Privacy Policy

Objectives and Responsible Party

Protecting the personal data you provide while using our websites is important to us. For this reason, we would like to inform you regarding the type, extent, and purpose of data collection and usage, as well as the use of cookies through our websites and data collection and use connected with this usage.

The responsible party as defined by data protection guidelines is Evangelisches Werk für Diakonie und Entwicklung e.V., Caroline-Michaelis-Str. 1 10115 Berlin, Germany, (hereinafter referred to as "Brot für die Welt", "we", or "us").

General Information Regarding Data Processing

We process data according to the applicable data protection standards, particularly the data protection laws of the Protestant Church in Germany (DSG-EKD).

We process the personal data of users only in compliance with the applicable data protection provisions. Therefore, the users' data are only used if permitted by law, or if consent is granted.

We take organizational, contractual, and technical safety measures according to the latest technological standards to ensure that the provisions set forth in the data protection laws are met to protect the data managed by us from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

We use 128-bit encryption for the transmission of data that require special protection, such as banking information for donations, or internal information in the agency's filing systems. Currently, this technology offers the highest security standards and is used, for example, in online banking.

Processing of Personal Data

In addition to the uses explicitly noted in this Privacy Policy, the personal data of the users are also used for the following purposes:

• To fulfill the tasks set forth in our by-laws for the provision of services;
• technical and business-related notifications regarding our offers.

The personal data provided to us online are only collected, processed, and used for the concrete purposes communicated to us. Any other collection, processing, or use exclusively occurs in compliance with the law.

However, processing according to § 6 DSG-EKD is only legal, if at least one of the following conditions is met:

1. a legal provision permits the processing of personal data or requires it;
2. the data subject consents to the processing of the personal data relating to him/her for one or multiple particular purposes;
3. processing is required for the fulfillment of the tasks of the responsible party, including the exertion of church oversight,
4. processing is required to carry out any other task in the interest of the church,
5. processing is required for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures requested by the data subject;
6. processing is required for the fulfillment of a legal obligation to which the church is subject;
7. processing is necessary to protect the vital interests of the data subject or another natural person;
8. processing is required for the maintenance of the legitimate interest of a third party, unless it is outweighed by the data subject's interests to be protected, particularly if the data subject is underage.

Further, we transmit data to third parties on the basis of consent, or for the purposes of accounting (e.g. bank transactions or sending goods and invoices in the mail), or otherwise necessary to fulfill our contractual obligations to our users.

When contact is initiated with us, information is stored for the purpose of processing the request and in case of follow-up questions.

If there is an option of providing personal or company-related data, (e.g. personal registration, order, request or notification), within this website, the provision of these kinds of data is expressly voluntary on the part of the user.

Personal data are erased once they have fulfilled their purpose for processing and erasure is not opposed by retention obligations.

Amendments to the Privacy Policy

We reserve the right to change the Privacy Policy, to adapt it to modified legal situations, or to adjust in case of changes to the service or data processing.

The users are therefore asked to regularly obtain information regarding its content, particularly if they provide personal information again.

You have the right to receive information regarding the personal data we stored about you for free upon request.

You have the right to withdraw your consent at any time (e.g. newsletter). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

In justifiable cases, you also have the right to rectification, to erasure, to restriction of processing, to data portability, as well as the right to object to processing.

The contact information can be found in the legal disclaimer.

In the event of a violation of data protection law, the data subject has the right to lodge a complaint with the responsible supervisory authority. The competent supervisory authority is:

EKD's Data Protection Officer
Lange Laube 20
30159 Hannover
Germany
Telephone: +49 (0)511 768128-0

Website: https://datenschutz.ekd.de

For questions regarding data protection, please contact the Data Protection Officer for Evangelisches Werk for Diakonie und Entwicklung (Protestant Agency for Diakonie and Development).

Lukas Biniossek
Hauptstraße 27
53604 Bad Honnef
Germany
Telephone: +49 (0) 2224 98829 0
E-Mail: datenschutz@ewde.de

Collection of Access Data

Extent and Purpose of Data Processing, Legal Basis

We collect data about any access to the server, on which this website is located (so-called server log files). Legal basis is § 6 No. 4 DSG-EKD. Access data include the name of the accessed website, files, date and time of access, amount of data transmitted, information about successful access, browser type and version, the users' operating system, referrer URL (of the previously visited website), IP address of the requesting provider.

We use the protocol data, without drawing conclusions about the user or the creation of other profiles according to the legal requirements, only for the statistical evaluation for the purpose of operation, security, and website optimization. However, in case of a concrete suspicion of unlawful usage, we reserve the right to check the protocol data subsequently.

Objection and Removal Option

The collection of data to provide the website and the storage of data in log files is absolutely necessary to operate the website. The user therefore cannot object to this.

Integration of Third-Party Services and Contents

Our website may contain third-party content, such as YouTube videos, maps by Google Maps, RSS-Feeds, or images from other websites. This always requires that the provider of this content recognizes your IP address, because they are unable to send the content to your browser without an IP address. The IP address is therefore always required to display this content. We make an effort to only use types of content for which the respective provider only uses your IP address for the purpose of delivering the content.

In particular, the website uses YouTube videos by third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Inc's privacy policy can be found at www.google.com/policies/privacy/, opt-out options for the usage of data by Google can be accessed at: www.google.com/settings/ads/. The YouTube videos are exclusively used in extended privacy mode, through which the data are not transmitted to YouTube when videos are accessed by the user.

Use of Cookies

Extent and Purpose of Data Processing, Legal Basis

Cookies are information, which is transmitted by our web server to your web browser and then stored there for future access. Legal basis is § 6 No. 4 DSG-EKD. It is also possible to view our website without using cookies. If you do not want cookies to be stored on your computer, please deactivate their placement via the applicable option in your browser's system settings. Stored cookies can be deleted in the system settings of your browser. Opting out of cookies can limit the functions of this website.

We are working with individual advertising partners on using so-called retargeting. In the field of online marketing, retargeting denotes a method through which a website visitor is marked and then addressed on other websites with targeted advertising. We have commissioned Digital Media Deutschland GmbH with implementing the retargeting measures. Through this technology, cookies of the partner company (so-called third-party cookies) are also stored on your hard drive when you visit our website.

Objection and Removal Option

The use of third-party cookies can be deactivated and restricted via the following links.

• Adition (https://www.adition.com/kontakt/datenschutz/)
• Performance Advertising (https://www.performance-advertising.de/opt-out/)

Furthermore, there is the option of managing many online advertising cookies from companies using the US website http://www.aboutads.info/choices/, or the EU-based website http://www.youronlinechoices.com/uk/your-ad-choices.

Google Analytics

Extent and Purpose of Data Processing, Legal Basis

This website uses Google Analytics, a web analysis service provided by Google LLC ("Google”). Legal basis is § 6 No. 4 DSG-EKD. Google Analytics uses so-called "cookies”, text files which are stored on your computer, allowing your use of the website to be analysed. The information generated by the cookie about your use of this website will normally be transmitted to a Google server in the USA and stored there.

Please note that the code anonymizeIp() has been added to Google Analytics on this website to ensure that IP addresses are collected in anonymized form. Therefore, your IP address will be truncated beforehand by Google within member states of the European Union or other states party to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports about website activity, and provide the website operator with other services related to website use and internet use. The IP address transmitted by your browser as part of Google Analytics shall not be merged with other Google data.

We configured Google Analytics in such a way that user and event data are automatically erased after 14 months.

Objection and Removal Option

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to make full use of all functions of this website. Furthermore, you can prevent Google from logging your use of this website as recorded by the cookie, as well as processing this data (incl. your IP address), by downloading and installing the browser plug-in that is available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Google Tag Manager

Extent and Purpose of Data Processing, Legal Basis

We use "Google Tag Manager" https://www.google.com/intl/de/tagmanager, a service provided by Google, Inc. ("Google"). Legal basis is § 6 No. 4 DSG-EKD. "Google Tag Manager" is a service with which additional Google analytics and marketing services can be integrated into our website (e.g. "AdWords Conversion Tracking", "DoubleClick", or "GoogleAnalytics"). "Google Tag Manager" uses cookies, which enable Google and its partner sites to post ads based on the visits and interests of users on our websites or other websites on the Internet. Google records the user data related to numerous websites, however, only as pseudonyms. Information gathered about users by "DoubleClick" is transmitted to Google and stored on Google's servers in the USA.

Objection and Removal Option

Additional information about data usage for advertising purposes by Google and options for objecting can be found on the overview site: https://www.google.com/policies/technologies/ads/. Furthermore, you can use the settings and opt-out options provided by Google: To disable interest-based advertising when signed into Google websites: https://www.google.com/ads/preferences/; to disable interest-based advertising on websites outside of Google: https://www.google.de/settings/ads/anonymous.

Matomo Statistics

Extent and Purpose of Data Processing, Legal Basis

We use Matomo (formerly Piwik), an open-source software for the statistical analysis of user access. Legal basis is § 6 No. 4 DSG-EKD. Matomo uses cookies, which are stored on the users' computer and enable an analysis of the use of the website by the user. The data related to the use of our website generated by the cookie are stored on our server in Germany. The IP address is anonymized immediately after processing and before the data are stored.

Objection and Removal Option

Users can configure their browser software to prevent cookies from being installed. They have the option of preventing an analysis and linking of their actions. This will protect your privacy, but also hinder the owner in learning about your actions and to improve the operability for you and other users.

Contact Form

Extent and Purpose of Data Processing, Legal Basis

Our website features contact forms, which may be used to contact us electronically. When using this form, the data entered by the user (such as name, address, telephone number, email address) in the input mask will be transmitted to us and stored. During your submission, we will obtain your consent to the data being processed, referencing this Privacy Policy. Your data will not be disclosed to third parties. The data will only be used to process the conversation. The legal basis for processing data with the user’s consent is § 6 No. 2 DSG-EKD.

Objection and Removal Option

You can withdraw your consent to the processing of personal data at any time. To do so, please send an email kontakt@brot-fuer-die-welt.de.

Event Registration

Extent and Purpose of Data Processing, Legal Basis

Our website features contact forms, which may be used to electronically register for events. When using this form, the data entered by the user (such as name, address, telephone number, email address) in the input mask will be transmitted to us and stored. During submission, we will obtain your consent to the data being processed, referencing this privacy policy. Your data will not be disclosed to third parties. The data will only be used to process registration and implementation. The legal basis for processing data with the user’s consent is § 6 No. 2 DSG-EKD.

Objection and Removal Option

You can withdraw your consent to the processing of personal data at any time. To do so, please send an email kontakt@brot-fuer-die-welt.de.

Date of the privacy policy: May 2018