We take the protection of your personal data very seriously. We would like to inform you in the following comprehensively and in detail about what we collect your personal data for, what we do with it, to whom we pass on this data if necessary and where and how long we store your data.
In addition, you have numerous rights as a data subject, which we would also like to inform you about. We provide this information to you on the basis of Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as the GDPR.
We are the entities listed below. We operate the data processing jointly and are your contact persons in all matters of data protection in accordance with Art. 26 GDPR as joint controllers.
Campus for Christ e.V.
Am Unteren Rain 2
Responsible persons at CFC:
Julia SpankaFlorian Stielper
Global Aid Network (GAiN) gGmbH
Am Unteren Rain 2
Responsible persons at GAiN:
Phone +49 (0)641 - 975 18-0
Our data protection officer, Mr Marc Dauenhauer (contact at datenschutz(at)campus-d.de), is available to answer any questions you may have regarding the processing of your data.
We process your personal data on the basis of the legal requirements of the GDPR and the German Federal Data Protection Act (BDSG) in its current version. In detail, we process your personal data:
We would like to point out that we consider ourselves to be a religiously oriented organization within the meaning of Article 9 (2) (d) of the GDPR. Therefore, we are also permitted to process special categories of personal data such as religious or ideological beliefs, insofar as these relate to our members or persons who are in regular contact with us in the course of our activities. We treat this data as particularly confidential and do not disclose it to the outside world without your explicit consent.
As a matter of principle, we do not pass on data to third parties unless,
We obtain your consent to the processing of personal data - if required - electronically or in writing. We secure electronic consent by means of a corresponding double opt-in procedure and record your consent.
Once you have given your consent, you can revoke it at any time with effect for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this. You can address your revocation to one of the offices mentioned under 2.
If the processing of your personal data is based on your consent, we will terminate this as a result of your revocation. This may also mean that services obtained from you (e.g. newsletter) can no longer be provided.
With our offers, we also address children and young people, among others. We therefore ensure, within the scope of technical and organisational possibilities, that any consent given to the processing of a child's personal data is in accordance with Article 8 of the GDPR.
As a matter of principle, we process your data within the EU or the European Economic Area. An exception is the use of IT systems of partners and service providers that are operated in the USA or other third countries. In these cases, we ensure that appropriate safeguards are in place to protect your personal data before it is transferred. The processing of your data in the USA is carried out in accordance with Art. 46(2)(c) and (d) GDPR on the basis of appropriate contracts using approved standard contractual clauses of the EU Commission. We will be happy to provide you with more detailed information on this upon request.
If you use any online form on our websites to contact us, your personal data will be forwarded to us by e-mail. We ask you not to transmit any confidential information in this way, as we cannot ensure the protection of this information during the transmission of unencrypted e-mails.
We store your personal data only as long as it is necessary to fulfil its processing purpose or due to legal retention obligations. After that, the personal data will be deleted.
Notwithstanding the foregoing, we will not delete your contact information until after four (4) years in which you have not contacted us, subscribed to our newsletter, participated in any of our events, or taken advantage of any of our other offers.
Of course, your rights to deletion, blocking, restriction of processing or the right to be forgotten remain unaffected.
Data subjects have the right to request information as to whether or not personal data relating to them is being processed. If personal data is processed by our company, there is a right to information about:
You also have the right to be informed whether your personal data is the subject of an automated decision within the meaning of Article 22 of the GDPR and, if this is the case, which decision-making criteria form the basis of such an automated decision (logic) and what effects and scope the automated decision may have for you.
If personal data is transferred to a third country outside the scope of the GDPR, you have the right to be informed whether and, if so, on the basis of which guarantees an adequate level of protection within the meaning of Articles 45, 46 of the GDPR is ensured at the data recipient in the third country.
You have the right to request a copy of your personal data. We generally provide copies of data in electronic form, unless you have specified otherwise. The first copy is free of charge, for further copies a reasonable fee may be charged. The provision is subject to the rights and freedoms of other persons who may be affected by the transmission of the data copy.
You have the right to demand that we correct your data if it is incorrect, inaccurate and/or incomplete; the right to correction includes the right to completion through supplementary declarations or notifications. A correction and/or completion must be made immediately - i.e. without culpable hesitation.
You have the right to request that we delete your personal data, insofar as
A right to the deletion of personal data does not exist, as far as
The deletion must take place immediately - i.e. without culpable delay. If personal data has been made public by us (e.g. on the Internet), we must ensure, as far as is technically possible and reasonable, that third party data processors are also informed of the deletion request, including the deletion of links, copies and/or replications.
Personal data whose processing has been restricted at your request may - subject to retention - only be processed (i) with your consent, (ii) to assert, exercise or defend legal claims, (iii) to protect the rights of other natural or legal persons, or (iv) for reasons of important public interest. In the event that a restriction on processing is lifted, you will be informed in advance.
You have the right - subject to the following regulations - to demand the return of the data concerning you in a common electronic, machine-readable data format. The right to data transfer includes the right to transfer the data to another data controller; upon request, we will therefore - as far as technically possible - transfer data directly to a data controller named by you or yet to be named. The right to data transmission only exists for data provided by you and requires that the processing is based on consent or for the performance of a contract and is carried out with the aid of automated processes. The right to data transfer according to Art. 20 GDPR does not affect the right to data deletion according to Art. 17 GDPR. The data transfer is subject to the rights and freedoms of other persons whose rights may be affected by the data transfer.
In the case of processing of personal data for the performance of tasks in the public interest (Art. 6 para. 1 lit e GDPR) or for the performance of legitimate interests (Art. 6 para. 1 lit f GDPR), you may object to the processing of personal data relating to you at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless,
You can object to the use of your data for the purpose of direct advertising at any time with effect for the future; this also applies to profiling, insofar as it is connected with direct advertising. In the event of an objection, we must refrain from any further processing of your data for the purpose of direct advertising.
Decisions which have legal consequences for you or which significantly affect you must not be based solely on automated processing of personal data - including profiling. This does not apply if the automated decision
Decisions based exclusively on the automated processing of special categories of personal data are in principle inadmissible unless Article 22 (4) in conjunction with Article 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of your person.
In the event of complaints, you can contact the competent supervisory authority of the Union or the member states at any time. For our company, the supervisory authority mentioned in section II is responsible.
Below we have detailed the various purposes for which we collect and process personal data, what data we process and how we handle personal data or to whom we may disclose it.
Our legitimate interest is that as many people as possible learn about us and support us and our projects. Therefore, we process your contact details if you have either already contacted us in some way or we think you might be interested in us and our work. Our work is predominantly funded by donations. Therefore, it is equally important for us to keep in touch with existing and potential donors and to inform them regularly about our work.
In order to contact you and inform you according to your interests, we process the following data:
We have received this data from you personally or from persons in your personal environment.
According to the basic rules under 3.6
Any additional personal data that you have entrusted to the Campus employee with whom you are in personal contact will remain confidential and will not be stored or processed by us.
If you donate to us or to an aid project, we have to process your data due to legal regulations (AO) and to fulfil your donation request.
If you have given us a specific donation order, we store the following personal data:
We have received this data from you.
If you have made a donation for a specific project, your personal data will also be passed on to our project partners in the respective recipient country of your donation. If you give us a corresponding note with your donation, we will not forward your data.
In addition, we also pass on donor information to the relevant tax authorities as part of our legal obligations.
According to the general rules in 3.6
We offer numerous services. These services include:
We offer these services to you within the framework of a contractual relationship with you. We process your personal data insofar as
We pursue legitimate interests in particular in connection with the enforcement of legal claims, e.g. for payment of agreed fees for the provision of services.
We may process the following categories of data:
We have received the data from you, from our partners or from public authorities.
As a matter of principle, we only process your data within the framework of the principles listed under 3.2 and 3.4. In the context of travel events, additional data transfers to authorities in third countries (e.g. USA) may be necessary. You will be informed separately about this in connection with travel events.
In accordance with the principles set out in 3.6
If you would like to work with us, either as a permanent employee or as a volunteer, we look forward to receiving your application. In doing so, we process the personal data that you have provided to us as part of the application, as well as the data that accrues in the course of the application process. These are pre-contractual measures.
We assume that by sending us your data, you have given us consent to process it as part of the application process. If we accept your application, we will continue to store your data as part of your cooperation in accordance with Art 6 (1) lit b GDPR in conjunction with Section 26 BDSG 2018.
If we reject your application, we will store the records of the application process for a maximum of a further 6 months in order to protect our legitimate interests.
We process the following data in the application process:
We will delete this data 6 months after rejecting your application, with the exception of your contact data, unless statutory retention obligations provide for longer storage periods. We will also store your contact data beyond this period within the scope of the purposes set out in 4.1.
We offer numerous online services for our members and interested parties. In addition to our website, this also includes an online shop. In order to ensure and further optimize the security, functionality and user-friendliness of our online offers, we collect personal data as soon as you use one of our online offers, including mobile apps.
We regularly collect the following data:
We also use external service providers for the provision of our online offers, including mobile apps. These may also come into contact with your personal data. We select these service providers carefully and ensure that your data is protected by appropriate guarantees and technical-organisational measures. You can find more details under 3.2
This data is deleted within 7 days, unless it is exceptionally required for a longer period to protect legitimate interests. This may be necessary, for example, in the context of error correction or for the prosecution of criminal offences.
This cookie is linked to Google's DoubleClick for Publishers service. Its purpose is to do with the ad on the site, for which the owner can earn some revenue.
approx. 1 year
This cookie name is associated with Google Universal Analytics - an important update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client ID. It is included in every page request in a website and used to calculate visitor, session and campaign data for the websites analytics reports. By default, it expires after 2 years, although this can be customized by website owners.
approx. 2 years
This cookie name is associated with google Universal Analytics. This appears to be a new cookie and as of spring 2017 no information is available from google. It seems to store and update a unique value for each page visited.
approx. 12 months
approx. 12 months
approx. 12 months
approx. 12 months
Sync and corrections by n17t01
This domain is owned by Doubleclick (Google). Principal activity is: Doubleclick is Google's real-time bidding advertising exchange
approx. 1 year
This cookie is set by DoubleClick (owned by Google) to determine if the site visitor's browser supports cookies.
Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiling and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider.
If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identifying features.
In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We process your data with the help of Google Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. GDPR.
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visit, operating systems used and origin of the user. This data may be combined by Google into a profile that is assigned to the respective user or their end device.
Furthermore, Google Analytics can record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to augment the data sets it collects and employs machine learning technologies in its data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: privacy.google.com/businesses/controllerterms/mccs/ .
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=de.
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
This website uses the "demographic characteristics" function of Google Analytics in order to be able to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be attributed to any specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 2 months. For details, please see the following link: support.google.com/analytics/answer/7667196?hl=de
We use Google CDN to properly deliver the content of our website. Google CDN is a service of Google Ireland Limited, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to provide content of our online offer, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google CDN.
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer pursuant to Art. 6 para. 1 lit. f. GDPR.
We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the exact integration of services on our website
This allows us to flexibly integrate additional services to evaluate user access to our website.
The use of Google Tag Manager is based on our legitimate interests, i.e. interest in optimizing our services pursuant to Art. 6 para. 1 lit. f. GDPR.
We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. The video platform is operated by YouTube, LLC, a company of Google Inc. (see above under "Google Analytics").
These are all integrated in the so-called extended data protection mode, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned below are transmitted. When you play the videos, the third-party provider receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in section 2.1 of this declaration are transmitted. This occurs regardless of whether you are logged in to YouTube via a user account or whether no user account exists. If you are logged in to YouTube, this data is directly assigned to your user account. If you do not wish such an allocation to your user account with YouTube, you must log out before playing the video.
The third-party provider may store this data as a usage profile and use it for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation may also be carried out (also for users who are not logged in) for the provision of needs-based advertising and to inform other users of the platform about your activities on our website. You have the right to object to the creation of such user profiles, whereby you must contact the third-party provider to exercise this right of objection.
Further information on the purpose and scope of the data collection and its processing by the third-party provider, as well as your rights in this regard and setting options for protecting your privacy, can be obtained via the following
YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA
Tel: +1 / 650 253 0000
Fax: +1 / 650 253 000
Privacy overview: www.google.com/intl/de/policies
Technologies and principles including cookies: www.google.de/intl/de/policies/technologies/
This site does not use Facebook plugins.
When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page.
For more information, Facebook provides the following link: www.facebook.com/legal/terms/information_about_page_insights_data.
Legal basis: The legal basis for the aforementioned data processing is "legitimate interest" Art. 6 para. 1 p. 1 letter f) DS-GVO.
Further information on the purpose and scope of data collection and processing by the social network Facebook, as well as further information on your rights in this regard and setting options for protecting your privacy, can be found in the data protection declaration communicated below and the further information provided by this provider:
Information from the third-party provider Facebook:
1601 Willow Road, Menlo Park, California 94025, USA
or Facebook Ireland Ltd,
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;
Legal basis: The legal basis for the aforementioned data processing is Article 6 (1) sentence 1 letter f) DS-GVO.
Our legitimate interest lies in the fulfilment of advertising purposes and an increase in the range and functionality of our offer. Based on the measures and settings explained above, we also use the options available to us to ensure that data processing only takes place at the instigation of the data subject or can be prevented by the data subject.