CRITICAL FIX: Section 9 incorrectly stated data "may be transferred to and
processed in New Zealand" - this is factually incorrect. Data is hosted in
the EU (OVHCloud France, MongoDB Atlas Frankfurt) and NEVER transferred to NZ.
Changes:
- Section 9: Complete rewrite for accuracy
* Clarified: NZ administration vs. EU hosting
* Added explicit hosting providers and regions
* Confirmed NO data transfer to New Zealand
* Expanded GDPR compliance details (Articles 5, 6, 15-22, 25, 32)
- Section 4: Updated retention periods to match GDPR page (7 years donations,
14 months analytics anonymization)
- Section 7: Enhanced security specifications (TLS 1.3, AES-256, bcrypt)
- Section 3: Clarified MongoDB hosting is in EU
Translations:
- German (DE): 99/99 professional translations via DeepL ✓
- French (FR): 99/99 professional translations via DeepL ✓
This correction strengthens GDPR compliance messaging and provides accurate
transparency about data residency.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
