The Path to Humanity - PRIVACY POLICY (WEBSITE)

A. WEBSITE-INFORMATIONEN

1. Legal Owner

This website is operated and owned by the non-profit association (Association sans but lucrative) “The Path to Humanity”, established at:
14, rue du Chemin de Fer, L-3466 Dudelange, Luxembourg
Luxembourg Business Register: F14205

B. DATENSCHUTZ

2. Data Controller

The Path to Humanity acts as the data controller with respect to any personal data processed through this website and during membership registration. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Luxembourg laws.

3. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who monitors compliance with data protection regulations.
Contact: Yasmine Hémès, CEO and Founder
Email: info@pathum.eu

4. Purposes and Legal Bases of Processing

We process your personal data based on one or more of the following legal grounds:
- Performance of a contract: to process your membership application and deliver services to you.
- Compliance with legal obligations: including accounting, tax, and other regulatory requirements.
- Legitimate interests: such as managing member and donor relationships, handling subscriptions, improving our website and services, ensuring network and information security, and promoting our organization and its initiatives.
- Consent: where explicitly required (e.g., for sending newsletters or using non-essential cookies).

5. Categories of Data Recipients

We may share your personal data with:
- Affiliated entities within our association;
- Third-party service providers acting as data processors (e.g., hosting, payment, IT support), under written agreements ensuring GDPR compliance;
- Public authorities, if required by law or regulation.

6. International Data Transfers

Your personal data is not transferred outside the European Economic Area (EEA). If any transfer becomes necessary, we will ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) or adequacy decisions, are in place.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including:
- Membership administration;
- Provision of requested services;
- Legal and regulatory retention periods (e.g., for tax or audit purposes).
Once the retention period expires, your data will be securely deleted or anonymized.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights concerning your personal data:
- Right of Access: Obtain confirmation and access to your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure (“right to be forgotten”): Request deletion under certain circumstances.
- Right to Restriction of Processing: Request limited use of your data in specific situations.
- Right to Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact our DPO at info@pathum.eu. You also have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD) in Luxembourg: www.cnpd.lu

C. COOKIES

9. Verwendung von Cookies

Our website uses cookies to ensure optimal functionality and to gather analytics to improve user experience. Cookies are small text files stored on your device. We use:
- Essential cookies: necessary for the proper functioning of the website.
- Analytical cookies (e.g., Google Analytics): to collect anonymized usage statistics.
- Preference and marketing cookies (only with your consent): to personalize your experience and send relevant content.
Upon first visit, you will be prompted to accept or reject non-essential cookies. You may modify your preferences at any time.