This page was translated automatically for your convenience. Only the German version is legally binding. Read the German original
The protection of your personal data is important to us. This statement explains what data is processed when you visit www.tulisa.org. The website does not use tracking, web analytics, advertising, social media or embedded third-party content.
1. Data controller
The data controller for this website is:
Tulisa Foundation,
represented by the Board of Directors
Godesberger Hof 13,
53173 BonnEmail: info@tulisa.org
2. Accessing the website (server log files)
When you access this website, the web server automatically records data transmitted by your browser: IP address, date and time of the request, page accessed, amount of data transferred, status code, the previously visited page (referrer), and browser type and operating system (user agent).
This processing is necessary to deliver the website and to ensure its security and stability (Article 6(1)(f) of the GDPR, legitimate interest). The log files are deleted after 14 days. No merging with other data sources takes place.
3. Cookies and Tracking
No cookies are set when visiting the public pages, and no audience measurement, web analytics or advertising takes place. Fonts, scripts and images are served directly from this server; no data is transferred to third parties when these are accessed.
Only for individuals who log in to the website’s administration area (operators and authorised authors) are technically necessary cookies set, which serve the purpose of login (Art. 6(1)(f) GDPR in conjunction with § 25 Abs. 2 Nro. 2 TDDDG). Consent is not required for this.
4. Contact via email, post or form
If you contact us by email, post or via the enquiry form on the ‘Donations’ page, we will process the data you provide (name, address, email address, content of your message) in order to process and respond to your enquiry. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in responding to enquiries); if your enquiry relates to a contract or a pre-contractual relationship, the legal basis is Article 6(1)(b) of the GDPR. We will delete the data as soon as the enquiry has been dealt with and provided there are no statutory retention obligations to the contrary.
Please note that data transmission via email may be subject to security vulnerabilities. It is not possible to provide complete protection against access by third parties.
5. Donations and enquiry form
Donations cannot be processed online via this website; there is no payment service provider. Donations are made by bank transfer or standing order to the specified account. No data is collected via this website in this process.
On the ‘Donations’ page, there is an enquiry form for donation receipts, supporting memberships, donations by direct debit and general enquiries. When using this form, you voluntarily provide your name, your email address, your postal address (if required, for a donation receipt) and a message. Bank account details are not requested on the form. The information is transmitted exclusively to the Foundation by email and is not stored on this website, either in a database or in a file. We use it solely to process and respond to your enquiry (Article 6(1)(b) and (f) of the GDPR; for the donation receipt, also Article 6(1)(c) of the GDPR in conjunction with tax law retention obligations). By submitting the form, you consent to the processing of your details for this purpose.
To protect against automated enquiries, the form checks whether it has been completed by a human (invisible field, minimum time requirement, simple maths problem in the browser). No cookies are set and no third-party services are used for this purpose. To limit repeated requests, a non-traceable random value derived from your IP address and browser is temporarily recorded on the server (for a maximum of one hour).
6. Login protection and security
To protect the administration area from misuse, login attempts are temporarily counted by IP address and blocked in the event of repeated failed attempts (Art. 6(1)(f) GDPR). The website is delivered exclusively via encrypted HTTPS.
Comments, trackbacks and pingbacks are not permitted on this website; any such submissions are neither accepted nor stored.
7. Presentation of cases and photographs
On this website, we present case studies. In doing so, those affected are not named by their real names but under a pseudonym; contact details are neither published nor passed on. Images are only published with the consent of the persons depicted or their parents or legal guardians (see the Child Protection Policy). Consent may be withdrawn at any time with future effect; please contact us at the address given above, and we will remove the content immediately.
8. Recipients of the data
No data is transferred to third parties when you visit this website; the pages do not contain any embedded content or services from other providers. We use technical service providers to operate the website and handle email correspondence; these providers process data solely on our behalf. Otherwise, we only pass on data if we are legally obliged to do so.
9. Your rights
You have the right at any time to access the personal data stored about you (Art. 15 GDPR), to have it rectified (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). Where processing is based on your consent, you may withdraw this consent at any time with effect for the future (Article 7(3) of the GDPR). To do so, please use the contact details provided above.
You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 of the GDPR). The competent authority for us is the State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia (www.ldi.nrw.de).
10. Changes
We will update this privacy policy if the website or the legal situation changes. The version published here at any given time shall apply.
Last updated: November 2026