top of page

Privacy Policy

Last updated: 3.06.2026

​

The Mike Koedinger Foundation ("the Foundation", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Luxembourg data protection law.

1. Who we are

Data controller: Mike Koedinger Foundation
Legal registration (LBR): G263
Registered office: 10, Rue des Gaulois, 1618 Luxembourg
Contact: [email protected]

2. What data we collect

We collect the following categories of personal data:

Information you provide directly:

  • Identity and contact details (name, email address, postal address, phone) 

  • Donation details, including amount and date 

  • Any content you include when contacting us or subscribing to our newsletter 

Information collected automatically:

  • Technical data such as IP address, browser type, device information 

  • Usage data via cookies and similar technologies (see Section 7) 

Payment data:

  • When you make a donation, payment is processed by Mollie. We do not store your full card or bank details. 

3. Why we use your data (legal bases)

  • To process donations and issue receipts – performance of a contract / compliance with legal obligations 

  • To respond to your enquiries – legitimate interest 

  • To send our newsletter – your consent 

  • To maintain security and prevent fraud – legitimate interest 

  • To comply with legal and accounting obligations – legal obligation 

4. Who we share data with

We do not sell your personal data. We share it only with service providers ("processors" or independent controllers) acting on our behalf or in connection with our services:

​

  • Wix – website hosting, management and analytics

  • Cloudflare – content delivery, security and DDoS protection 

  • Microsoft (Office 365) – email and internal communications 

  • EmailOctopus – newsletter management and email delivery 

  • Mollie – payment processing (acts as an independent data controller for payment data under its own privacy policy) 

 

Some providers may process data outside the European Economic Area. Where this happens, appropriate safeguards such as Standard Contractual Clauses are in place.

5. How long we keep your data

We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. accounting and tax records are kept for the legally mandated period, typically 10 years in Luxembourg). Newsletter data is kept until you unsubscribe. After that, data is deleted or anonymised.

Under the GDPR, you have the right to:

​

  • Access your personal data 

  • Rectify inaccurate data 

  • Request erasure ("right to be forgotten") 

  • Restrict or object to processing 

  • Data portability 

  • Withdraw consent at any time, where processing is based on consent 

​

You can unsubscribe from our newsletter at any time via the link in each email. To exercise your other rights, contact us at [email protected] . You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD), www.cnpd.lu.

6. Your rights

Our website uses cookies and similar technologies to function correctly, ensure security, and analyse usage through Wix. Essential cookies are required for the site to operate. Non-essential cookies are used only with your consent, which you can manage or withdraw via our cookie banner or your browser settings.

7. Cookies

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the latest revision. Material changes will be communicated where appropriate.

9. Contact

For any questions about this Privacy Policy or your personal data:
 

Mike Koedinger Foundation
10, Rue des Gaulois, 1618 Luxembourg
[email protected]

bottom of page