PRIVACY POLICY

1. Controller

The controller responsible for data processing on this website is:

Eating Stone Organisation
Along Gikambura road, near Catholic Church “Our Lady of Assumption”
Gicharani, Kikuyu Sub County
Postal address: 75829-00200 Nairobi, Kenya

Represented by: Dr. Cyprian Owino Lumumba, Founder and Director
c.lumumba@eatingstone.org
Registration number: OP. 218/051/14-0217/9744

EU representative (Art. 27 GDPR)

Florian Kreuzer (Representative in Germany)
Bahnhofstr. 19, 82418 Murnau, Germany
Email: f.kreuzer@eatingstone.org
Phone: +49 151 2685 2449

2. General information on data processing

We only process personal data of our users to the extent necessary to provide a functioning website along with our content and services. Processing generally takes place only with the user’s consent or on the basis of another legal permission (Art. 6(1) GDPR), for example to fulfil contractual obligations or on the basis of legitimate interests.

3. Hosting

This website is hosted with ALL-INKL.COM – Neue Medien Münnich (proprietor: René Münnich, Hauptstraße 68, D-02742 Friedersdorf, Germany). According to the host’s terms of service, server hardware is operated in data centers in Germany. When you visit the website, the host automatically collects so-called server log files transmitted by your browser (IP address, date/time of request, browser type, operating system, referrer URL). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free operation of the website).

A data processing agreement (DPA) under Art. 28 GDPR is in place with ALL-INKL.COM; according to the host, its contractual clauses correspond to EU Implementing Decision 2021/915.

4. Cookies and similar technologies

Our website uses cookies. Technically necessary cookies (e.g. for security functions or language settings) are used on the basis of Art. 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG (formerly TTDSG) without requiring separate consent.

All other cookies (e.g. for analytics/statistics) are only used if you have actively given prior consent via our cookie consent tool (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with future effect via Cookie settings.

5. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies that enable an analysis of website usage (including a shortened/pseudonymized IP address, device and browser information, usage behavior).

Processing only takes place if you have given consent via our cookie banner (Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA; the legal basis for this is the EU-US Data Privacy Framework (adequacy decision of the European Commission).

You can withdraw your consent at any time (see Section 4) or additionally prevent data collection by Google Analytics using a browser add-on: https://tools.google.com/dlpage/gaoptout

Retention period: Cookies or user identifiers set by Google Analytics are automatically deleted after 14 months.

6. Contact form

If you send us inquiries via the contact form, the details you provide in the form, including the contact data you provide there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. The legal basis is Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in processing inquiries). We do not pass on this data without your consent. The data will be deleted once it is no longer required to achieve the purpose for which it was collected, generally after your inquiry has been fully processed.

7. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar.

8. Your rights

You have the right at any time to:

  • request information about your personal data stored by us (Art. 15 GDPR)
  • request correction of inaccurate data (Art. 16 GDPR)
  • request deletion of your data stored by us (Art. 17 GDPR)
  • request restriction of the processing of your data (Art. 18 GDPR)
  • request data portability, provided you have consented to the processing or concluded a contract with us (Art. 20 GDPR)
  • object to the processing of your data, provided it is based on a legitimate interest (Art. 21 GDPR)
  • withdraw any consent given at any time with future effect (Art. 7(3) GDPR)
  • lodge a complaint with a supervisory authority (Art. 77 GDPR). As a rule, you can contact the supervisory authority of your habitual residence or place of work.

9. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

10. Currency and amendment of this privacy policy

This privacy policy is currently valid (as of: July 2026). Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this policy.