Privacy Policy Episcopal relief organisation Misereor e. V.
Thank you for visiting our website and for your interest in the work of Misereor. When you visit our website, we process your data. As the protection of your personal data is important to us, we would like to inform you below about how we ensure the protection of your data.
Like all church organisations, Misereor is subject to the Church Data Protection Act (KDG). The data protection requirements of the European General Data Protection Regulation are complied with. In detail:
Collection and processing of personal data
The collection of personal data on this website is based on your voluntarily given consent (§ 6 para. 1 lit. b KDG).
We use the services of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich to ask for and store your consent.
If you wish to use services on our website - such as ordering materials, registering for newsletters or requesting information - we will use the data you provide to us exclusively to fulfil your request and delete this data after the statutory retention periods have expired.
You can revoke your consent at any time without giving reasons. To do so, please contact us by e-mail (spende@misereor.de) or contact the Misereor office, Mozartstraße 9, 52064 Aachen, Tel.: 0241-442-0.
Protection of your personal data when making an online donation
When you donate online, your data is transmitted to us in encrypted form using state-of-the-art technology. We use the FundraisingBox donation forms from Wikando GmbH, Schießgrabenstr. 32, 86150 Augsburg. Wikando GmbH also processes all donations via SEPA direct debit. We work with micropayment GmbH, Scharnweberstr. 69, 12587 Berlin, Germany, to process donations by credit card. These service providers are contractually obliged by Misereor to comply with data protection regulations and may only use personal data for the authorised purpose of properly processing your donation.
In order for your donation to be processed, we need your name and address as well as some mandatory information for bank or credit card collection. Once you have entered your data in the donation form and sent it off, you will receive an e-mail notifying you that your donation has been collected.
Protection of your personal data when applying online
We look forward to receiving your application via our applicant portal. Your data will be processed in accordance with Section 6(1)(b) KDG on the basis of your consent, which you declare by clicking on the "Agree to data protection provisions" field in the applicant portal.
All data that you transmit via the applicant portal will be encrypted in accordance with the current state of the art and processed and used exclusively for the purpose of carrying out recruitment procedures. They are not the subject of decisions based solely on automated processing.
If you apply for an advertised position, your data will be stored for as long as is necessary to carry out the advertised recruitment process. If an employment relationship is established on the basis of your application, your data will be stored for the purpose of implementing the employment relationship and deleted after the statutory retention periods have expired. In all other cases, your data will be deleted a maximum of six months after the end of the recruitment process, unless otherwise agreed personally.
In the case of an unsolicited application, your data will be stored in our applicant pool for a maximum of two years in order to be able to consider it in possible future application procedures and then deleted.
If you contact the Episcopal relief organisation Misereor e. V. via the contact details you have provided, your data will be deleted.V. via the contact options you have provided (telephone number, e-mail address, postal address) for the purpose of carrying out the application process.
In accordance with §§ 17-22 KDG, you are entitled at any time to request information about your personal data or its correction, deletion, restriction of processing and transfer and to object to the further processing of your data. As the data is required to carry out recruitment procedures, it will no longer be possible to consider your application once you have objected.
At the end of this privacy policy, you will find information on the controller, the company data protection officer and your right to lodge a complaint with a supervisory authority.
Cookies
We use cookies from some services to analyse the use of our digital offers and to constantly improve them for you as well as to evaluate digital advertisements. We ask for your consent to use cookies on our website. You can change or revoke your consent at a later date.
You can prevent the installation of cookies by selecting the appropriate settings in your browser. This may mean that you will not be able to make full use of all offers.
Once cookies have been set, you can delete them yourself at any time by calling up the corresponding menu item in your Internet browser or deleting the cookies on your hard drive. Details on this can be found in the help menu of your Internet browser.
Passing on the data
As a general rule, your personal data will not be disclosed to third parties, whether for commercial or non-commercial purposes, without your express consent. We will only disclose your personal data to third parties where this is permitted by law [such as on the basis of Section 6 of the KDG] and/or necessary.
In some cases, we use service providers for the processing of data as required by law. We retain full responsibility for data processing in such cases.
Furthermore, we occasionally use plugins from other providers on our website:
Google Tag Manager
This is a tag management system for implementing tracking and analytics tools provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The Tag Manager does not collect any personal data, but triggers tags that may collect and process personal data. We therefore integrate Google Analytics and Google Remarketing into our website.
Server-side tracking
We use server-side tracking technology. This enables us to reduce or completely avoid the direct transfer of personal data (which includes, for example, the IP address) to the integrated third-party providers.
With server-side tracking, a cloud server is integrated into the communication via our website. This means that the data collected via our tracking measures – for which we seek your consent via the cookie banner on the website – is first stored on our own server and only then passed on to third-party providers. In this context, for example, the IP address is removed as part of the integration of Meta, the parent company of Facebook and Instagram.
The reasons and purposes for which we use this form of server-side tracking can be summarised as follows:
- Improving the website’s loading time
- Measuring advertising effectiveness and evaluating our organisation’s advertising performance
- Optimising campaign delivery
- Improving data security
- Improving performance by reducing the integration of third-party scripts in the user’s browser
- Control over which data is shared by the user with third-party providers.
All integrated tracking services are declared and explained in the cookie banner on the website. You can view and, if necessary, change your cookie settings at any time under ‘Cookie Settings’.
STAPE INC.
This service provider is integrated as part of the hosting of Google Tag Manager and is based at 8 The Green Suite 12892, Dover, DE, USA, 19901, with a European branch at Sepapaja tn 6, Tallinn 15551, Estonia.
When using Stape INC, the following personal data is processed: IP address, browser type and version used, and the operating system. The legal basis is the consent you have voluntarily given via the cookie banner in accordance with Section 6(1)(b) of the KDG in conjunction with Section 25 of the TDDDG.
When STAPE INC processes personal data, it complies with the provisions of Sections 39–41 of the KDG regarding the transfer of personal data to third countries.
Web analytics with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”).
We ask for your consent on our website to use cookies. You may change or withdraw your consent at a later date.
Google Analytics uses so-called “cookies”, which enable an analysis of how the website is used. The information generated by the cookie about your use of this website (including your truncated IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services relating to website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf. Google will under no circumstances associate your IP address with any other data held by Google.
You can object to the use of your data by Google Analytics by installing an add-on in your browser. To do this, you can follow the link below, which will take you to Google’s website: Google Analytics opt-out add-on for browsers
Web analytics with Microsoft Clarity
This website uses Microsoft Clarity, a web analytics service provided by Microsoft Ireland Operations Limited, based in Dublin, Ireland (‘Microsoft’), provided that you have given your consent to the processing of data and to the setting of necessary cookies. In particular, we can generate so-called heatmaps from the analysed data, which enable us to visualise large amounts of data. Furthermore, using Microsoft’s tool, we can carry out a so-called ‘session recording’, which allows us to better understand your visit to our website and your ‘journey’ on our website. The information generated by the cookies regarding your use of this website is transmitted to Microsoft and stored there for 30 days. Microsoft may also collect this information to improve Microsoft’s products and services, including the creation of reports and performance analyses, and to create user profiles, including for advertising purposes. Microsoft may also use non-personal data collected in connection with the use of the tool to provide and improve Microsoft’s products and services. Microsoft acts as a separate data controller when using the Clarity tool. You can find out how Microsoft processes your data in Microsoft’s Privacy Statement – Microsoft Privacy.
If you have consented to the use of analytics and tracking cookies and wish to withdraw your consent at a later date, you can do so at any time via the cookie banner or the cookie settings on our website.
Google Remarketing
This website uses the ‘Google Remarketing’ web service provided by Google LLC to ensure that adverts we place on the Google advertising network as part of the ‘Google Ads’ online marketing process are shown, as far as possible, only to users who have demonstrated an interest in our online offering or who exhibit certain characteristics, e.g. an interest in specific topics or products.
The website uses (re-)marketing tags which create a file (cookie) on the user’s device, which contains information about the web pages the user has visited, the content in which they are interested, offers they have already clicked on, the browser and operating system used, referring web pages, time of visit and the use of online services. This data is processed pseudonymously within the Google advertising network, i.e. without personal data such as names or email addresses.
On our website, we ask for your consent to use cookies. You can change or withdraw your consent at a later date.
If you do not wish to use Google Remarketing, you can disable the feature here or at www.google.com/settings/ads. Further information on Google’s use of data can be found at policies.google.com/technologies/ads and adssettings.google.com/authenticated
Google Display & Video 360
We use the GoogleDisplay &Video 360 service (hereinafter ‘DV360’) on our website, a tool provided by the Google Marketing Platform. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Purpose of data processing: DV360 is used to display relevant adverts tailored to your interests, to optimise campaign reports and to prevent you from seeing the same advert multiple times. Using a cookie ID or similar recognition technologies, Google records which adverts are displayed in which browser and can thus prevent them from being shown repeatedly. In addition, DV360 can use so-called Floodlight tags (conversion tracking) to record whether, after viewing or clicking on an advert, you carry out a specific action on our website (e.g. make a purchase or fill in a form). To do this, your browser automatically establishes a direct connection to Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool. The following data, amongst others, may be processed as part of this usage: the IP address of the end device, device IDs and unique identifiers (e.g. advertising IDs), browser type and browser settings, the date and time of your visit to our website, information about interactions with advertising material, and your usage behaviour on our website.
The use of Google Display & Video 360 is based exclusively on your explicit consent in accordance with Section 6(1)(b) of the KDG and Section 25(1) of the TDDDG. You may withdraw this consent at any time with future effect via our cookie settings. It cannot be ruled out that data may be transferred to and stored on servers operated by Google LLC in the USA. Data transfers to the USA are governed by the EU-US Data Privacy Framework, under which Google LLC is registered. Should data be transferred outside this framework, Google uses the EU’s standard contractual clauses to ensure an adequate level of data protection. The cookies and tags set by DV360 remain on your device for a limited period (max. 13 months). You can delete these cookies and tags yourself at any time via your browser settings.
In addition to withdrawing your consent via our cookie banner, you have other options for objecting to personalised advertising:
- You can prevent cookies from being installed by adjusting the settings in your browser software accordingly.
- You can disable personalised advertising settings directly in your Google Account via the Google landing page for ad personalisation.
- You can block interest-based adverts from participating providers via the Network Advertising Initiative’s opt-out page at Network Advertising Initiative Opt-Out or via the European portal Your Online Choices.
Further information on data protection and settings for the Google Marketing Platform can be found in the Google Privacy Policy.
Bing Ads
This website uses the ‘Bing Ads’ web service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. This service is used to place adverts that we run as part of our online marketing activities on the Microsoft network.
The conversion tracking cookie is set when a user clicks on a Misereor advert displayed on the Microsoft search or advertising network. These cookies expire after a maximum of 90 days and are not used for personal identification. The information is transferred to a Microsoft server in the USA and stored there. Microsoft undertakes not to link this data with any other data held by Microsoft under any circumstances. Further information can be found at https://www.microsoft.com/de-de/privacy/privacystatement.
Logging / Server log files
Our website is hosted on a web server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, which is contractually obliged by Misereor to comply with data protection regulations. Each time our website is accessed, the web server logs
- the date and time of the server request
- browser type and version
- Operating system
- IP address in anonymised form to determine the country of origin and the internet service provider
The data collected in this way from the server log files is processed by us on the basis of our legitimate interest in accordance with Section 6(1)(g) of the KDG for the following purposes:
- To ensure a smooth connection to the website,
- To ensure a user-friendly experience on our website,
- to assess system security and stability, and for other administrative purposes.
We reserve the right to review the server log files retrospectively if we become aware of specific indications of unlawful use. The data will be deleted after 14 days at the latest.
Facebook
Content from Facebook is loaded onto our website via application programming interfaces (APIs) (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA). When you access the relevant page on our website, information is sent to Facebook indicating which of our web pages you have visited, along with your IP address. If you are logged in to Facebook as a member, this information is associated with your personal Facebook account. When you use the plug-in functions, this information is also linked to your Facebook account; you can prevent this by logging out before using the plug-in.
YouTube
Our website uses plugins from YouTube, a site operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages featuring a YouTube plug-in, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube’s privacy policy
Instagram
Our website displays posts from Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Our website uses embed codes from Instagram. When you visit a page containing such an embed code, a direct connection is established between your browser and the Instagram servers. Further information on this can be found in Instagram’s privacy policy: instagram.com/about/legal/privacy
Tax savings calculator
On our website, we offer you the opportunity to find out about the tax deductibility of donations. To do this, we use the ‘Smart-Rechner’ service provided by Smare Stefan Banse Michael Mühl GbR, Grafschaft. Accessing the calculator results in your details being recorded in the web server’s log file. In doing so, your IP address is transmitted to the hosting provider 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur. The IP address is anonymised there after 7 days. The log data is deleted after a maximum of nine weeks. The calculations carried out by the calculator take place within your web browser and are not logged.
Yumpu
We use www.yumpu.com provided by i-magazine AG (“i-mag” – Gewerbestrasse 3, 9444 Diepoldsau, CH) on our website. Yumpu provides a digital platform for publishing magazines, brochures or catalogues. Yumpu displays the content of PDF files as a so-called page-turning catalogue or flipbook directly in the web browser, without loading the PDF files.
Yumpu sets strictly necessary cookies to ensure the basic functions of the service. You can opt out of the use of these cookies at any time by adjusting your cookie settings accordingly. The procedure for doing so varies depending on the browser you are using.
Yumpu uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This is carried out on the basis of Article 6(1)(f) of the GDPR. Google Analytics uses cookies that enable an analysis of your use of the Yumpu service. The information generated by the cookie regarding your use of the website is usually transmitted to a Google server in the USA and stored there. Yumpu has extended Google Analytics with the ‘anonymizeIP’ code, so that all data is collected anonymously.
You can object to the use of your data by Google Analytics by installing an add-on in your browser. To do this, you can follow the link below, which will take you to Google’s website: Google Analytics opt-out add-on for browsers
Yumpu automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are deleted after one month. This data is not combined with other data sources. Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of a legitimate interest in improving the stability and functionality of the website. The data is not disclosed or used for any other purpose.
E-mail newsletter
You have the option of subscribing to a newsletter at various points. After confirming your registration, we will collect, process and store your e-mail address exclusively for the purpose of sending you our e-mail newsletter. You can object to this at any time - by e-mail, via our contact persons on this website or to the Misereor office, Mozartstraße 9, 52064 Aachen, Germany.
We work together with Salesforce Marketingcloud, the marketing software of Salesforce Inc, 415 Mission Street, San Francisco, CA 94105, USA, to send our e-mail newsletters. This service provider is contractually obliged by Misereor to comply with data protection regulations.
Your data will be stored until you unsubscribe from the newsletter. So that we can ensure that you do not receive any further mailings from us in the future, we store your data internally in a block file in this case. This is the only way to ensure that you do not receive any further mailings from us in the future. The legal basis for this is the obligation to protect your rights and freedoms as overriding legitimate interests on our part or in your own interest. If you wish your data to be deleted completely, you can inform us of this informally.
Liability for own content
The contents of these pages have been created with the utmost care. However, we cannot accept any liability for the accuracy, completeness and topicality of the content. As a service provider, we are responsible for our own content on these pages in accordance with general legislation.
Liability for links (contents of external providers)
Cross-references ("links") to content provided by other providers are to be distinguished from our own content. We have no influence on their content; the respective provider or operator of the pages is always responsible for the content of the linked pages.
Rights of data subjects
We would like to inform you that you have the following rights of the data subject in accordance with §§ 17 ff KDG under the conditions defined therein: Right to information about the personal data concerned and to rectification or erasure or to restriction of processing or right to object to processing and right to data portability.
You also have the right to lodge a complaint with a data protection supervisory authority in accordance with Section 48 KDG. If the processing is based on Section 6 para. 1 sentence 1 lit. b KDG or Section 11 para. 2 lit. a KDG (consent), you also have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Changes to our privacy policy
We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example when introducing new services. The new privacy policy will then apply to your next visit.
Right to information and right to object
As a user, we will provide you with information free of charge at any time about what data we have collected from you and for what purpose. If you are interested, please contact us at the address below or at the Misereor office, Mozartstraße 9, 52064 Aachen. In order to receive information, you must identify yourself as the person about whom information is to be provided or prove that you are authorised to receive information about a third person.
You can object to the use of your personal data at any time by sending a corresponding message to the contact address below or to the Misereor office, Mozartstraße 9, 52064 Aachen. The blocking and deletion of your data is based on the legal requirements of the KDG. By blocking your data, we ensure that you will no longer receive any information or other communications from Misereor. Please note, however, that data can only be deleted after the expiry of statutory or contractual retention periods.
Responsible body
The responsible body within the meaning of data protection law is the Bischöfliche Hilfswerk Misereor e.V., Mozartstr. 9, 52064 Aachen (Tel.: 0241-442-0; e-mail: info@misereor.de)
Questions
As a data subject, you may contact the company data protection officer with any questions, requests for information or complaints regarding your personal data. The data protection officer is obliged to maintain confidentiality regarding the identity of the data subject and any circumstances that might allow conclusions to be drawn about the data subject, unless the data subject expressly waives this obligation.
UIMC DR. VOSSBEIN GMBH & CO KG has been appointed as the company data protection officer in accordance with Section 38 of the Federal Data Protection Act (BDSG) and Section 36 of the Act on Church Data Protection (KDG). The responsible member of staff in the company data protection officer’s team is Mr Christoph Hirsch.
Supporting contacts at Misereor are:
Ms Sabine Ahrens for data protection matters
Ms Vera Rölle for IT data security
Contact details for the company data protection officer:
Dr Jörn Voßbein
UIMC Dr Voßbein GmbH & Co KG
Otto-Hausmann-Ring 113
42115 Wuppertal
Tel.: 0202 – 946 77 26 200
Email: datenschutz.misereor[at]uimc.de