Back to Home

Privacy notice

Draft text. The details in [square brackets] still need to be filled in by the club, and a legal check is recommended before this page is relied on.

This notice explains what personal data the Itesiwaju members app and website use, why, and what your rights are.

Who is responsible

Itesiwaju Community Club [registered name], [address], Würzburg, Germany. Email: info@itesiwaju.com.

What data we keep

Account data: name, email, phone number, address if you give one, your role and membership status, and your password (stored only as a hash).

Club records: dues, fines, loans, special contributions, payments and withdrawals linked to you, event attendance, activity entries and notifications.

Technical data: a session cookie that keeps you signed in, and your language and theme choice, kept in your browser. If you turn on push notifications, your browser's push address is stored so we can reach your device.

Why we use it, and on what basis

To run the club and its membership: manage members, keep the club's accounts, organise events and contact you (Art. 6(1)(b) GDPR, membership). To keep the app safe, for example limiting wrong password attempts (Art. 6(1)(f), our legitimate interest). Push notifications only with your consent (Art. 6(1)(a)); you can withdraw it at any time in your browser.

Who processes it for us

The app runs on Convex (database and backend), Vercel (hosting) and Resend (email). They process data on our behalf. [Confirm the hosting regions and the safeguards for any transfer outside the EU.]

Push messages travel through the push service of your browser's maker.

How long we keep it

Member data is kept while you are a member. Financial records are kept as long as the law requires for the club's accounts. Data we no longer need is deleted.

Your rights

You can ask us for access to your data, to correct it, to delete it, to limit its use, to receive it in a portable form, and you can object to its use. Write to info@itesiwaju.com.

You may also complain to the data protection supervisory authority, in Bavaria the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

Cookies and tracking

We use only the cookies the app needs to work (sign-in and language). There is no advertising or analytics tracking.

Changes

We update this notice when the app changes. The date of the latest change is [date].