Privacy Policy
Last updated: January 26, 2026
1. Overview
Soma Rights gUG (in formation) is committed to protecting your privacy and handling personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or contact us.
Our work follows the principles of data minimization and privacy by design. We collect only the data necessary for communication and basic website operation.
2. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Soma Rights gUG (in Gründung) Represented by: Alexandra Kroenert (sole founder) Address: Oderstr. 40, 12049 Berlin, Germany Email: hello@somarights.org
Soma Rights is currently in the process of formal legal registration as a non-profit limited liability company (gUG) under German law.
3. Personal Data We Collect
a) Information you provide
When you contact us via our website, we collect the following data:
• Name
• Email address
• Organization (if provided)
• Message content
b) Technical information
When you visit our website, limited technical data may be processed automatically, including:
• IP address (processed only to the extent technically necessary)
• Browser type and version
• Pages accessed and access times
This data is used exclusively to ensure the secure and reliable operation of the website.
4. Purpose and Legal Basis of Processing
We process personal data for the following purposes:
• Responding to inquiries and communication requests
• Providing information about our work and partnerships
• Ensuring website security and technical functionality
• Complying with legal obligations
Processing is based on Art. 6(1)(a), (b), and (f) GDPR.
We do not sell, rent, or use personal data for advertising or marketing purposes.
5. Data Storage and Security
Our website is hosted by Netlify, Inc., which processes data on our behalf in accordance with applicable data protection laws.
Contact form submissions are securely transmitted and stored only as long as necessary to process your request or meet legal obligations. Appropriate technical and organizational measures are in place to protect personal data from unauthorized access.
6. Third-Party Services
We currently use the following service providers:
• Netlify – website hosting and contact form processing
• GitHub – source code hosting (no personal data processing of website visitors)
No tracking, analytics, or marketing services are used.
7. Cookies
This website does not use cookies for tracking or analytics purposes. Should this change in the future, this Privacy Policy will be updated accordingly.
8. Children and Young People
This website is primarily addressed to adults, partners, and organizations. We do not knowingly collect personal data from children. If you believe personal data from a minor has been processed unintentionally, please contact us so we can delete it promptly.
9. Your Rights under GDPR
You have the following rights under the GDPR:
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
To exercise your rights, please contact us at: hello@somarights.org
10. Changes to this Policy
We may update this Privacy Policy as our organization develops or legal requirements change. The current version will always be available on this website.