We take the protection of your personal data very seriously. We would like to inform you in the following comprehensively and in detail about what we collect your personal data for, what we do with it, to whom we pass on this data if necessary and where and how long we store your data.
In addition, you have numerous rights as a data subject, which we would also like to inform you about. We provide this information to you on the basis of Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as the GDPR.
We are the entities listed below. We operate the data processing jointly and are your contact persons in all matters of data protection in accordance with Art. 26 GDPR as joint controllers.
Campus for Christ e.V.
Am Unteren Rain 2
Responsible persons at CFC:
Julia SpankaFlorian Stielper
Global Aid Network (GAiN) gGmbH
Am Unteren Rain 2
Responsible persons at GAiN:
Phone +49 (0)641 - 975 18-0
Our data protection officer, Mr Marc Dauenhauer (contact at datenschutz(at)campus-d.de), is available to answer any questions you may have regarding the processing of your data.
We process your personal data on the basis of the legal requirements of the GDPR and the German Federal Data Protection Act (BDSG) in its current version. In detail, we process your personal data:
We would like to point out that we consider ourselves to be a religiously oriented organization within the meaning of Article 9 (2) (d) of the GDPR. Therefore, we are also permitted to process special categories of personal data such as religious or ideological beliefs, insofar as these relate to our members or persons who are in regular contact with us in the course of our activities. We treat this data as particularly confidential and do not disclose it to the outside world without your explicit consent.
As a matter of principle, we do not pass on data to third parties unless,
We obtain your consent to the processing of personal data - if required - electronically or in writing. We secure electronic consent by means of a corresponding double opt-in procedure and record your consent.
Once you have given your consent, you can revoke it at any time with effect for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this. You can address your revocation to one of the offices mentioned under 2.
If the processing of your personal data is based on your consent, we will terminate this as a result of your revocation. This may also mean that services obtained from you (e.g. newsletter) can no longer be provided.
With our offers, we also address children and young people, among others. We therefore ensure, within the scope of technical and organisational possibilities, that any consent given to the processing of a child's personal data is in accordance with Article 8 of the GDPR.
As a matter of principle, we process your data within the EU or the European Economic Area. An exception is the use of IT systems of partners and service providers that are operated in the USA or other third countries. In these cases, we ensure that appropriate safeguards are in place to protect your personal data before it is transferred. The processing of your data in the USA is carried out in accordance with Art. 46(2)(c) and (d) GDPR on the basis of appropriate contracts using approved standard contractual clauses of the EU Commission. We will be happy to provide you with more detailed information on this upon request.
If you use any online form on our websites to contact us, your personal data will be forwarded to us by e-mail. We ask you not to transmit any confidential information in this way, as we cannot ensure the protection of this information during the transmission of unencrypted e-mails.
We store your personal data only as long as it is necessary to fulfil its processing purpose or due to legal retention obligations. After that, the personal data will be deleted.
Notwithstanding the foregoing, we will not delete your contact information until after four (4) years in which you have not contacted us, subscribed to our newsletter, participated in any of our events, or taken advantage of any of our other offers.
Of course, your rights to deletion, blocking, restriction of processing or the right to be forgotten remain unaffected.
Data subjects have the right to request information as to whether or not personal data relating to them is being processed. If personal data is processed by our company, there is a right to information about:
You also have the right to be informed whether your personal data is the subject of an automated decision within the meaning of Article 22 of the GDPR and, if this is the case, which decision-making criteria form the basis of such an automated decision (logic) and what effects and scope the automated decision may have for you.
If personal data is transferred to a third country outside the scope of the GDPR, you have the right to be informed whether and, if so, on the basis of which guarantees an adequate level of protection within the meaning of Articles 45, 46 of the GDPR is ensured at the data recipient in the third country.
You have the right to request a copy of your personal data. We generally provide copies of data in electronic form, unless you have specified otherwise. The first copy is free of charge, for further copies a reasonable fee may be charged. The provision is subject to the rights and freedoms of other persons who may be affected by the transmission of the data copy.
You have the right to demand that we correct your data if it is incorrect, inaccurate and/or incomplete; the right to correction includes the right to completion through supplementary declarations or notifications. A correction and/or completion must be made immediately - i.e. without culpable hesitation.
You have the right to request that we delete your personal data, insofar as
A right to the deletion of personal data does not exist, as far as
The deletion must take place immediately - i.e. without culpable delay. If personal data has been made public by us (e.g. on the Internet), we must ensure, as far as is technically possible and reasonable, that third party data processors are also informed of the deletion request, including the deletion of links, copies and/or replications.
Personal data whose processing has been restricted at your request may - subject to retention - only be processed (i) with your consent, (ii) to assert, exercise or defend legal claims, (iii) to protect the rights of other natural or legal persons, or (iv) for reasons of important public interest. In the event that a restriction on processing is lifted, you will be informed in advance.
You have the right - subject to the following regulations - to demand the return of the data concerning you in a common electronic, machine-readable data format. The right to data transfer includes the right to transfer the data to another data controller; upon request, we will therefore - as far as technically possible - transfer data directly to a data controller named by you or yet to be named. The right to data transmission only exists for data provided by you and requires that the processing is based on consent or for the performance of a contract and is carried out with the aid of automated processes. The right to data transfer according to Art. 20 GDPR does not affect the right to data deletion according to Art. 17 GDPR. The data transfer is subject to the rights and freedoms of other persons whose rights may be affected by the data transfer.
In the case of processing of personal data for the performance of tasks in the public interest (Art. 6 para. 1 lit e GDPR) or for the performance of legitimate interests (Art. 6 para. 1 lit f GDPR), you may object to the processing of personal data relating to you at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless,
You can object to the use of your data for the purpose of direct advertising at any time with effect for the future; this also applies to profiling, insofar as it is connected with direct advertising. In the event of an objection, we must refrain from any further processing of your data for the purpose of direct advertising.
Decisions which have legal consequences for you or which significantly affect you must not be based solely on automated processing of personal data - including profiling. This does not apply if the automated decision
Decisions based exclusively on the automated processing of special categories of personal data are in principle inadmissible unless Article 22 (4) in conjunction with Article 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of your person.
In the event of complaints, you can contact the competent supervisory authority of the Union or the member states at any time. For our company, the supervisory authority mentioned in section II is responsible.
Below we have detailed the various purposes for which we collect and process personal data, what data we process and how we handle personal data or to whom we may disclose it.
Our legitimate interest is that as many people as possible learn about us and support us and our projects. Therefore, we process your contact details if you have either already contacted us in some way or we think you might be interested in us and our work. Our work is predominantly funded by donations. Therefore, it is equally important for us to keep in touch with existing and potential donors and to inform them regularly about our work.
In order to contact you and inform you according to your interests, we process the following data:
We have received this data from you personally or from persons in your personal environment.
According to the basic rules under 3.6
Any additional personal data that you have entrusted to the Campus employee with whom you are in personal contact will remain confidential and will not be stored or processed by us.
If you donate to us or to an aid project, we have to process your data due to legal regulations (AO) and to fulfil your donation request.
If you have given us a specific donation order, we store the following personal data:
We have received this data from you.
If you have made a donation for a specific project, your personal data will also be passed on to our project partners in the respective recipient country of your donation. If you give us a corresponding note with your donation, we will not forward your data.
In addition, we also pass on donor information to the relevant tax authorities as part of our legal obligations.
According to the general rules in 3.6
We offer numerous services. These services include:
We offer these services to you within the framework of a contractual relationship with you. We process your personal data insofar as
We pursue legitimate interests in particular in connection with the enforcement of legal claims, e.g. for payment of agreed fees for the provision of services.
We may process the following categories of data:
We have received the data from you, from our partners or from public authorities.
As a matter of principle, we only process your data within the framework of the principles listed under 3.2 and 3.4. In the context of travel events, additional data transfers to authorities in third countries (e.g. USA) may be necessary. You will be informed separately about this in connection with travel events.
In accordance with the principles set out in 3.6
If you would like to work with us, either as a permanent employee or as a volunteer, we look forward to receiving your application. In doing so, we process the personal data that you have provided to us as part of the application, as well as the data that accrues in the course of the application process. These are pre-contractual measures.
We assume that by sending us your data, you have given us consent to process it as part of the application process. If we accept your application, we will continue to store your data as part of your cooperation in accordance with Art 6 (1) lit b GDPR in conjunction with Section 26 BDSG 2018.
If we reject your application, we will store the records of the application process for a maximum of a further 6 months in order to protect our legitimate interests.
We process the following data in the application process:
We will delete this data 6 months after rejecting your application, with the exception of your contact data, unless statutory retention obligations provide for longer storage periods. We will also store your contact data beyond this period within the scope of the purposes set out in 4.1.
We offer numerous online services for our members and interested parties. In addition to our website, this also includes an online shop. In order to ensure and further optimize the security, functionality and user-friendliness of our online offers, we collect personal data as soon as you use one of our online offers, including mobile apps.
We regularly collect the following data:
We also use external service providers for the provision of our online offers, including mobile apps. These may also come into contact with your personal data. We select these service providers carefully and ensure that your data is protected by appropriate guarantees and technical-organisational measures. You can find more details under 3.2
This data is deleted within 7 days, unless it is exceptionally required for a longer period to protect legitimate interests. This may be necessary, for example, in the context of error correction or for the prosecution of criminal offences.
This cookie name is associated with the Typo3 web content management system. It is generally used as a user session identifier to enable user preferences to be stored, but in many cases it may not actually be needed as it can be set by default by the platform, though this can be prevented by site administrators. In most cases it is set to be destroyed at the end of a browser session. It contains a random identifier rather than any specific user data.
|.myfonts.net||__cf_bm||This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.||30 minutes|
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visit, operating systems used and origin of the user. This data may be combined by Google into a profile that is assigned to the respective user or their end device.
Furthermore, Google Analytics can record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to augment the data sets it collects and employs machine learning technologies in its data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: privacy.google.com/businesses/controllerterms/mccs/ .
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=de.
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
This website uses the "demographic characteristics" function of Google Analytics in order to be able to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be attributed to any specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 2 months. For details, please see the following link: support.google.com/analytics/answer/7667196?hl=de
MyFonts Web Fonts
Our website uses fonts provided by the company MyFonts Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA When you access the website, data is also retrieved from a MyFonts server, which at least allows MyFonts to obtain knowledge of your IP address. In doing so, MyFonts also learns, among other things, that you have called up the font via our website, as well as some technical information about your browser, as almost every web browser automatically sends this data to the server each time you call up the website. Some browsers allow you to restrict or modify the data transmitted to the server, but whether this is possible depends on the browser manufacturer. Even if MyFonts only needs the transmitted information, in particular the IP address, to deliver the retrieved content, it is beyond our knowledge and influence whether and to what extent MyFonts also evaluates or stores this information statistically. Further information on data protection at MyFonts can be found under the following link: https://www.myfonts.com/info/terms-and-conditions