Privacy Policy

Please read carefully

This website uses cookies to ensure you get the best experience on our website.

General Information

This privacy policy contains detailed information about what happens with your personal data when you visit our website www.syria-rebuild.de. Personal data is all data with which you can be personally identified. When processing your data, we strictly adhere to legal regulations, especially the General Data Protection Regulation ("GDPR"), and place great importance on ensuring that your visit to our website is absolutely secure.

Responsible Entity

The entity responsible for the collection and processing of personal data on this website is:

First name, Last name:Mohamad Nour Aldghim

Street, House number:Dr.-Martin-Luther-King-Straße 29

Postal code, City:19061 Schwerin

Country:Germany

E-Mail:info@syria-rebuild.de

Tel.:+49 177 1496450

Data Protection Officer

The internal data protection officer of the data controller is:

First name, Last name:Mohamad Nour Aldghim

Street, House number:Dr.-Martin-Luther-King-Straße 29

Postal code, City:19061 Schwerin

Country:Germany

E-Mail:info@syria-rebuild.de

Tel.:+49 177 1496450

Any affected person can contact our data protection officer directly with any questions or suggestions regarding data protection.

Access Data (Server Logfiles)

When you access our website, we collect and store access data automatically in server log files that your browser transmits to us. These include:

• Browser type and browser version of your PC

Page 1 of 11

• Operating system used by your PC

• Hostname of the accessing computer

• Date and time of the server request

• The IP address currently used by your PC (possibly in anonymized form)

As a rule, we cannot establish a connection to a specific person, nor is this intended. The processing of such data is carried out in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.

Social Media

0.1 Facebook Plugins (Like & Share Button)

Our website integrates plugins from the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, ("Facebook"). You can recognize the Facebook plugins by the Facebook logo or the "Like Button" on our website. An overview of the Facebook plugins can be found here:

https://developers.facebook.com/docs/plugins/?locale=de_DE.

We prevent the unconscious and unwanted collection and transmission of personal data to Facebook through a so-called 2-click solution. To activate the plugin, the user must click on the button. Only through this click is the collection of personal information triggered and its transfer to the service provider. We would like to point out that as the operator of the website, we have no knowledge of the content of the transmitted data or its use by Facebook.

Information about the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options to protect your privacy, can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.

0.2 Instagram Plugin

Our pages integrate functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram badges

We prevent the unconscious and unwanted collection and transmission of personal data to the service provider through a 2-click solution. To activate the social plugin, the user must click on the button. Only through this click is

Page 2 of 11

the collection of personal information triggered and its transfer to the service provider. We would like to point out that as the operator of the website, we have no knowledge of the content of the transmitted data or its use by Instagram.

Information about the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options to protect your privacy, can be found in Instagram's privacy policy at: https://instagram.com/about/legal/privacy/.

Google Maps

Our website uses the Google Maps map service via an API (Application Programming Interface) from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

To ensure data protection on our website, Google Maps is deactivated when you first enter our website. A direct connection to Google's servers is only established if you activate Google Maps yourself (consent according to Art. 6 Para. 1 lit. a GDPR). This prevents your data from being transferred to Google when you first visit our website.

After activation, Google Maps will store your IP address. This is then usually transferred to a Google server in the USA and stored there. After the activation of Google Maps, the provider of this page has no influence on this data transfer.

More information about the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Newsletter

If you have expressly consented, we will regularly send our newsletter to your email address. To receive our newsletter, you must provide us with your email address and then verify it. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.

The data provided during newsletter registration is processed exclusively on the basis of your consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time. For the revocation, an informal message by email is sufficient or you can unsubscribe via the "unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Data entered for the purpose of subscribing to the newsletter will be deleted in the event of cancellation. Should this data have been transmitted to us for other purposes and elsewhere, it will remain with us.

Page 3 of 11

Newsletter Delivery with CleverReach

We use CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. With this service, we can organize and analyze the newsletter dispatch. Your data entered for the newsletter subscription, such as your email address, are stored on CleverReach's servers. Server locations are Germany or Ireland.

Newsletter delivery with CleverReach allows us to analyze the behavior of newsletter recipients. The analysis shows, among other things, how many recipients have opened our newsletter and how often links in the newsletter have been clicked. CleverReach supports conversion tracking to analyze whether a previously defined action, such as a product purchase, has taken place after clicking on a link. Details about data analysis by CleverReach can be found at: https://www.cleverreach.com/de/funktionen/ reporting-und-tracking/.

The data processing is carried out on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. If you do not wish to be analyzed by CleverReach, you must unsubscribe from the newsletter. For unsubscribing, an informal message by email to us is sufficient or you can unsubscribe via the "unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Data entered for the purpose of subscribing to the newsletter will be deleted from our servers and CleverReach's servers in the event of cancellation. Should this data have been transmitted to us for other purposes and elsewhere, it will remain with us.

Details about CleverReach's privacy policy can be found at: https://www.cleverreach.com/de/datenschutz/.

To fully comply with the legal data protection requirements, we have concluded a data processing agreement with CleverReach.

Contact Form

If you contact us by email or through a contact form, the transmitted data including your contact details will be stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent.

The processing of data entered into the contact form is carried out exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. For the revocation, an informal message by email is sufficient. The legality of the data processing operations that took place up to the

Page 4 of 11

revocation remains unaffected.

Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent for storage, or there is no longer any need for data storage. Mandatory statutory provisions - especially retention periods - remain unaffected.

User Account

When you open a user account, you consent to the storage of your master data such as name, address, and email address as well as your usage data (username, password). This gives you the option to log in to us with your email address and your personal password.

Data Use and Sharing

The personal data that you provide to us, e.g. by email (such as your name and address or your email address), will neither be sold to third parties nor otherwise marketed. Your personal data will only be processed for correspondence with you and only for the purpose for which you provided us with the data. For the processing of payments, we forward your payment data to the credit institution entrusted with the payment.

The use of data that is automatically collected during your visit to our website is only for the aforementioned purposes. This data will not be used for any other purpose.

We assure that we will not otherwise pass on your personal data to third parties unless we are legally obliged to do so or you have given us your consent beforehand.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

§ 1

Storage Duration

Page 5 of 11

Personal data that has been communicated to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as commercial and tax retention periods are to be observed, the storage period for certain data can be up to 10 years.

§ 2

Rights of Data Subjects

With regard to personal data concerning you, as a data subject of data processing, you have the following rights vis-à-vis the controller in accordance with the statutory provisions:

2.1 Right of Withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke consent given once for the processing of data in accordance with Art. 7 Para. 3 GDPR at any time with effect for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Storage of data for billing and accounting purposes is not affected by a revocation.

2.2 Right to Information

You have the right, pursuant to Art. 15 GDPR, to request confirmation from us as to whether we process personal data concerning you. If such processing exists, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing affecting you, as well as your right to be informed about what guarantees exist pursuant to Art. 46 GDPR when your data is transferred to third countries.

2.3 Right to Rectification

You have the right, pursuant to Art. 16 GDPR, to request the immediate correction of incorrect personal data concerning you and/or the completion of your incomplete data.

2.4 Right to Erasure

Page 6 of 11

You have the right, pursuant to Art. 17 GDPR, to request the erasure of your personal data if one of the following reasons applies:

a)Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

b)You revoke your consent on which the processing was based pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for the processing.

c)You object to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Para. 2 GDPR.

d)The personal data has been processed unlawfully.

e)The erasure of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.

f)The personal data was collected in relation to offered services of the information society pursuant to Art. 8 Para. 1 GDPR.

However, this right does not exist insofar as the processing is necessary:a)for exercising the right of freedom of expression and information;

b)for compliance with a legal obligation which requires processing under the law of the Union or of the Member State to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

c)for reasons of public interest in the area of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;

d)for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the right of data subjects is likely to render impossible or seriously impair the achievement of the objectives of such processing, or

e)for the establishment, exercise, or defense of legal claims.

If we have made your personal data public and we are obliged to erase it pursuant to the above, we shall take reasonable measures, including technical measures,

Page 7 of 11

taking into account the available technology and the implementation costs, to inform data controllers who are processing the personal data that you, as the data subject, have requested the erasure of all links to your personal data or of copies or replications of such personal data.

2.5 Right to Restriction of Processing

You have the right, pursuant to Art. 18 GDPR, to request the restriction of processing (blocking) of your personal data. For this purpose, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

a)If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your

personal data.

b)If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.

c)If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of processing of your personal data instead of erasure.

d)If you have lodged an objection pursuant to Art. 21 Para. 1 GDPR, a balancing of your and our interests must be carried out. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State.

2.6 Right to Notification

If you have asserted the right to rectification, erasure, or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Pursuant to Art. 19 GDPR, you have the right to be informed about these recipients upon request.

Page 8 of 11

2.7 Right Not to Be Subject to a Decision Based Solely on Automated Processing, Including Profiling

You have the right, pursuant to Art. 22 GDPR, not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision

a)is necessary for entering into, or the performance of, a contract between you and us,

b)is authorized by provisions of Union or Member State law to which the controller is subject and these provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or

c)is based on your explicit consent.

However, decisions in the cases mentioned in (a) to (c) may not be based on special categories of personal data referred to in Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures to safeguard your rights and freedoms as well as your legitimate interests have been taken.

In the cases referred to in (a) and (c), we shall implement suitable measures to safeguard your rights and freedoms as well as your legitimate interests, which includes, at least, the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

2.8 Right to Data Portability

Insofar as the processing is based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and is carried out using automated procedures, you have the right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller or to request transmission to another controller, insofar as this is technically feasible.

2.9 Right to Object

Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on this provision. The

Page 9 of 11

respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 Para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 Para. 2 GDPR).

You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by automated means using technical specifications.

2.10 Right to Lodge a Complaint with a Supervisory Authority pursuant to Art. 77 GDPR

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

P.O. Box 20 04 44

40102 Düsseldorf

Kavalleriestraße 2-4

40213 Düsseldorf

Phone: 02 11/384 24-0

E-Mail: poststelle@ldi.nrw.de

Internet: https://www.ldi.nrw.de

Validity and Amendment of this Privacy Policy

This privacy policy is valid from March 24, 2025. We reserve the right to amend this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal provisions or to take into account changes to our website or new services on our website. The version available at the time of your visit applies.

Page 10 of 11

Last Updated: June 28, 2025