complain to a data protection authority; the one responsible for us is der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Wiesbaden).

Changes

We update this notice when the site or the association changes – for example once a bank account and a donation process exist. The date of the last change is shown below.

Last updated: 5 September 2026