Privacy Policy

The controller is Abiola gGmbH, represented by its managing director Christoph Köhler.

Address: Gewerbepark 25, 87477 Sulzberg-See, Germany. Website: www.abiola.ngo.

Privacy contact: info@abiola.eu.

Leader accounts: name, e-mail, phone number and a hashed password — for sign-in and contact.

Action reports: number of people, duration, number of bags and an optional text — to run campaigns and power the leaderboards.

Photos: action and group photos that may appear in the public feed and gallery. They are published only after the leader’s explicit consent. Any photo can be reported directly in the app and blocked or deleted by moderators at any time.

Payout data (Western Union): recipient name, country, city, phone and e-mail — solely to pay out the bonus. Stored encrypted and visible only to the responsible administration.

Technical data: standard server log data (e.g. IP address, timestamp) needed to provide and secure the service.

What data: when a team is registered we collect the team leader’s first name, last name, gender and town, and — voluntarily — the ABIOLA school ID, an e-mail address and a mobile number. For the team we store the country, the alias name, the team description, the login short name and the password (hashed only).

Purpose: signing in the team and reporting activities, checking bonus eligibility (school ID), and renewing the password — which is only possible with one of the voluntary details school ID, e-mail or phone number. If an e-mail address is stored, we notify it when the password has been renewed.

Who sees what: only the alias name, the team description and the country are public (e.g. on the leaderboard and in the feed). Name, gender, town, school ID and contact details are visible only to the responsible ABIOLA administrators. The login short name is not shown publicly.

Protection: e-mail address and phone number are stored encrypted. After several failed sign-in attempts a team login is temporarily locked.

Deletion: when the team account is deleted, we remove the team leader data (name, gender, town, e-mail, phone). Alias name, team description, country, school ID and the points earned remain without any personal reference so that campaign results stay correct.

Uploaded photos may show people, including pupils. Only photos for which the depicted persons — for minors, their legal guardians — have given consent may be uploaded. Photos can be removed at any time on request.

Contract/participation (Art. 6(1)(b) GDPR) for accounts, team registration and reports; consent (a) for publishing photos and for voluntary details; legitimate interest (f) for secure operation.

Hosting: servers in Germany (Hetzner). E-mail: Brevo. Optional read-only data mirror to Google Sheets (per country). We do not sell data and use no advertising tracking.

We keep personal data while the account exists or as long as required for the campaign, then delete or anonymise it, or earlier on request.

You have the right to access, rectification, erasure, restriction, objection, data portability and to withdraw consent.

Account deletion: in the app under “Account → Delete account”, or at greenactivity.abiola.ngo/konto-loeschen. Your personal and payout data are deleted; already-published actions/photos remain but are disconnected from you (anonymised).

Requests: info@abiola.eu.

You may lodge a complaint with a data protection supervisory authority.

Child sexual abuse and exploitation (CSAE), including child sexual abuse material (CSAM), are strictly prohibited in the “ABIOLA GreenActivity” app. Violations are removed, the accounts suspended, and reported to the competent authorities.

Our full Child Safety Standards (how to report and whom to contact) are available at greenactivity.abiola.ngo/child-safety. Child-safety contact: info@abiola.eu.