Privacy
Who is responsible
IT Hub GmbH operates this website and is responsible for the processing of personal data on it:
IT Hub GmbH
Rautistrasse 75
c/o Zumstein Treuhand- & Revisions AG
8048 Zürich
Switzerland
E-mail: info [at] ithub.ch
The cleanups and the content come from the volunteer initiative “Do It By Heart – Save Koh Lipe” on Koh Lipe, Thailand. It receives the messages from the contact form and the donation notifications and answers them. E-mail: info [at] doitbyheart.com
Legal basis
Personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, processing is based on the legitimate interest in running the website securely, on handling your message or donation, and on your consent where it is required.
Visiting the website and server logs
With every visit, your browser transmits technical information that the web server logs, such as IP address, date and time, the address requested, status code, referring page and browser identification.
These logs are used for operation, troubleshooting and security, for example to detect and fend off attacks. They are not combined with other data sources.
Contact form
If you use the contact form, you send your name, your e-mail address and your message, together with the language of the page. The website forwards them by e-mail from its sender address info [at] doitbyheart.com, via the website’s mail server, to the initiative, which reads and answers them. You receive a short confirmation of receipt by e-mail.
The messages are not stored in a database of the website. The server log notes that a message was sent, with name, e-mail address, language and IP address, so that faults and abuse can be traced. To prevent abuse, the server also limits the number of messages per IP address, and a hidden field catches automated submissions.
Spam protection (Google reCAPTCHA)
To protect the form against automated submissions, the website uses Google reCAPTCHA v3. Google’s script is only loaded when you send the form, not when you just open the page. Google then assesses whether the input comes from a person and processes technical connection and usage data such as your IP address. The provider is Google Ireland Limited; Google’s privacy policy and terms of use apply. A transfer to the USA cannot be ruled out.
Donations with PayPal
Donations on this website are processed by PayPal. PayPal’s script and buttons are only loaded when you start a donation. You pay in a PayPal window; your payment details, such as account or card, go directly to PayPal and do not reach this website.
After the payment, the website receives from PayPal the amount, the currency, the transaction number and the name and e-mail address of the PayPal account. It uses them to send a notification to the initiative and a thank-you e-mail to you. These details are not stored in a database of the website; the server log only records the amount and the transaction number. If the website only opens PayPal’s donation page, it receives no data about you at all. PayPal’s own privacy policy applies to the payment.
Usage statistics (Google Analytics)
Only with your consent, the website counts visits with Google Analytics: pages viewed, referring page and technical information about device and browser. IP addresses are shortened, and Google sets its own cookies for this.
Without your consent, Google’s script is not loaded and nothing is sent to Google. You can change your decision at any time via “Privacy settings” in the footer; after withdrawing it, no more visits are counted and Google’s cookies are deleted. The provider is Google Ireland Limited; a transfer to the USA cannot be ruled out.
Map
The map of the meeting point comes from OpenStreetMap. As soon as a page with the map is opened, your browser loads the map images directly from the servers of the OpenStreetMap Foundation (United Kingdom) and transmits your IP address and technical information about the browser. This happens without asking beforehand; the website sets no cookies for it. The OpenStreetMap Foundation’s privacy policy applies.
Videos
The website’s own films are delivered from its own server, without a video platform. The page about the initiative shows a documentary by Swiss television SRF. Its player is only loaded from SRF when you click on play; before that, nothing is loaded from SRF, not even a preview image. After the click, Schweizer Radio und Fernsehen (SRF) receives your IP address, and SRF’s privacy policy applies.
Fonts, pictures and social networks
Fonts and pictures come from the website’s own server; nothing is loaded from Google Fonts or similar services. Facebook and Instagram are only linked: Meta only receives data when you follow such a link.
Cookies and local storage
This website sets no cookies of its own. It keeps a few settings in your browser’s local storage so that they apply again on your next visit:
- doitbyheart-consent: your decision on usage statistics
- doitbyheart-a11y: accessibility settings (text size, high contrast, appearance)
- doitbyheart-lang: the language chosen in the language menu
These entries stay on your device and are not sent to the server; you can delete them in your browser at any time. Only the initiative’s editors log in to the editorial area; their login is kept in the browser’s session storage until the window is closed.
Hosting
This website runs on IT Hub GmbH’s own servers in Switzerland.
Retention
Server logs are deleted automatically after a limited time, unless they are needed to investigate a specific security incident. E-mails from the contact form and donation notifications remain in the initiative’s mailbox for as long as they are needed to deal with them. PayPal keeps payment data under its own rules and legal obligations.
Your rights
Within the applicable data protection laws, you have the following rights:
- information about the data processed about you
- correction of inaccurate data
- deletion of your data
- restriction of processing
- receipt or transfer of your data
- objection to processing and withdrawal of consent you have given
An e-mail to info [at] ithub.ch is enough to exercise these rights; about pictures and messages to the initiative, you can also write to info [at] doitbyheart.com. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) and, where the GDPR applies, with the supervisory authority responsible for you.
Security
The connection to this website is always encrypted (HTTPS). Appropriate technical and organisational measures protect your data. Please note that ordinary e-mail is transmitted unencrypted.
Changes
This policy is updated when something changes on the website or in the services used. The version published here applies. As of 23 September 2026.