Donate

Language De En

LittleBigDreams

Privacy Policy

Version: 9 September 2026

Name and Address of the Controller

Important notice regarding this English translation: The German version of this Privacy Policy is the authoritative and legally binding version. This English version is provided solely for convenience and informational purposes and constitutes a translation reflecting the meaning of the German original. In the event of any discrepancies, ambiguities or differences in interpretation between the German and English versions, the German version shall prevail.

(1) The controller within the meaning of the General Data Protection Regulation (hereinafter: “GDPR”), other data protection laws applicable in the Member States of the European Union, and other provisions relating to data protection is:

LittleBigDreams e.V.
Strandweg 66
22587 Hamburg, Germany +49 – 15142465116 hello@littlebigdreams.org

Your Rights

(1) Under the applicable laws, you have various rights regarding your personal data:

If you wish to exercise these rights, please send your request by e-mail to hello@littlebigdreams.org or by post to the address stated above, clearly identifying yourself.

(2) Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.

Collection of Personal Data When Visiting Our Website

(1) For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character sequence “https://” and the padlock symbol in your browser bar.

(2) When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure the stability, functionality and security of our website:

(3) We process the aforementioned data for the following purposes:

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your identity.

(4) The data is not passed on or otherwise used.

Data Processing Through the Use of Cookies on Our Website

(1) Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your hard drive and assigned to the browser you use, through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the online service more user-friendly and effective overall and to enable the use of certain functions.

When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is required in order to deliver the contents of our website correctly. We therefore evaluate this data and information statistically on the one hand and, furthermore, with the aim of increasing data protection and data security within our organization in order to ultimately ensure an optimal level of protection for the personal data we process.

If personal data is also processed through individual cookies implemented by us, the processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical collection and evaluation of our website and in providing an attractive online service for you.

(2) This website uses the following types of cookies, the scope and functionality of which are explained below:

a) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

b) The Flash cookies used are not recorded by your browser but by your Flash plug-in. HTML5 storage objects are also stored on your device. These objects store the required data independently of the browser you use and do not have an automatic expiration date.

If you do not wish Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.

Further Functions and Services of Our Website

(1) In addition to the purely informational use of our website, we offer various services that you can use if interested. To do so, you will generally need to provide additional personal data, which we use to pursue the objectives of the association and to support and administer our supporters. The aforementioned principles of data processing also apply to this data.

In some cases, we use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(2) Furthermore, the respective service will inform you if your data is transferred outside the European Economic Area (EEA).

Donations and Sponsorships

(1) We also collect personal data when you voluntarily provide it to us as part of the performance and processing of the contractual relationship with us, i.e. when taking on a sponsorship or making a donation. We collect and process the following data: first name, surname, address, payment data (account details and data relating to individual payments) and the e-mail address provided.

(2) Your data will never be passed on to third parties unless this is necessary for the performance of the contract, required by law, or you have expressly consented to such disclosure. Without your separate consent, we use the data you provide exclusively for the performance and processing of the contract with us. The legal basis for this is Art. 6(1)(b) GDPR.

(3) Once the contractual relationship has been fully completed, your data will be deleted after the expiry of the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data.

We are required by commercial and tax regulations to store your address and payment data for a period of ten years. However, after four years we restrict the processing, meaning that your data is only used to comply with statutory obligations.

(4) Furthermore, the connection is encrypted using TLS technology for the processing of the contract and the protection of your financial data.

E-mail Enquiries

(1) If you send us enquiries by e-mail, your information will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. Providing your name and an e-mail address is required. Providing a telephone number and additional data is voluntary and serves to facilitate contact with you and to enable us to address you personally.

This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and for the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR.

(2) Your data will be deleted once your enquiry has been conclusively processed. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Social Media Plug-ins

We use social media plug-ins from the social networks Facebook and Instagram on our website on the basis of Art. 6(1)(f) GDPR in order to increase awareness of our association through these platforms. The underlying promotional purpose is considered a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation lies with the respective providers.

We integrate these plug-ins using the so-called two-click method in order to protect visitors to our website as effectively as possible.

(1) Facebook

Our website uses social media plug-ins from Facebook in order to make their use more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is a service provided by Facebook.

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Facebook’s servers. The content of the plug-in is transmitted directly from Facebook to your browser and integrated into the website by your browser.

By integrating the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information, including your IP address, is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit with your Facebook account. If you interact with the plug-ins, for example by clicking the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to associate the data collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for protecting your privacy, can be found in Facebook’s privacy information: https://www.facebook.com/about/privacy/

(2) Instagram

Our website also uses so-called social plug-ins (“plug-ins”) from Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plug-ins are identified by an Instagram logo, for example in the form of an “Instagram camera”. When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Instagram’s servers. The content of the plug-in is transmitted directly from Instagram to your browser and integrated into the page.

By integrating the plug-in, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information, including your IP address, is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account.

If you interact with the plug-ins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts.

If you do not want Instagram to directly associate the data collected through our website with your Instagram account, you must log out of Instagram before visiting our website.

Further information can be found in Instagram’s privacy policy: https://help.instagram.com/155833707900388

Integration of YouTube and Vimeo Videos

(1) Our website contains videos from the platforms www.youtube.com and www.vimeo.com, which are stored on http://www.YouTube.com and http://www.vimeo.com and can be played directly from our website.

(2) When you visit our website, YouTube or Vimeo receives information that you have accessed the corresponding subpage of our website. In addition, the technically necessary data — name and URL of the file accessed, date and time of access, amount of data transferred, notification of successful access (HTTP response code), browser type and version, operating system, referrer URL (i.e. the previously visited page), IP address and requesting provider — is transmitted to the servers of YouTube or Vimeo in the USA.

If you are also logged into a Google account, this data is linked to the account. You have the right to object to the creation of user profiles, which you must exercise directly against YouTube or Vimeo.

(3) Further information on the purpose and scope of data collection and the processing of your data by YouTube can be found in the privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google, based in the USA, is certified under the EU-US “Privacy Shield” data protection agreement, which ensures compliance with the level of data protection applicable in the EU: https://www.privacyshield.gov/EU-US-Framework.

Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, California 94043, USA (“Google”)).

Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.

(2) As we have activated IP anonymization on this website, your IP address is shortened by Google beforehand within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity and provide us with further services relating to website and internet use.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

Disclosure of Your Data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only disclose your personal data to third parties if:

  1. you have expressly consented to this pursuant to Art. 6(1)(a) GDPR,
  2. the disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
  3. there is a legal obligation to disclose the data pursuant to Art. 6(1)(c) GDPR, or
  4. this is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the performance of contractual relationships with you.

Right to Object

You may object to the processing of data for the protection of legitimate interests pursuant to Art. 6(1)(f) GDPR if there are particular personal reasons that oppose the processing of your data.

Please send your objection by e-mail to hello@littlebigdreams.org or by post to:

LittleBigDreams e.V.
Strandweg 66
22587 Hamburg

Changes to the Privacy Policy

Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.

The current version of the Privacy Policy can be accessed by you at any time on this website.