This notice explains which data we process when you register through this website for an umrah trip with Alahibba Mosque, and what rights you have.
Controller
Muslimisches Kulturforum München e. V., Lerchenstraße 14, 80995 München, Germany. Registered association, Munich District Court, VR 202749, represented by Othman Zitouni.
Email: kontakt@alahibba.de · Phone: +49 174 2768076
What data we process
Contact details: name, email address and phone number of the person registering.
Details of every traveller: first and last name, gender, date of birth, nationality, passport number and expiry date, and whether help with the visa is needed.
Trip details: room preference, notes, and later the room allocation, deposit and payment status.
Purpose and legal basis
We use the details to handle your registration, conclude the travel contract and organise the trip, including flights, hotels and visas. The legal basis is Art. 6(1)(b) GDPR (contract and pre-contractual steps).
Because taking part in an umrah indicates a religious belief, we also process the details on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give when registering.
Please share this notice with the other travellers you register.
Who receives the data
Only the people at Alahibba Mosque entrusted with the trip have access, through a protected login.
As far as the trip requires, we pass the travellers' details to the travel agency we run the trip with. The agency passes them to the airline and hotels and, for the visa, to the competent authorities of the Kingdom of Saudi Arabia. This transfer to a country outside the EU is based on performing the travel contract (Art. 49(1)(b) GDPR).
Hosting, servers and email
This website runs on Vercel Inc. The servers that process your details are located in Frankfurt am Main. The database is hosted by Neon Inc., also in a data centre in Frankfurt am Main.
Confirmation and status emails are sent through Google Workspace (Google Ireland Ltd.) from noreply@alahibba.de.
These providers process data only on our behalf and on our instructions (Art. 28 GDPR). Where data may reach the USA, this is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.
How long we keep data
We keep the details only as long as the trip and its completion require, and delete them afterwards unless the law obliges us to keep them, for example accounting records. Registrations that do not lead to a booking are deleted once they are closed.
Server logs
When you open the pages, technically necessary details such as IP address, date and time, requested address and browser type are logged briefly to keep the website running and secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).
Cookies, fonts and analytics
We only use technically necessary cookies, for example to show your own documents after a status check. There is no advertising, no analytics or tracking, and no embedded third-party content.
All fonts and images are loaded from our own server. Your browser does not connect to Google or any other third party.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21).
You can withdraw your consent at any time with effect for the future, for example by email to kontakt@alahibba.de. This does not affect the lawfulness of processing before the withdrawal.
You may also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.
Privacy contact
For any questions about data protection, write to kontakt@alahibba.de.
Last updated: November 2026