Data Protection Declaration

Data protection declaration of Johanniter-Unfall-Hilfe e.V.

Table of Contents

  1. Name and address of the controller
  2. Name and address of the data protection officer
  3. General information concerning data processing
  4. Provision of the website and creation of logfiles
  5. Use of cookies
  6. Newsletter
  7. Online booking for first aid courses
  8. Online shop home emergency call gift voucher
  9. Online donation and sponsor membership
  10. Online application
  11. Online speculative application
  12. Contact form and getting in touch by email
  13. Web analysis by means of Matomo (previously PIWIK)
  14. Google AdWords and conversion tracking
  15. Bing Adwords and conversion trackingGoogle AdWords and conversion tracking
  16. Conversion measuring with the visitor action pixel of Facebook
  17. Integration of A/B tests with AB Tasty
  18. Integration of third party services and content
  19. Rights of the data subject
  20. Reservation of amendments

 

1 Name and address of the controller

The controller in accordance with the EKG Data Protection Law and other national data protection laws of the EU Member States and other provisions under data protection legislation is:


Johanniter-Unfall-Hilfe e.V.
Lützowstraße 94
10785 Berlin
Germany
Tel. +49 (0)30 26997 0
Email: info@johanniter.de
Website: www.johanniter.de

 

2 Name and address of the data protection officer

The data protection officer of the controller is:


Elke Hofmeister
Data protection officer of Johanniter-Unfall-Hilfe e.V.
Lützowstraße 94
10785 Berlin
Germany
Tel 030 26997 0
Email: datenschutz@johanniter.de
Website: www.johanniter.de

 

3 General information concerning data processing

3.1.    Scope of the processing of personal data
We generally only process personal data of our users if this is necessary in order to provide a functional website, as well as our content and services. The processing of personal data of our users generally takes place only with their consent. An exception applies in such cases where it is not actually possible to obtain their consent in advance and the processing of the data is permitted by statutory regulations.

3.2.    Legal basis for the processing of personal data
Should we obtain consent of the affected person for the processing of personal data, the legal basis is § 6 Number 2 of the EKG Data Protection Law.
When processing personal data which is necessary in order to fulfil a contract where the contracting party is the data subject, the legal basis is § 6 Number 5 of the EKG Data Protection Law. This also applies to processing which is necessary in order to perform pre-contractual measures.
Should processing of personal data be necessary in order to fulfil a legal obligation to which our company is subject, the legal basis is § 6 Number 6 of the EKG Data Protection Law.
In case that key interests of the data subject or another natural person make the processing of personal data necessary, the legal basis is § 6 Number 7 of the EKG Data Protection Law.
Should the processing be necessary in order to safeguard a legitimate interest of our company or of a third party and should the interests, basic rights and basic freedoms of the data subject not outweigh such a legitimate interest, the legal basis for the processing is § 6 Number 4 and § 6 Number 8 of the EKG Data Protection Law.

3.3.    Data deletion and duration of the saving
The personal data of the data subject will be deleted or blocked, once the purpose of the saving is no longer applicable. Saving can take place beyond the above, should this be provided for by the European or national legislator in EU ordinances, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a saving period prescribed by the norms named above expires, unless it is necessary to continue to save the data in order to conclude or perform a contract.

 

4 Provision of the website and creation of logfiles

4.1.  Description and scope of the data processing

Each time our Internet site is accessed, our system automatically records data and information from the computer system of the accessing device.
During this process, the following data is gathered:
(1)    Information concerning the browser type and version used
(2)    The operating system of the user
(3)    The Internet service provider of the user
(4)    The IP address of the user
(5)    The date and time of the access
(6)    Websites from which the system of the user is redirected to our Internet site
(7)    Websites which are accessed by the system of the user via our website
The logfiles contain IP addresses or other data which enable assignment to a user. For example, this could be the case if the link to the website from which the user is redirected to the Internet site or the link to the website to which the user proceeds contain personal data.
The data will also be saved in the logfiles of our system. This data is not saved together with other personal data of the user.
4.2.   Legal basis for the data processing
The legal basis for the temporary saving of the data and logfiles is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law.
4.3.   Purpose of the data processing
The saving in logfiles takes place in order to ensure the functionality of the website. In addition, the data serves the purpose of allowing us to optimise the website and to ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context.
These purposes also represent our legitimate interest in data processing in accordance with § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law.
4.4.   Duration of the saving
The data is saved in logfiles for seven days. It is possible to save data beyond the period stated above. In such a case, the IP addresses of the user will be deleted or disguised, so that it is no longer possible to assign these to the accessing client.
4.5.   Right of objection and correction
The recording of the data in order to provide the website and the saving of the data in logfiles is absolutely necessary in order to operate the Internet site. Therefore, the user does not have a right to object.

 

5. Use of cookies

5.1. Description and scope of the data processing
In the course of your visit to our website, we use cookies. These are small text files which are deposited on your computer. In order to provide you with an optimal service, we use both “permanent cookies” and "session cookies”.
The user data gathered by the technically necessary cookies is not used in order to create user profiles.
5.2. Legal basis for the data processing
The legal basis for the processing of personal data using technically necessary cookies is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law.

5.3. Purpose of the data processing
The purpose of the data which is saved in permanent cookies is to enable you to use our Internet site in as comfortable a manner as possible, also beyond the current visit, and the data is only used by us for this purpose. The data saved in session cookies is only valid for your current visit to our Internet sites and the purpose of this is to enable you to use our services without restriction and to enable you to use our Internet site in as comfortable a manner as possible. Certain functions of our website cannot be provided without the use of cookies. Should you not wish to allow session or permanent cookies, you can do this by de-activating cookies in your browser (details concerning the process can be found in the help function in the menu list of your browser).

 

6. Newsletter

6.1.    Description and scope of the data processing
The newsletter is sent following registration by the user on the website: https://www.johanniter.de/spenden-stiften/startseite/service-kontakt/newsletter-und-stifterbrief-wir-informieren-sie/ und http://www.johanniter.de/die-johanniter/johanniter-unfall-hilfe/home/news/newsletter/subscribe-to-our-newsletter/
It is possible to subscribe to a free-of-charge newsletter on our website. When registering for the newsletter, the data from the entry mask will be transmitted to us.
During the registration process, the following data is gathered:
(1)    IP address of the accessing computer
(2)    Date and time of the registration
(3)    Surname, first name, title and email address
The data is only used for sending the newsletter.
6.2.    Legal basis for the data processing
The newsletter is sent following registration by the user on the sites named in Number 6.1
The legal basis for the processing of the data following registration for the newsletter by the user is § 6 Number 2 of the EKD Data Protection Law, when consent is present on the part of the user.
6.3.    Purpose of the data processing
The purpose of the gathering of the email address of the user is to deliver the newsletter.
The newsletter is sent following registration by the user on the sites named in Number 6.1
The purpose of the gathering of other personal data during the registration process is to prevent misuse of the services or of the email address which is used.

6.4.    Duration of the saving
The data is deleted, once it is no longer required to attain the purpose for which it was gathered. The email address of the user will therefore be saved for as long as the newsletter subscription is active.
The other personal data which is gathered during the registration process is generally deleted after a period of seven days.

6.5.    Right of objection and correction
The newsletter subscription can be terminated by the user concerned at any time. For this purpose, a relevant link is contained in each newsletter.
By means of this, it is possible to revoke the consent to the saving of the personal data which is gathered during the registration process.

 

7. Online booking for first aid courses

7.1.    Description and scope of the data processing
On our Internet sitehttp://www.johanniter.de/kurse/, we provide our users with the option of registering for a first aid course by providing personal data. During this process, the data is entered into an entry mask, transmitted to us and saved. The data is not passed on to any third parties. During the registration process, the following data is gathered:
(1) The IP address of the user
(2) Date and time of the registration
(3) Surname and first name
(4) Date of birth
(5) Road, postcode, town or city
(6) Email address
(7) Telephone number (optional)

 

7.2.    Legal basis for the data processing
The legal basis for the processing of the data is § 6 Number 5 of the EKD Data Protection Law.

7.3.    Purpose of the data processing
The data gathering and processing is necessary in order to fulfil a contract with the user or to perform pre-contractual measures.

7.4.    Duration of the saving
The data is deleted, once it is no longer required to attain the purpose for which it was gathered.

7.5.    Right of objection and correction
Should the data be necessary in order to fulfil a contract or to perform pre-contractual measures, it is only possible to prematurely delete the data if contractual or statutory obligations do not prevent this.

 

8. Online home emergency call gift voucher

8.1.    Description and scope of the data processing
On our Internet sitehttps://www.johanniter.de/dienstleistungen/notrufsysteme/hausnotruf/hier-bekommen-sie-den-hausnotruf/geschenkpaket-online-bestellen/, we provide our users with the option of purchasing a gift voucher for emergency home calls by Johanniter by providing personal data. During this process, the data is entered into an entry mask, transmitted to us and saved. The data is not passed on for advertising purposes. During the order process, the following data is gathered:
(1) The IP address of the user
(2) Date and time of the registration
(3) Surname, first name and title
(4) Company name
(5) Road, postcode, town or city
(6) Email address
(7) Telephone number (8) Payment method

In the course of the registration process, the consent of the user to the processing of the said data is obtained.

8.2.    Legal basis for the data processing
The legal basis for the processing of the data is § 6 Number 5 of the EKD Data Protection Law.

8.3.    Purpose of the data processing
The data gathering and processing is necessary in order to fulfil a contract with the user or to perform pre-contractual measures. We gather personal data, should you provide us with this voluntarily in the course of your order. The entry form states which data is gathered. Your data is transmitted to us via a secure encrypted connection. For this purpose, we use the RapidSSl CA security procedure of Geotrust (256 bit). We use the data disclosed by you in order to perform the contract and process your queries. Once the contract has been fully performed, your data is blocked from further use and deleted following the expiry of the retention periods under tax laws and commercial law, unless you have expressly consented to the further use of your data or unless continued use of the data is permitted by law. You data will be treated confidentially in accordance with the applicable data protection law provisions and will not be passed on to third parties, either for commercial or non-commercial purposes.
In order to handle payments, we pass the necessary payment data in this respect on to the bank involved in handling the transaction and, if applicable to payment providers engaged by us, as well as to the payment service selected by you in the order process (for example PayPal).

8.4.    Duration of the saving
The data is deleted, once it is no longer required to attain the purpose for which it was gathered.

8.5.    Right of objection and correction
Should the data be necessary in order to fulfil a contract or to perform pre-contractual measures, it is only possible to prematurely delete the data if contractual or statutory obligations do not prevent this.

 

9. Online donation and sponsor membership

9.1.    Description and scope of the data processing
On our Internet sitehttps://www.johanniter.de/index.php?id=55059 , we provide our users with the option of donating to Johanniter by providing personal data. On our Internet site https://www.johanniter.de/spenden-stiften/startseite/foerdermitglied-werden/foerdermitgliedschaft-online-anmeldung/, we provide the option of becoming a sponsoring member of Johanniter-Unfall-Hilfe e.V. During this process, the data is entered into an entry mask, transmitted to us and saved. The data is not passed on for advertising purposes. During the donation process, the following data is gathered:
(1) The IP address of the user
(2) Date and time of the registration
(3) Surname, first name and title
(4) Company name
(5) Road, postcode, town or city, country
(6) Email address
(7) Telephone number
(8) Payment method
(9) Account holder
(10) IBAN
(11) BIC

Information concerning the further data processing can be found here.

9.2.    Legal basis for the data processing
The legal basis for the processing of the data is § 6 Number 5 of the EKD Data Protection Law.

9.3.    Purpose of the data processing
The gathering of the data of the user is necessary in order to accept the online donation or sponsor membership of the user.

9.4.    Duration of the saving
The data is deleted, once it is no longer required to attain the purpose for which it was gathered.

9.5.    Right of objection and correction
Should the data be necessary in order to fulfil the purpose, it is only possible to prematurely delete the data if contractual or statutory obligations do not prevent this.

 

10. Online application

10.1.    Description and scope of the data processing
On our Internet sitehttp://www.johanniter.de/nc/karriere/stellenangebote/, we provide our users with the option of applying for jobs online by providing personal data. During this process, the data is entered into an entry mask, transmitted to us and saved. The data is not passed on to any third parties. During the application process, the following data is gathered:
(1) The IP address of the user
(2) Date and time
(3) Surname, first name and title
(4) Road, postcode, town or city
(5) Email address
(6) Telephone number
(7) PDF attachment possible

10.2.    Legal basis for the data processing
The legal basis for the processing of the data is § 49 Paragraph 1 of the EKD Data Protection Law where consent is present on the part of the user.

10.3.    Purpose of the data processing
The purpose of the data processing is the carrying out of the application process.

10.4.    Duration of the saving
We save your personal data for as long as is necessary in order to reach a decision concerning your application. If an employment relationship is not concluded between you and us, we may also store data beyond this time, if it is necessary for defence against possible legal claims. The application documents are deleted six months after notification of the rejection decision, if longer storage is not required due to legal disputes.

10.5.    Right of objection and correction
Should the data be necessary in order to carry out the application process, it is only possible to delete the data prematurely if statutory obligations do not prevent this.

 

11. Speculative applications

Alongside applying for a specific post, it is also possible to send a speculative application to the Johanniter companies. Via the following link, you can find a list of all Johanniter companies who gather, process and use your data in order to carry out the application process: overview link 

11.1    Handling of the processing of personal data
In the course of the online application, we request the following data from you:

  • Title
  • First name
  • Surname
  • E-mail address
  • Telephone number 
  • Area of work
  • German State in which you are employed
  • Retention period of the application documents
  • Comments
  • Attachment upload for the application documents

11.2    Legal basis for the data processing
The legal basis for the data processing is §49 Paragraph 1 of the EKD Data Protection Law.

11.3    Purpose of the data processing
The purpose of the data processing is the carrying out of the application process.

11.4    Duration of the saving
Your data is deleted after 3 or 6 months, depending on the retention period you have selected. This does not apply should statutory provisions prevent the deletion, should continued saving be necessary for the provision of proof or should you have agreed to longer saving. Should a contract be concluded following your application, your data can be saved and used for normal organisational and administrative processes in compliance with the applicable statutory rules. It goes without saying that you have the right to withdraw your application with the security link provided and to revoke any consent to longer saving of your data which you have issued with effect for the future.

11.5    Right of objection and correction
Should the user get in touch with us by email, he or she can object to the saving of his or her personal data at any time. In such a case, the data which the user has provided in the course of the application process will be deleted.

 

12. Contact form and getting in touch by email

12.1.    Description and scope of the data processing
Our Internet site contains several contact forms which can be used to get in touch with us electronically. Should a user make use of this option, the date entered in the entry mask will be transmitted to us and saved. This data includes:
(1) The IP address of the user
(2) Date and time of the registration
(3) Surname, first name and title
(4) Road, postcode, town or city
(5) Telephone number

For the processing, your consent will be obtained in the course of the sending process and reference will be made to this data protection declaration.
Your data will not be passed on to third parties during this process. The data will only be used in order to process the conversation.
12.2.    Legal basis for the data processing
The legal basis for the processing of the data is in the course of use of a contact form § 6 Number 2 of the EKD Data Protection Law where consent is present on the part of the user.
The legal basis for the processing of the data which is transferred when sending an email is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law. Should the intention of the email contact be the conclusion of a contract, the additional legal basis for the processing is § 6 Number 5 of the EKT Data Protection Law.
12.3.    Purpose of the data processing
The sole purpose of the data processing of the personal data in the entry mask is to enable us to process the contact initiation. In case of contact by email, this also includes the necessary legitimate interest in the processing of the data.
The purpose of the other personal data which is processed during the sending procedure is to prevent misuse of the contact form and therefore ensure the security of our IT systems.
12.4.    Duration of the saving
The data is deleted, once it is no longer required to attain the purpose for which it was gathered. For the personal data from the entry mask of the contact form and personal data which was sent by email, this is then the case when the respective conversation with the user has come to an end. The conversation has come to an end when the circumstances indicate that the respective matter has been fully clarified.
The other personal data which is gathered during the sending process is deleted after a maximum period of seven days.
12.5.    Right of objection and correction
At any time, the user has the option or revoking his or her consent to the processing of the personal data.
Should the user get in touch with us by email, he or she can object to the saving of his or her personal data at any time. In such a case, the conversation cannot be continued. In such a case, all personal data which was saved in connection with the contact initiation will be deleted.

 

13. Web analysis by means of Matomo (previously PIWIK)

13.1.    Scope of the processing of personal data
On our website, we use the open source software tool Matomo (previously PIWIK) in order to analyse the surfing behaviour of our users. The software sets a cookie on the computer of the user (see above in relation to cookies). Should individual sites of our website be accessed, the following data will be saved:
(1)    The IP address of the accessing system of the user
(2)    The website accessed
(3)    The website from which the user was redirected to the accessed website (referrer)
(4)    The sub-sites from which the site was access
(5)    The duration of the visit to the website
(6)    The frequency of the website access
During this process, the software only runs on the servers of our website. The personal data of the user is only saved there. The data is not passed on to any third parties.

The software is set in such a way that the IP addresses are not saved in full, rather 2 bytes of the address are masked (for example:  192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the accessing computer.

13.2.    Legal basis for the processing of personal data
The legal basis for the processing of the personal data of the user is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law.
13.3.    Purpose of the data processing
The processing of the personal data of the users enables us to analyse their surfing behaviour. By evaluating the data which is obtained, we are able to compile information concerning the use of the individual components of our website. This helps us to constantly improve our website and its user friendliness. These purposes also represent our legitimate interest in data processing in accordance with § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law. By means of the anonymisation of the IP address, the interest of the user in the protection of his or her personal data is sufficiently safeguarded.
13.4.    Duration of the saving
The data is deleted, once it is no longer required for our recording purposes.
13.5.    Right of objection and correction
Cookies are saved on the computer of the user and transmitted from there to our site. Therefore, you as a user also have full control over the use of cookies. By altering the settings in your Internet browser, you can de-activate or restrict the transmission of cookies. Cookies which have already been saved can be deleted at any time. This can also be done anonymously. Should cookies be de-activated for our website, it is possible that it is no longer possible to fully use all of the functions of the website.
On our website, we offer our users the option of opting out from the analysis process.

Piwik opt out for

Piwik data protection options for all websites under the johanniter.de domain

Opt out for Piwik JUH

Piwik data protection options for all website areas of Johanniter-Unfall-Hilfe

Opt out for Piwik JUH donation shop

Piwik data protection options for all website areas of johanniter-spendenshop.de

 In this way, an additional cookie will be set on your system which signals to our system that the data of the user should not be saved. Should the user delete the relevant cookie from his or her system in the meantime, the opt-out cookie must be set once again.

More detailed information concerning the private sphere settings can be found via the following link: matomo.org/docs/privacy/.

 

14. Google AdWords and conversion tracking

14.1. Description and scope of the data processing
We have integrated Google AdWords into this website. Google AdWords is an Internet advertising service which permits website operators to place adverts both in the search engine results of Google and in the Google advertising network. Google AdWords allows an advertising provider to set certain key words in advance, by means of which an advert is only then displayed in the search engine results of Google if the user accesses a search result in the search engine which contains a relevant key word. In the Google advertising network, the adverts are broken down into topic relevant Internet sites by means of an automatic algorithm and taking the previously set key words into account.
The operating company of the Google AdWords service is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is the promotion of our Internet site by integrating relevant advertising which may be of interest in the Internet sites of third parties and in the search results of the Google search engine.
Should a data subject access our Internet site via a Google advert, a so-called conversion cookie is set on his or her IT system by Google. The nature of cookies is explained above. A conversion cookie ceases to be valid after thirty days and is not used to identify the data subject. Provided that the cookie has not yet expired, the conversion cookie allows tracing of whether certain sub-pages, such as the shopping basket of an online shop, were accessed on our Internet site. By means of the conversion cookie, both ourselves and Google can see whether a data subject who accessed our Internet site via an AdWords advert generated any sales, ie whether he or she completed or terminated a purchase.
The data and information gathered by the use of the conversion cookie are used by Google in order to compile visitor statistics for our Internet site. These visitor statistics are then used by us in turn to calculate the total number of users who were passed on to us via AdWords advertisements, ie to determine the success or lack of success of the respective AdWords advertisement and to optimise our AdWords advertisements in the future. Neither our company nor other advertising customers of Google receive information from Google which allows the data subject to be identified.
The data subject can prevent the setting of cookies at any time by setting the Internet browser used accordingly, as stated in 5.3 above and can therefore permanently object to the setting of cookies. Setting the Internet browser used in such a way would also prevent Google from placing a conversion cookie on the IT system of the data subject. In addition, a cookie which has been set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
In addition, the data subject has the option of objecting to the advertising provided by Google which is tailored to interests. In order to do so, the data subject needs to access the link www.google.de/settings/ads from each Internet browser he or she is using and carry out the requested settings there.
Further information and the applicable data protection provisions of Google can be accessed at www.google.de/intl/de/policies/privacy/
However, ourselves and Google continue to receive the statistical information concerning how many users visited this site and when. Should you also not wish to be included in these statistics, you can prevent this with the assistance of additional programs for your browser (for example with the Ghostery add-on).

 

14.2. Legal basis and purpose of the data processing

Legal basis for the data processing
The legal basis for use of Google AdWords and conversion tracking is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise its advertising offers and adverts. When accessing our website, the user is informed of the use of cookies for analysis purposes by means of an info banner and is referred to this data protection declaration.

 

15. Bing Adwords and conversion tracking

15.1. Description and scope of the data processing
Our online serves also use conversion tracking of Microsoft Corporation, (One Microsoft Way, Redmond, WA 98052-6399, USA). During this process, a cookie is set on your computer by Microsoft Bing Ads, should you have accessed our website via one of its adverts. By means of this, Microsoft Bing and ourselves can recognise that somebody clicked on an advert, was redirected to our website and reached a conversion site. During this process, we are only informed of the total number of users who have clicked on a Bing advert and were then redirected to the conversion site. No personal information concerning the identity of the user is disclosed. Should you not wish to participate in the tracking process, you can reject the setting of cookies which is necessary for this process, for example via a browser setting which generally de-activates the automatic setting of cookies. Further information concerning data protection and the deployed cookies on the part of Microsoft Bing can be found on the website of Microsoft.

15.2. Legal basis and purpose of the data processing

Legal basis for the data processing
The legal basis for use of Google AdWords and conversion tracking is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise its advertising offers and adverts. When accessing our website, the user is informed of the use of cookies for analysis purposes by means of an info banner and is referred to this data protection declaration.

 

16. Conversion measuring with the visitor action pixel of Facebook

16.1. Description and scope of the data processing
Our Internet presence uses the “visitor action pixel” of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). With the assistance of this, we can trace the actions of users who have viewed or clicked on a Facebook advert. By means of this, we can record the effectiveness of the Facebook adverts for statistical and market research purposes. The data which is recorded in this way is anonymous to us, ie we cannot see the personal data of individual users. However, this data is saved and processed by Facebook and we are providing you with information in accordance with the state of our knowledge. Facebook can connect this data with your Facebook account and also use it for its own advertising purposes in accordance with the data usage policy of Facebook https://www.facebook.com/about/privacy/ . You can enable Facebook and its partners to place adverts on Facebook and also outside of the site. Furthermore, Facebook can save a cookie on your computer for these purposes.
Should you not agree to the gathering of your data, you can object to the targeting by Facebook at any time: https://www.facebook.com/ads/website_custom_audiences

Should you not hold a Facebook account, you can de-activate use-based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance http://www.youronlinechoices.com/de/praferenzmanagement/
16.2. Legal basis and purpose of the data processing
The legal basis for the use of the visitor action pixel of Facebook is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise its advertising offers and adverts. When accessing our website, the user is informed of the use of cookies for analysis purposes by means of an info banner and is referred to this data protection declaration. By means of your use of our website, you are declaring your agreement to the processing by Facebook of the data which is gathered in relation to you, the manner of data processing referred to above and the named purpose.

 

17. Integration of A/B tests with AB Tasty

17.1. Description and scope of the data processing
In order to provide you with a better service, whilst you visit our website, we carry out A/B tests which are undertaken with the assistance of the software solution of AB Tasty (AB Tasty GmbH, Richmodstraße 6, 50667 Cologne, Germany). In case of A/B tests, two different versions of a website are played back. By means of these, some users have version A displayed, other users are shown version B of the website. As a result, it should be determined which version is better received by the website users, so that the whole website can be optimised piece by piece. The data recorded by AB Tasty is not of a personal nature. Should you not wish to participate in these tests, you can de-activate this function by clicking on the following link: https://www.johanniter.de/#abtastyoptout=1. Note: the click on the link with the opening of the relevant page suffices. These are automatically excluded from the A/B tests. Further information concerning the opt-out can be found at:

https://support.abtasty.com/hc/en-us/articles/200238607-How-can-I-avoid-being-assigned-to-the-tests-optout-

17.2. Legal basis and purpose of the data processing


The legal basis for the use of the A/B tests of AB Tasty is § 6 Number 4 and § 6 Number 8 of the EKD Data Protection Law. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise its advertising offers and adverts. When accessing our website, the user is informed of the use of cookies for analysis purposes by means of an info banner and is referred to this data protection declaration. By means of your use of our website, you are declaring your agreement to the processing by AB Tasty of the data which is gathered in relation to you, the manner of data processing referred to above and the named purpose.

 

18. Integration of third party services and content

It can be the case that within this online service, third party content such as videos of YouTube and Facebook, map materials of Google Maps, RRS feeds or graphics of other websites are integrated. This always requires that the providers of this content (hereinafter referred to as “third party providers”) record the IP address of the users. Since without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary in order to display this content. We endeavour to only use such content whose respective providers only use the IP address in order to deliver the content. However, we have no control over whether the third party providers save the IP address, for example for statistical purposes, or not. Should we be aware of the position, we will inform the users of such.
 

19. Rights of the data subject

Should personal data relating to you be processed, you are a data subject in accordance with The EKD Data Protection Law and you have the following rights in relation to the Johanniter companies:
19.1.    Right of information
You can request confirmation from the Johanniter companies as to whether we process personal data relating to you or not.
Should such processing be present, you can request the following information from the controller:

  1. The purposes for which the personal data is processed
  2. The categories of personal data which are processed
  3. The recipients and categories of recipients to whom personal data relating to you has been disclosed or will be disclosed in the future
  4. The planned duration of saving of the personal data relating to you or, should it not be possible to provide concrete information in this regard, the criteria for determining the duration of the saving
  5. The existence of a right of rectification or erasure of the personal data relating to you, a right to have the processing by the controller restricted or a right of objection against this processing
  6. The existence of a right to complain to a supervisory authority
  7. All available information concerning the origin of the personal data, should the personal data not be obtained from the data subject.

19.2.    Right of rectification
You have the right of rectification and/or completion via a vis the Johanniter companies, should the processed personal data relating to you be incorrect or incomplete. The Johanniter companies must carry out the rectification immediately.
19.3.    Right to have the processing restricted
Subject to the requirements below, you can request that the processing of the personal data relating to you be restricted:

  1. Should you dispute the correctness of the personal data relating to you for a period of time which enables the controller to check the correctness of the personal data.
  2. Should the processing be unlawful and you reject the deletion of the personal data and instead request the restriction of use of the personal data instead.
  3. Should the controller no longer require the personal data for the processing purposes, however, you require this in order to assert, exercise or defend legal claims.
  4. Or should you have raised an objection against the processing in accordance with § 22 of the EKD Data Protection Law and it is not yet clear whether the legitimate reasons of the controller outweigh yours.

If the processing of the personal data relating to you has been restricted this personal data - apart from its storage - may only be processed with your consent or for the assertion, exercising or defence of legal claims, or to protect the rights of other natural persons or legal persons or for reasons of an important public interest of the European Union or a Member State.
Should the restriction of the processing be restricted in accordance with the requirements above, you will be informed by the controller before the restriction is lifted.
19.4.    Right of erasure
19.4.1  Deletion obligation
You can request that the personal data relating to you be deleted by us immediately and the controller is responsible to immediately delete the said data, provided that one of the following reasons is present:

  1. The personal data relating to you is no longer necessary for the purposes for which it was gathered or otherwise processed.
  2. You revoke your consent on which the processing was based in accordance with § 6 Number 2 or § 13 Paragraph 1 Number 1 of the EKD Data Protection Law and there is no other legal basis for the processing.
  3. You file an objection against the processing in accordance with § 25 Paragraph 1 of the EKD Data Protection Law and no overriding legitimate interests exist for the processing. Or you raise an objection against the processing for the purpose of direct advertising.
  4. The personal data relating to you has been processed unlawfully.
  5. The deletion of the personal data relating to you is required to fulfil a legal obligation under European Union law or the law of the Member States to which the controller is subject.
  6. The personal data relating to you was gathered in relation to services offered by the information company in accordance with § 12 of the EKD Data Protection Law.

19.4.2 Information to third parties
Should the controller have made the personal data relating to you public and should it be obliged to delete this in accordance with § 21 of the EKD Data Protection Law, then taking the available technology and implementation costs into account, it will take reasonable measures, also of a technical nature, in order to inform the controllers responsible for the data processing that you as a data subject have requested from them the deletion of all links to this personal data or the deletion of all copies or reproductions of this personal data.
19.4.3 Exceptions
The right of erasure does not apply, should the processing be necessary for the following purposes:

  1. In order to claim the right of freedom of expression and information
  2. In order to fulfil a legal obligation which is required by the law of the European Union or the Member States to which the controller is subject, to fulfil a task which is in the public interest or in the course of the exercising of public powers which have been assigned to the controller
  3. For reasons in the public interest in the area of public health in accordance with § 13 Paragraph 2 Number 8 and Number 9 of the EKD Data Protection Law and § 13 Paragraph 3 of the EKD Data Protection Law
  4. In order to assert, exercise or defend legal claims.

19.5.    Right of notification
Should you have claimed the right of rectification, erasure or restriction of processing vis a vis the controller, it is obliged to notify all recipients to whom the personal data relating to you was disclosed of the said rectification, erasure or restriction of the processing, unless this is shown to be impossible or only feasible with disproportionate expense.
You have the right to be informed of the identity of these recipients by the controller.
19.6.    Right of data portability

You have the right to receive the personal data relating to you which you have provided to the controller in a structured, up-to-date and machine readable format. In addition, you have the right to transfer this data to another controller without hindrance on the part of the controller to whom the personal data was provided, subject to the following requirements:

  1. The processing takes place on the basis of consent in accordance with § 13 paragraph 2 Number 1 or Number 8 of the EKD Data Protection Law or on the basis of a contract in accordance with § 6 Number 5 of the EKD Data Protection Law and
  2. the processing takes place with the assistance of automated procedures.

When exercising this right, you are also entitled to have the personal data relating to you transferred from one controller to another controller directly, provided that this is technically possible. Freedoms and rights of other persons may not be impaired as a result.
The right of data portability does not apply to processing of personal data which is necessary to fulfil a task which is in the public interest or takes place in the course of exercising of public powers which were assigned to the controller.
19.7.    Right of objection
For reasons connected to your specific situation, you have the right to raise an objection at any time against the processing of the personal data relating to you; this also applies to any profiling based on these provisions.
The controller will then no longer process your personal data, unless it can provide evidence of mandatory, legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or if the purpose of the processing is the assertion, exercising or defence of legal claims.
Should the personal data relating to you be processed in order to carry out direct advertising, you have the right to raise an objection at any time against the processing of the personal data relating to you for the purpose of such advertising; this also applies to the profiling, should it be connected to such direct advertising.
Should you object to the processing for the purposes of direct advertising, the personal data relating to you will no longer be processed for these purposes.
19.8.    Right to revoke the declaration of consent under data protection laws
You have the right to revoke your declaration of consent under data protection laws at any time. The revocation of consent will not affect the lawfulness of the processing which took place prior to this time.
19.9.    Automated decision making in individual cases, including profiling
You have the right not to be subject to a decision which is based exclusively on automated processing, including profiling, should such a decision have legal effects or significantly impact on you in a similar manner. This does not apply if the decision:

  1. Is necessary in order to conclude or fulfil a contract between yourself and the controller
  2. Is lawful under legal regulations of the European Union or the EU Member States to which the controller is subject and the said legal regulations contain reasonable measures in order to safeguard your rights and freedoms and your legitimate interests
  3. Or takes place with your express consent.
  4. However, these decisions may not be based on specific categories of personal data in accordance with § 13 Paragraph 1 of the EKD Data Protection Law, unless § 13 Paragraph 2 Number 1 or Number 7 of the EKD Data Protection Law applies and reasonable measures have been taken in order to protect your rights and freedoms.

In relation to the cases named in (1) and (3), the controller shall take reasonable measures which safeguard the rights and freedoms, as well as your legitimate interests, whereby these contain as a minimum the right to have a person on the part of the controller intervene, to set out one’s own opinion and to contest a decision.
19.10.    Right to complain to a supervisory authority
Regardless of other legal remedies under administrative laws or before a court, you have the right to complain to the supervisory authority listed below, should you be of the opinion that the processing of the personal data relating to you breaches the EKD Data Protection Law.

Data Protection Officer of the
Protestant Church in Berlin
Berlin Office
Invalidenstraße 29
10115 Berlin
Tel. +49 (0)30-2005157-0
Fax. +49 (0)30-200515720
ost@datenschutz.ekd.de

The supervisory authority will inform you of the status and outcome of the complaint, including the option of legal remedies in accordance with § 47 of the EKD Data Protection Law.

 

20. Reservation of amendments

We reserve the right to amend this data protection declaration at any time in compliance with the respectively applicable data protection provisions. In case of any amendment, we will inform you of such. You have the right to reject these amendments by contacting info@johanniter.de


Date: May 2018