Data protection
Data protection declaration and information in accordance with Article 13 GDPR for the application process as PDF for download
Data protection declaration and information pursuant to Article 13 GDPR for the use of the Ecclesia Box as PDF for download
Data protection notice and information pursuant to Art. 13 GDPR for this website
General information
Thank you for your interest in information about our services. We attach the utmost importance to protecting your privacy as a reader of our website and newsletter and adhere strictly to the provisions of data protection law when collecting, processing and using your personal data in connection with the sending of our newsletter.
Name and contact details of the person responsible for this website
Ecclesia Holding GmbH
Ecclesiastraße 1 - 4
32758 Detmold
Phone +49 5231 603-0
Fax +49 5231 603-197
E-mail info@ecclesia-gruppe.de
Name and contact details of the person responsible for subscribing to / sending the newsletter
The company of the Ecclesia Group with which you have a business relationship or to which you have given your consent to receive the newsletter is responsible for sending the newsletter and the processing purposes pursued in connection with this (see below) within the meaning of Art. 4 No. 7 GDPR. An overview of all legal information of the companies of the Ecclesia Group can be found here.
Contact details of the data protection officer
Ecclesia Holding GmbH
Data Protection Officer
Ecclesiastraße 1 - 4
32758 Detmold
Phone +49 5231 603-6129
Email dsb(at)ecclesia-gruppe(dot)de
Purposes for which the personal data are processed and the legal basis of the processing
| Purposes of the processing | Legal basis |
|---|---|
| Contacting visitors to the website with the controller via our online contact form | Art. 6 para. 1 lit. b GDPR (necessary to fulfill pre-contractual measures and to communicate with third parties and to be able to respond to contact requests). |
| Uploading files and downloading files (whitepaper download) |
The legal basis depends on the type of files uploaded. Possible legal bases may be: Art. 6 para. 1 lit. b GDPR (necessary for the performance of a contract or in order to take steps prior to entering into a contract) |
Performance of evaluations of user behavior with Google Analytics, Google Data Studio | Art. 6 para. 1 lit. a GDPR (consent of the controller to the processing) |
| Processing of technical information in order to provide the service and optimize the presentation of the information retrieved by the visitor on the respective end device of the visitor to the website | Art. 6 para. 1 lit. f GDPR (legitimate interest of the controller) |
| Control of the website and needs-based design of processes during use through the use of cookies | Art. 6 para. 1 lit. a GDPR (consent of the data subject) |
| Use of the Microsoft CaptCha service to check and avoid interactions on our website through automated access, e.g. by so-called bots | Art. 6 para. 1 lit. f GDPR (legitimate interest of the controller) |
If your personal data is processed to safeguard the legitimate interests of the controller in accordance with Art. 6 para. 1 lit. f GDPR, our legitimate interest is to permanently analyze and improve the website and to optimize its user-friendliness.
Purposes for which the personal data is processed and the legal basis for processing for sending the newsletter
| Purposes of the processing | Legal basis |
|---|---|
| Sending the newsletter and tracking newsletter subscribers with regard to opening emails and clicking on articles | If you have given your consent to receive the newsletter, the newsletter will be sent and tracked on the basis of Art. 6 para. 1 lit. a GDPR. If you are an (existing) customer of the controller and have not objected to receiving the newsletter as part of the opt-out procedure, the newsletter is tracked on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) |
If your personal data is processed to safeguard the legitimate interests of the controller in accordance with Art. 6 para. 1 lit. f GDPR, our legitimate interest is that we pursue sales growth as an economic interest by contacting you as a newsletter recipient for the purpose of advertising our products and providing you with our latest information.
In connection with the tracking of the newsletter, our legitimate interest lies in the fact that by tracking the newsletter we achieve a better coordination of the approach in advertising and customer care for our newsletter subscribers, so that we can select the articles of interest to the readers and less interesting articles are not sent. Overall, the legitimate interest in sending and tracking the newsletter is to ensure optimal customer service.
Personal data processed when subscribing to the newsletter
If you have subscribed to our newsletter, we will use your email address and personal details to send you our newsletter on a regular basis.
There is a link at the end of each newsletter that you can use to edit your subscription data or unsubscribe from the newsletter at any time. You can also unsubscribe by sending us a corresponding message using the contact details provided for the controller (see section "Name and contact details of the controller" above).
If you subscribe to the newsletter with an email address that is not already registered to receive our newsletter, an email will be sent to confirm the subscription using the double opt-in procedure. The subscription is only activated after confirmation of the subscription by clicking on a link in this confirmation email. This procedure is carried out for legal reasons to ensure that the owner of the e-mail address as the data subject has commissioned the subscription.
When subscribing to the newsletter, we save the date of registration. This is necessary for verification purposes in the event of possible misuse of the email address used for registration.
The newsletters are individualized as part of newsletter tracking (see above) so that we can recognize whether a newsletter has been opened by a recipient and whether one of the articles contained in the newsletter has been accessed. The personal data collected in this way is stored and evaluated in order to optimize our offer and to be able to adapt the content of future newsletters even better to the interests of subscribers.
Provision of your personal data
Provision of your personal data is necessary so that we can send you our newsletter. It is not possible to send you our newsletter without providing your personal data.
Duration of storage of personal data when subscribing to the newsletter
The personal data will be deleted from the mailing list if you have objected to receiving the newsletter or revoked your consent.
In the case of existing subscriptions, the newsletter tracking data will be automatically deleted in accordance with the statutory provisions if newsletter tracking takes place.
Categories of personal data processed when using this website
When using our website, the following data is processed for organizational and technical reasons
- IP addresses of visitors
- Name of the pages accessed
- Date and time of access
- Name of the browser used
- Name of the operating system
- Name of the search engine or external link
- Name of the downloaded files
If you send us data via our online forms, the personal data you provide will be processed to fulfill the respective purpose.
Provision of your personal data
Personal data is information about your identity. This includes, for example, information such as your name, address, telephone number or e-mail address. It is not necessary for you to disclose personal data in order to use this website. In certain cases, however, we need your name and address as well as other details so that we can provide the requested services.
This applies, for example, to the use of our contact form, the sending of information, the answering of individual questions, the use of our form for online applications and data that you provide as part of a white paper download on our website. Where this is necessary, we will inform you accordingly. In addition, we only store and process data that you provide voluntarily or automatically. If you make use of consulting services, we generally only collect the data that is required to provide the services. If we ask you for further data, this is voluntary information. The personal data provided by you will be processed exclusively for the purposes communicated to you and explained below.
Recipients of your personal data
Your personal data will only be passed on to third parties with your consent or on the basis of a legal permission. Your personal data will only be transferred to state institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees are obliged to maintain confidentiality and to comply with the provisions of data protection legislation. We have commissioned appropriate companies to process your personal data on our behalf for the technical implementation of the services provided. These are
| Contractor | Service provided |
|---|---|
| Ecclesia Holding GmbH Ecclesiastrasse 1 - 4 32758 Detmold | Central organization and coordination of the dispatch of the newsletter group-wide |
| Sunzinet GmbH | Dispatch/configuration of the newsletter e-mails |
| Sunzinet GmbH | Configuration when downloading a whitepaper |
| onix - Dienstleistungs- und Handels GmbH | Hosting of the website |
| P&I Personal & Informatik AG | Provision of the applicant platform |
Data processing for event management in the context of registration for and participation in our events
If you participate in an event organized by us, we process your personal data as the responsible body within the meaning of Art. 4 No. 7 GDPR.
Processed data and data categories and data sources
Data and data categories processed by us as the controller and our processors listed below are the following information about the person registering or a person registering for another person as part of a third-party registration (third party as data source):
-title, if applicable,
-first name, surname,
-email,
-company,
-position,
-department,
-address (street, zip code, town),
-telephone,
-IP address of the person registering,
-date and time of registration,
-data on possible allergies,
-data on diet and lifestyle (e.g. vegetarianism, veganism, vegan diet, etc.), -data on the person registering, -data on possible allergies, -data on diet and lifestyle (e.g. vegetarianism, veganism, vegan diet, etc.).(e.g. vegetarianism, veganism) that are relevant to the organization of catering for event participants.
Processing purposes and legal bases
| Purposes of the processing | Legal basis |
|---|---|
| Sending the invitation email to our events | If you have given your consent to receive our information e-mails, the invitation e-mail will be sent on the basis of Art. 6 para. 1 lit. a GDPR. If you are an (existing) customer of the controller and have not objected to receiving our information e-mails as part of the opt-out procedure, the invitation e-mail will be sent on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest of the controller) and as part of the support of our customers for the performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR. |
| Processing of data to enable registration for and participation in our events and to fulfil the contract as well as to organize the catering of the participants according to their respective preferences regarding the menu. | For non-customers: For customers: If data on possible allergies, diet/lifestyle are processed, the processing is also carried out for (existing) customers on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 9 para. 2 lit. a GDPR. |
Data recipients in the context of registration and the organization of our events
Your personal data will only be passed on to third parties on the basis of a legal permission. Your personal data will only be transferred to state institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees are obliged to maintain confidentiality and to comply with the provisions of data protection legislation. We have commissioned appropriate companies to process your personal data on our behalf for the technical implementation of the services provided.
As part of the organization of our events, we use the service providers listed below, as well as those who are used in the context of sending newsletters (see the section "Sending newsletters") and who provide the order services listed individually below on our behalf in accordance with Art. 28 GDPR and in this context receive your personal data from us for the execution of the order, which you provided during registration or which was provided for you by the person who registered you during registration.
| Contractor | Service provided |
|---|---|
| Sunzinet GmbH | Configuration of the registration forms for events |
Duration of the storage of your data
The personal data processed in connection with the registration and organization of our events will be automatically deleted if the purposes of the processing no longer apply and there are no statutory retention requirements.
In particular, data on possible allergies, diet/lifestyle, which may contain information on your health, will be deleted as soon as the storage of the data is no longer necessary in order to be able to prove that the catering was provided in accordance with the information provided. As a rule, this data is deleted 2 weeks after the end of the respective event.
Third country transfers in the context of event management
The commissioning of subcontractors in third countries (countries outside the EU/EEA) and the transfer of data to them only takes place if the special requirements of Art. 44 et seq. GDPR are fulfilled.
If personal data is transferred to the USA in the context of the use of services of (sub)contractors, the data transfer is based on the adequacy decision of the European Commission EU-U.S. Data Privacy Framework (EU-U.S. DPF) within the meaning of Art. 45 para. 3 GDPR and, if applicable, on the basis of the standard contractual clauses.
A copy of the suitable or appropriate guarantees can be obtained on request from the controller using the contact details provided above.
Use of cookies
This website uses so-called cookies. These are small text files that are sent from our web server to your browser and stored on your computer's hard disk. No personal data is stored, only an individual pseudonym. This information is used, for example, to recognize you when you navigate our website and to make navigation easier for you.
You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. Alternatively, you can also view this website without cookies. You can pre-set this in your browser. Please note that some functions of the website may then no longer be available in full or in part.
ANALYSIS TOOLS AND ADVERTISING
Traffic analysis Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated for this website. For this purpose, your IP address is shortened and stored without the last octet. As a result, we know from which network a request comes, but not from which computer.
As a rule, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the operator of this website.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Use of Google Ads conversion tracking and Google Tag Manager
We use the online advertising program "Google Ads" on our website and in this context conversion tracking (visit action evaluation) which was implemented using the Google Tag Manager. Google Conversion Tracking and the Google Tag Manager are a service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: "Google"). When you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
SalesViewer
This website uses the "SalesViewer" service. The provider is SalesViewer® GmbH, Huestrasse 30, 44787 Bochum, Germany (website: https://www.salesviewer.com).
As part of the "SalesViewer" service, a javascript-based tracking code is used on our website, with the help of which the following information (hereinafter company data) is determined:
- Name, origin and industry of the visiting company
- Source/referrer of the visiting company
- Keyword
- Visitor behavior (e.g. (sub)pages visited, time of visit, duration of visit).
For this purpose, a javascript-based code is used to collect company-related data and the corresponding usage. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify the visitor to this website.
The data stored in the context of "SalesViewer" is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.
You can object to the collection and storage of data at any time with effect for the future by clicking on the following link to prevent the collection by "SalesViewer" within this website in the future: https://www.salesviewer.com/de/opt-out/. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click this link again.
We use the SalesViewer technology described above on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and process the above-mentioned data for marketing, market research and optimization purposes.
We have concluded an order processing contract with the provider of the SalesViewer technology.
LinkedIn Insight Tag
We use the LinkedIn Insight Tag tool on our website, which is offered and operated by LinkedIn Ireland Company.
The business address of LinkedIn Ireland Unlimited Company: Wilton Place, Dublin 2, Ireland.
Further information about LinkedIn can be found at the following link
https://www.linkedin.com/legal/impressum
The LinkedIn Insight Tag tool is used to analyze and measure the success of advertising placed on the online platform of the LinkedIn social network.
Where we advertise our products and services on LinkedIn, we only want to show them to people who are actually interested in our products and services. The LinkedIn Insight Tag tool allows us to better tailor our advertising measures to the wishes and interests of potential customers. LinkedIn users who have consented to the display of personalized advertising are presented with suitable advertising. In addition, LinkedIn uses the data collected when using the LinkedIn Insight Tag for its own analysis purposes and to display its own advertisements.
In order to display our advertisements only to interested persons, as explained above, we have implemented the code that ensures the function of the LinkedIn Insight Tag tool on our website that you visit.
When you perform an action on our site, e.g. click on content that interests you, the LinkedIn Insight Tag is activated and stores your actions on our website in one or more cookies. Cookies are small text files that are sent to your browser and stored on your device's storage medium. These cookies enable LinkedIn to match your user data (e.g. URL, referrer URL, IP address, device and browser properties (user agent) and timestamp) with the data of your LinkedIn account, if applicable.
The data collected by LinkedIn is anonymous and cannot be viewed by us as users of LinkedIn Insight Tag. This data is only used by LinkedIn in the context of displaying advertisements. In the context of the data processing that takes place, it makes a difference whether you have a LinkedIn user account and are logged in to LinkedIn as a user in your browser, or whether you do not have a LinkedIn user account.
If you have a LinkedIn user account and are logged in, your data will be automatically assigned to your user account by LinkedIn when you visit our site.
Your ad settings can be customized by LinkedIn members and non-members at the following link:
https://www.linkedin.com/legal/cookie-policy
Insofar as cookies are used by LinkedIn in the context of the use of LinkedIn Insight Tag, these are described by LinkedIn in a detailed table, which you can access at the following link:
https://www.linkedin.com/legal/l/cookie-table
To learn more about LinkedIn's privacy policy in general, you can access this policy at the following link:
https://www.linkedin.com/legal/privacy-policy
The legal basis for the use of LinkedIn Insight Tag is your consent. In this case, your personal data is processed on the basis of Art. 6 para. 1 lit. a in conjunction with Art. 7 GDPR. Art. 7 GDPR and, if applicable, on the basis of Section 25 (1) TDDDG, provided that information is stored in the end user's terminal equipment or access to information that is already stored in the terminal equipment takes place.
Insofar as the collected data relating to user activities is transmitted by LinkedIn Ireland Unlimited to the parent company in the USA, the transmission is carried out on the basis of the currently applicable adequacy decision of the European Commission pursuant to Art. 45 para. 3 GDPR, which is also known as the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
LinkedIn company page
In principle, LinkedIn Ireland Unlimited Company (Ireland/EU - "LinkedIn") is solely responsible for the processing of personal data on our LinkedIn company page. Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.
When you visit our LinkedIn company page, LinkedIn processes personal data in order to provide us with anonymized evaluations. This provides us with information about the actions you take on our LinkedIn company page (called Page Insights by LinkedIn). We do not receive any personal data from you via the Page Insights, but only have access to the aggregated content. Even if we have no influence on the type and scope of the processing of your personal data by LinkedIn, this processing of personal data is carried out within the framework of joint responsibility in accordance with Art. 26 GDPR. The processing serves the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to receive information about the actions on our LinkedIn company page. For this purpose, LinkedIn provides an agreement on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum.
Use of external services
Our website uses content from third-party providers. This may include videos, fonts or scripts. We have explained the respective purposes and the legal basis on which we use this content in detail in the section "Purposes for which the personal data is processed and the legal basis for processing". For technical reasons, it is necessary for your IP address to be transmitted to the respective provider in order to display the content of the third-party providers used. We have no influence on how the respective third-party provider uses your personal data. However, we provide you below with an overview of all third-party services used by this website. If available, we will also provide you with the respective link to the privacy policy of the third-party provider so that you can access the information on the processing of your personal data there and, if available, refer you to an existing privacy policy.
Links to other websites
Our website contains links to other websites. We have no influence on whether their operators comply with data protection regulations. Despite careful checking of the content, we accept no liability for the content of external links. The operators of the linked sites are solely responsible for their content.
Your security
We use technical and organizational measures to protect your data from unauthorized access, loss, manipulation or destruction. Our security measures are constantly updated in line with technological developments.
Duration of storage
The personal data that you have made available to us will be automatically deleted if the purposes of the processing no longer apply. The following storage periods apply in detail:
| Categories of stored data | Deletion period |
|---|---|
| Technical data and logs to ensure the operation of the website | 6 months |
| Content that you send us via the contact or application form. | The storage periods for this content depend on the type of information transmitted and the applicable statutory retention periods. If an application received does not lead to the conclusion of an employment contract, the data will be automatically deleted 6 months after completion of the application process. If you request deletion at an earlier point in time within the scope of your rights as a data subject, the data will be deleted immediately upon your request. |
| Personal data in the context of a newsletter subscription | In the case of existing subscriptions, the newsletter tracking data will be automatically deleted after the legally prescribed period if newsletter tracking takes place. |
Rights of data subjects/right to lodge a complaint
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data processed by you, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the rights to rectification, erasure, restriction of processing or objection, the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
In accordance with Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or the completion of your personal data stored by us.
In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless there is a legal basis that entitles or obliges us to continue storing the data.
In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if
-you contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data
-the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead,
-we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims,
-you have objected to processing pursuant to Article 21 (1) GDPR pending the verification of whether the legitimate grounds override those of the data subject. 1 GDPR, as long as it is not yet clear whether our legitimate reasons outweigh your reasons.
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
Right to withdraw consentIn accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation. |
Right to objectIf your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. |
Adaptation of the data protection information
Since the security and data protection measures may have to be adapted by us, in particular if this becomes necessary due to technical or legal developments, we may also adapt this data protection information accordingly in such cases. Please therefore note the latest version of this data protection notice.
Questions, suggestions, complaints
If you have any further questions about the information on data protection and the processing of your personal data, you can contact our data protection officer directly using the contact details given above.