Privacy Policy

The ACN International Aid to the Church in Need gGmbH (hereinafter “ACN”), is pleased that you are visiting our website. Data protection and data security are very important to us. Therefore, we would like to inform you about the personal data we collect during your visit to our website and about the intended purposes.

As changes to the law or changes to our corporate processes may require an adaptation of this privacy statement, we ask you to read this privacy policy regularly. The privacy policy can be accessed any time under “Privacy Policy”, saved and printed out.

§ 1 Data Controller and Scope

The controller according to the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection acts of the Member States, as well as other data protection regulations, is:

ACN International Aid to the Church in Need, gGmbH

Bischof-Kinderman-Straße, 23
61465 Königstein in Ts.
Germany
Phone: +4961742910
E-mail: info@acn-int.org
Website: www.acninternational.org

This privacy policy applies to the online presence of our website, which is available at www.acninternational.org and the various subdomains (hereinafter referred to as “our website”).

§ 2 Data Protection Officer

The (external) Data Protection Officer of ACN can be contacted at:

KINAST Rechtsanwaltsgesellschaft mbH
Rechtsanwälte
Externe Datenschutzbeauftragte | Externe Compliancebeauftragte
Hohenzollernring 54
D-50672 KölnTelefon: +49 221 – 222 183 0
Telefax: +49 221 – 222 183 10
Web: www.kinast-partner.de
Blog: www.datenschutzticker.de

§ 3 Principles of Processing Personal Data

Personal data are all information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information that cannot (or only with a disproportionate effort) be referred to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.

Processed personal data will be deleted as soon as the purpose of the processing has been fulfilled and no legally prescribed retention obligations are to be observed.

In case we process your personal data for the provision of certain offers, please find below information about the specific processes, the scope and purpose of data processing, the legal basis for processing and the respective storage period.

§ 4 Data Processing

1 – Website
a. Scope and Purpose of the Processing
When you access and use our website, we only collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

The following personal data is recorded to the extent necessary for the provi­sion of a functional website and our contents and services:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • The website from which access is made (referrer URL)
  • The used browser and, if applicable, the operating system of your computer as well as the name of your access provider

b. Legal Basis
Art. 6 para. 1 lit. f GDPR serves as the legal basis for the data processing. The processing of the mentioned data is necessary for the provision of our services and thus serves the protection of a legitimate interest of our foundation .

c. Data Deletion and Storage Time
The data subject’s personal data are deleted or blocked as soon as the purpose of the storage is fulfilled. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection for the user. Further storage may take place in individual cases if this is required by law.

2 – Donations
a. Scope and Purpose of the Processing
We offer users the opportunity to donate voluntarily and uncompensated to Aid to the Church in Need. The donations support the Catholic Faithful and other Christians where they are persecuted, oppressed or in pastoral need and therefore may reveal a religious belief. The required data for this purpose are entered into an input mask, transmitted to us and stored. The following recipients receive my personal data for the same purpose laid out above:

  • Stripe,
  • Afrus,
  • Mautic,
  • Google Analytics

The following data are collected as part of the donation process:

  • Name
  • Date of birth
  • Address
  • Country
  • Phone number
  • E-mail Address
  • IP Address
  • ID number (where it applies)
  • Payment Information (donation amount and frequency of donation)
  • We do not store any bank information.

In order to process payments, we pass on your payment data to the credit institution responsible for the payment. These companies are obliged to use your data only for order processing and not for other purposes.

b. Legal Basis
Art. 9 Sec. 2 lit. a GDPR in connection with Art. 6 Sec. 1 lit. a GDPR serve as the legal basis as your freely given consent legitimates the processing of your personal data (cf. § 4 2.a.).

c. Storage Time
Your personal data, in either case in connection with the donation amount, its rhythm and fundraising purpose, may be stored for a maximum period of time of 10 years or as long as the reasons for processing the data exists until then.

3 – Newsletter
a. Scope and Purpose of Processing
On our website, you can subscribe to a free newsletter. In order to be able to send you the newsletter regularly, we need the following information from you:

  • Name
  • E-mail address
  • Country
  • IP Address

Your data will not be passed on to third parties in the context of the newsletter.

We use the so-called double opt-in procedure for the newsletter, i.e. we will only send you the newsletter if you have previously confirmed your registration via a link that is sent to you for this purpose. We would like to make sure that only you, as the owner of the specified e-mail address, can subscribe to the newsletter. Your confirmation must be given promptly after receiving the confirmation e-mail, otherwise, your newsletter registration will be automatically deleted from our database.

b. Legal Basis
The processing of your e-mail address for the newsletter is based on article 6 (1) lit. a GDPR on the declaration of consent, which you have voluntarily given as follows:
Declaration of consent:

By entering my data and clicking the “sign in” button I declare my consent to the use of my e-mail address for regularly receiving newsletters.

I can unsubscribe from the newsletter service at any time by clicking on the link at the end of the newsletter.

I can withdraw my consent to the processing of personal data collected during the registration process at any time by sending an email to info@acninternational.org

c. Storage Time
Your e-mail address will be stored for as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address will be deleted. Further storage may take place in individual cases if this is required by law.

4 – Contact form
a. Scope and Purpose of Processing
You have the opportunity to contact us using a form provided on our website. In the course of sending your inquiry via the contact form, reference is made to this data protection declaration in order to obtain your consent. If you use the contact form, the following personal data will be processed:

  • Name
  • E-mail address
  • Message

The purpose of entering your e-mail address is to assign your request and to be able to reply to you. When using the contact form, your personal data will not be forwarded to third parties.

b. Legal Basis
The data processing described above (cf. § 4 5. a.) for the purpose of establishing contact is carried out voluntarily in accordance with Art. 6 para. 1 lit. a GDPR on the declaration of consent submitted by you as below:

Declaration of consent:
By entering my data and clicking the “send” button I declare my consent to the use of my e-mail address for answering my contact request.

c. Storage Time
As soon as the request you have made has been dealt with and the relevant facts have been finally clarified, your personal data processed by the contact form will be deleted. Further storage may take place in individual cases if this is required by law.

§ 5 Third Party Transfers

We only share your personal information with third parties if:

  • you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR,
  • it is legally permissible and necessary for the fulfilment of a contractual relationship with you pursuant to Art. 6 (1) sentence 1 lit. b GDPR,
  • there is a legal obligation to pass on the data in accordance with Art. 6 (1) sentence 1 lit. c GDPR,
  • the disclosure pursuant to Art. 6 (1) sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

§ 6 Cookies

a. Scope and Purpose of Processing
We use cookies on our website. Cookies are small files which are sent by us to the browser of your terminal device and stored there as part of your visit to our internet pages. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies allow us to perform various analyses. Cookies are, for example, able to recognize the browser you are using when you visit our website again and to transmit various information to us. We can use cookies to make our internet offer more user-friendly and effective, for example, by tracking your use of our website and by determining your preferred settings (e.g. country and language settings). In case third parties use cookies to process information, they will collect the information directly from your browser. Cookies do not cause any damage to your device. They cannot run programs or contain viruses.

Our website uses the following types of Cookies:

  • Transient cookies: Our website uses transient cookies, which are automatically deleted when you close your browser. This type of cookie allows us to collect your session ID allowing you to assign different browser requests to a common session and enabling us to recognize your end device during subsequent visits to websites.
  • Persistent cookies: Our website uses persistent cookies that are stored in your browser for a longer period of time and transmit information to us. The respective storage time differs depending on the cookie. You can delete persistent cookies independently using your browser settings.
  • Required cookies: These cookies are required for technical reasons so that you can visit our website and use the functions we offer. This applies, for example, to the following applications: Google Analytics, Google Tag Manager, Mautic, Adbutler, Facebook, Olark chat. In addition, these cookies contribute to the safe and correct use of the website.
  • Performance-related cookies: These cookies enable us to analyse website usage and improve the performance and functionality of our website. For example, information is collected about how visitors use our website, which pages are accessed most frequently, or whether error messages are displayed on certain pages.
  • Cookies for marketing and social media: Advertising cookies (third party providers) allow us to show you various offers that match your interests. These cookies can be used to record the web activities of users over a longer period of time. You may recognize the cookies on various devices you use.

The following third party providers receive personal data via cookies integrated on our website:

  • Google Tag Manager
  • Google Analytics
  • Google Adwords
  • Mautic
  • Facebook
  • In addition, certain cookies allow us to connect to your social networks and share content from our website within your networks.

b. Legal Basis
Due to the described purposes of use (cf. § 6. a.), the legal basis for the processing of personal data using cookies lies in Art. 6 para. 1 lit. f GDPR. If you have given us your consent to the use of cookies on the basis of a reference (“cookie banner”) given by us on the website, the lawfulness of the use is additionally governed by Art. 6 para. 1 s. 1 a GDPR.

c. Storage Time
As soon as the data transmitted by the cookies is no longer necessary for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

d. Browser Settings
Most browsers are already set to accept cookies by default. However, you can change your browser settings so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are disabled by your browser settings on our website.

You can also use your browser settings to delete cookies already stored in your browser. Furthermore, it is possible to set your browser so that it informs you before cookies are stored. Since the different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the setting options.

If you would like a comprehensive overview of all third-party access to your Internet browser, we recommend that you install specially developed plug-ins.

§ 7 Tools for Tracking and Analysis

We use tracking and analysis tools to ensure continuous optimization and user-oriented design of our website. With the help of tracking measures it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained.

On the basis of these interests, the use of the tracking and analysis tools described below is justified in accordance with Art. 6 para. 1 s. 1 lit. f GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.

a. Google Analytics
Our website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountainview, CA 94043 USA (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transferred to a Google server in the USA and stored there. When using Google Analytics, it is not excluded that cookies set by Google Analytics may collect other personal data in addition to the IP address. We would like to point out that Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Google will use the information generated by cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not merged by Google with other data according to its own statements.

You can generally prevent cookies from being saved by adjusting your browser settings accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a plug-in for your browser under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This plug-in prevents information about your visit to the website from being transmitted to Google Analytics. This plug-in does not prevent any other analysis.

Please note that you cannot use the browser plug-in described above when visiting our website via the browser of a mobile device (smartphone or tablet). When using a mobile device, you can prevent Google Analytics from collecting your usage data by clicking the following link:

Disable Google Analytics

By clicking on this link, an opt-out cookie is placed in your browser. This prevents information about your visit to the website from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and only for this domain. If you delete the cookies in the browser, the opt-out cookie will also be deleted. To further prevent the collection by Google Analytics, you have to click the link again. The use of the opt-out cookie is also possible as an alternative to the above plug-in when using the browser on your computer.
This code has the effect that the last 8 bits of the IP addresses are deleted and your IP address is thus recorded anonymously (so-called IP masking). As a matter of principle, Google shortens your IP address even before the transmission within member states of the European Union or in other Member States to the Agreement on the European Economic Area and thus makes it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

By clicking on this link, an opt-out cookie is placed in your browser. This prevents information about your visit to the website from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and only for this domain. If you delete the cookies in the browser, the opt-out cookie will also be deleted. To further prevent the collection by Google Analytics, you have to click the link again. The use of the opt-out cookie is also possible as an alternative to the above plug-in when using the browser on your computer.

This code has the effect that the last 8 bits of the IP addresses are deleted and your IP address is thus recorded anonymously (so-called IP masking). As a matter of principle, Google shortens your IP address even before the transmission within member states of the European Union or in other Member States to the Agreement on the European Economic Area and thus makes it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

b. Google AdWords
We use the Google AdWords technology, especially conversion tracking. Google conversion tracking is an analysis service of Google Inc., 1600 Amphitheatre Parkways, Mountain View, CA 94043, USA. If you click on a Google ad, a conversion tracking cookie will be placed on your computer. The cookies are valid for 30 days and are not for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and ACN can also detect that you clicked on a particular ad and were redirected to that page. Google AdWords customers each receive a different cookie. This prohibits to track cookies by the websites of AdWords customers.

The data collected using the conversion cookie are used to create conversion statistics for AdWords customers who use conversion tracking. Customers will see the number of users who clicked on their ad and were then redirected to a conversion tracking tag page. However, they do not receive any information that can be used to personally identify themselves.

If you do not want to participate in conversion tracking, you can prevent this by using a corresponding setting in your browser, for example in the form that a cookie installation is generally prevented. You can also turn off cookies for conversion tracking by setting your browser to block only cookies from the web address “googleadservices.com”.

c. Google Remarketing
We use the Google Remarketing technology of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google remarketing displays ads to users who have visited our websites and online services and are interested in a specific offer. Within the Google network, targeted and interest-based ads can be displayed on our site. Google Remarketing uses cookies for this analysis. This allows our visitors to be recognized once they visit web pages within Google’s advertising network. Within Google’s advertising network, targeted and interest-based ads can be directed to ads that are based on the web pages visited by the visitor of the Google Advertising network (which also use the remarketing feature of Google).

If you do not wish to receive targeted, interest-based advertising, you can disable the use of cookies by Google for these purposes via the link: https://www.google.de/settings/ads.

§ 8 Plug-Ins

Shariff solution
Our website contains social plug-ins of the social networks “Facebook”( Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Google +” (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA), “Twitter” (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA), “Instagram” (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA), “YouTube” (YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA), “LinkedIn” (LinkedIn Co., 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA), “WhatsApp” (WhatsApp Inc., 1601 Willow Road, Menlo Park, CA 94025, USA) and “Pinterest” (Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA) . It is possible that personal data about visitors to the website may also be collected via these plug-ins, transmitted to the respective service and linked to the respective service of the visitor.

ACN does not collect any personal data via the social plug-ins. In order to prevent data from being transferred to service providers in the USA without the user’s knowledge, we have used the so-called Shariff solution on our website. This has the effect that the respective social plug-ins are initially only integrated as graphics on the website. These graphics contain a link to the website of the corresponding provider of the plug-in. Only when you click on one of the graphics, you will be forwarded to the service of the respective provider. This solution ensures that personal data are not automatically forwarded to the providers of the respective social plug-ins when you visit our website. If you click on one of the graphics of the social plug-ins, data can be transferred to the respective service provider and stored there. If you do not click on any of the graphics, no data transfer takes place between you and the respective provider of the social plug-in.

After clicking on a social plug-in, the respective service provider receives information that you have visited the corresponding page of our online offer. Please note that you do not need to have a user account with the service in question, nor are you already logged in there. However, if you already have a user account with the relevant service provider and are already logged in to this account while visiting our website, the data collected by the social plug-in will be assigned directly to your account. If you do not wish to be assigned to your profile with the service provider, you must log out of your user account before clicking on one of the social plug-ins.

Please note that ACN has no influence on whether and to what extent the respective service providers collect personal data. We are not aware of the scope, purpose and storage periods of the respective data collection. However, we would like to point out that it must be assumed that at least the IP address and device-related information is used and recorded via social plug-ins. It is also possible that the respective service providers use cookies.

The scope and purpose of the data collection by the respective service as well as the further processing and use of your data there can be found in the data protection information directly from the website of the respective service. There you will also receive further information about your corresponding data protection rights and setting options for the protection of your privacy:

§ 9 Hyperlinks

Our website contains hyperlinks to websites of other providers. When you activate these hyperlinks, you will be directed directly to the other providers’ website. You will recognize this when the URL is changed. Please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

§ 10 Your Rights as a Data Subject

If your personal data are processed, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and the following rights apply to you:

  • Pursuant to Art. 15 GDPR you can request information about your personal data processed by us.
  • In particular, you may obtain information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the right to lodge a complaint with a supervisory authority, the origin of your data, if not collected from us, about transfer to third countries or international organisations, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved.
  • Pursuant to Art. 16 GDPR you can immediately demand the correction of incorrect data or the completion of your personal data stored with us.
  • Pursuant to Art. 17 GDPR, you may request the deletion of your personal data stored by us, provided that the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
  • Pursuant to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data and if you refuse their deletion because you need to establish, exercise or defend legal claims. You are also entitled to the right under Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.
  • Pursuant to Art. 20 GDPR, you may request that the personal data you have provided us with be received in a structured, current and machine-readable format or you may request that it be transmitted to another person responsible.
  • Pursuant to Art. 7 para. 3 GDPR you can withdraw your consent at any time. As a consequence, we are no longer allowed to continue the data processing based on this consent for the future.
  • Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority. You can contact the supervisory authority of your habitual residence, place of work or our company headquarters.
  • You can exercise these rights by contacting ACN at info@acninternational.org

§ 11 Right to Object

In case the processing of your personal data is based on legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR insofar as there are reasons which arise from your particular situation or if the objection refers to direct marketing. In the case of direct marketing, you have a general right to objection which will be considered without mentioning any particular situation.

§ 12 Data Security and Security Measures

We are committed to protecting your privacy and treating your personal information confidentially. In order to avoid any manipulation, loss or misuse of your data stored by us, we take extensive technical and organisational security measures that are regularly reviewed and adapted to technological progress. This includes, among other things, the use of recognized encryption methods (SSL or TLS).

However, we would like to point out that due to the structure of the internet, it is possible that the rules of data protection and the above mentioned security measures may not be observed by other persons or institutions for which we are not responsible.

In particular, unencrypted data – e.g. if this is done by e-mail – can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him against misuse by encryption or in any other way.