Privacy Policy
Welcome to Dr. Johannes Hartl Ministries gGmbH. Thank you for your interest in our services. We, Dr. Johannes Hartl Ministries gGmbH (hereinafter “Johannes Hartl” “we” or “us”) take into account the data protection requirements of the European Data Protection Regulation (DSGVO) when implementing our offers and campaigns, as well as when processing your data in the context of your website visit.
We inform you below for what purpose and on the basis of which legal basis we process your personal data and for how long, and what rights you have with regard to data processing.
Please take the time to read our privacy notice, as it contains important information about how we handle your personal data!
Responsible
Dr. Johannes Hartl Ministries gGmbH at Pilsener Str. 6 in 86199 Augsburg, Germany, phone: +4982199875371, e-mail: info@johanneshartl.org is responsible for data processing within the meaning of Art. 4 No. 7 DSGVO.
Contact for your rights
If you believe that the processing of your data by us violates data protection law, you can contact us at info@johanneshartl.org.
General
Subject and purpose of data protection
The subject of data protection is personal data according to Art. 4 No. 1 DSGVO. This is all information that relates to an identified or identifiable person. This includes, for example, information such as first and last names, e-mail addresses, but also usage data such as the IP address or your usage behavior.
We strictly adhere to the principle of data use for a specific purpose (Art. 5 para. 1 b) DSGVO). All personal data will only be processed for the purposes stated in these data usage notes.
Content of these notes
We have compiled the most important information on our typical data processing activities for you below, separated according to data subject groups.
Where we use the term “data” in the text, this refers exclusively to personal data as defined by the DSGVO.
What you should know in any case – your rights
You have the right to request confirmation as to whether data relating to you is being processed by us, disclosure about this data and to further information in accordance with Art. 15 DSGVO.
In accordance with Art. 16 DSGVO, you have the right, taking into account the purposes of the processing, to request the completion of the data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 DSGVO, you have the right to demand that data concerning you be deleted without delay, or alternatively, in accordance with Art. 18 DSGVO, to demand restriction of the processing of the data.
You have the right to request that the data concerning you that you have provided to us be transferred in accordance with Art. 20 DSGVO, as well as the right to request that it be transferred to other data controllers.
In accordance with Art. 7 (3) DSGVO, you have the right to revoke any consent you have given at any time without giving reasons with effect for the future. If you revoke your consent, we may no longer continue the data processing based on this consent for the future. Please address any revocation to info@johanneshartl.org.
Insofar as we process your data on the basis of legitimate interests pursuant to Art. 6 (1) (f) DSGVO, you may object to the future processing of the data relating to you at any time in accordance with Art. 21 DSGVO, insofar as there are reasons for doing so that arise from your particular situation. However, we cannot always comply with your objection, but will examine your request in each individual case.
If your objection is directed against direct marketing, you have a general right of objection against this. In this case, we will implement your right of objection without you having to provide information on a specific situation. Please send your objection to info@johanneshartl.org.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO. The competent authority for us is the Bavarian State Office for Data Protection Supervision (BayLDA). However, you can also contact the supervisory authority of your usual place of residence.
You can reach the BayLDA as follows:
- Postal address: P.O. Box 1349, 91504 Ansbach, Germany
- Adresse: Promenade 18 in 91522 Ansbach
- Telephone: +49 (0) 981 180093-0
- Fax: +49 (0) 981 180093-800
- E-Mail: poststelle@lda.bayern.de
- Internet: www.lda.bayern.de
Information on our typical data processing separated by data subject groups
If you visit our site only for information about Johannes Hartl and his offers, we process your data only to the extent necessary to display our website on the Internet on your end devices in the best possible way. In principle, it is possible to use the website without providing personal data.
We write “in principle” because we process your IP address briefly to enable you to view our website. The IP address, also known as the Internet Protocol address, is an address in computer networks that can be used to address and reach web servers or individual end devices. In order for the data packets that make up our website to be assembled on your terminal device and displayed as a web page, two IP addresses are required, yours and ours.
In order for our web server to fulfill your data request, our web server needs to know, i.e. “process”, your IP address. Each time you visit our website, our system automatically collects data and information from the system of your terminal device. The following data is processed in the process:
- Information about the type of browser and the version used.
- Your operating system
- Your Internet service provider
- Your IP address
- Date and time of access
- Websites from which your system accesses our website or services
- Websites that are accessed by your system via our website or services
This data is usually stored automatically in a log file. A combination of this data with other personal data does not take place.
The temporary storage of your data by the system is necessary to enable the transfer of website content to your computer. For this purpose, your data must remain stored on our servers for the duration of the session.
In addition, your data is processed in log files to ensure the functionality of our website. Furthermore, we use the data to optimize our web offer and to ensure the security of our information technology systems. An evaluation of your data for marketing purposes does not take place in this context.
Our legitimate interest in data processing also lies in the aforementioned purposes.
The legal basis for the temporary storage of your data and the creation of log files is Art. 6 para. 1 lit. f DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of the processing of log files, deletion takes place after 14 days at the latest. Storage beyond this is possible. In this case, your IP address will be deleted or alienated, so that an assignment to your end device is no longer possible.
Possibility of objection and removal
The collection of data for the provision of the website and the processing of the data in log files is absolutely necessary for the operation of our online presence. Consequently, you cannot object to the data processing.
Required cookies – Technically necessary cookies and cookies for range measurement
We strive to make your visit to our website optimal, i.e. primarily user-friendly, and to offer you services that are best suited to your individual needs. For this purpose, we use cookies, and to analyze usage data – tracking and analysis tools. These provide us with insights and statistics that help us to make our online presence, our communication with you and ultimately our offers more interesting and relevant to you.
When you access our website, a so-called “cookie and consent banner” of the company Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany, informs you about the use of cookies and refers to this privacy policy. Here, further below, you will also find a note on how you can prevent the storage of cookies in the browser settings. Cookies are text files that are stored in your Internet browser or by your Internet browser on your terminal device.
When you visit one of our websites, your interaction with our Consent Banner is stored on your system via the “Borlabs cookie”. This cookie contains a characteristic string that allows us to uniquely identify your browser when you return to our website or service.
The purpose of using technically necessary or also essential cookies is to simplify the use of our online offer for you. The user data processed by technically necessary cookies are not used to create user profiles.
This cookie is used to ensure that our website is used in accordance with data protection regulations, in particular to ensure that your consent is obtained lawfully and that we do not have to ask for your consent each time you visit the website. These purposes are also our legitimate interest in processing your data.
The legal basis for processing your data using Borlabs Cookie’s Consent Management Platform is Art. 6 (1) lit. f DSGVO.
Possibility of objection and removal in the browser settings
Cookies are stored on your terminal device and transmitted to us by it. Therefore, you as a user also have full control over the use of cookies. In principle, you can set your web browser so that no cookies are stored on your computer. To do this, you can set the appropriate option in the system settings of your browser. Under certain circumstances, however, individual functions of websites may then not be usable.
Here you can find out about the setting options for the most commonly used browsers:
We also use cookies on our websites that allow us to measure your surfing behavior. The data collected in this way is pseudonymized where possible by technical precautions. The data is not stored together with your other data. Therefore, an assignment of the data to your person is no longer possible without further ado.
Your data is processed on the basis of our legitimate interest in designing and optimizing our website to meet your needs and interests.
Retention, objection and elimination options
You as a user have full control over the use of cookies, because cookies are stored on your end device and transmitted to us by it. Please refer to our cookie overview to find out when which cookies are automatically deleted from your end devices. You can deactivate or restrict the transmission of cookies by making the appropriate settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. You can also make your cookie settings via the Cookie and Consent banner.
If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website and services.
If you have given us permission to use marketing and analysis cookies and similar technologies on you, we will use the information obtained in this context as described below. Here, too, you have full control over the use of cookies. Here, too, you can control and determine the transmission of cookies through appropriate settings in your Internet browser or via the Privacy Cockpit.
Google Universal Analytics
We use Google Universal Analytics on our pages, a service provided by Google Ireland Limited, with its registered office at Gordon House, Barrow Street Dublin 4. in Ireland (“Google”). We use Google Analytics with the use of “cookies”. Cookies are text files that are stored on your terminal device and enable us to analyze your use of our websites and services. The information generated by the cookies about your use of our websites and our services is usually transmitted to a Google server in Ireland and stored there. We have activated IP anonymization on our sites and in our services. Therefore, your IP address will be shortened by Google beforehand. Only in exceptional cases will your IP address be transferred to Google servers in the U.S.A..
We use data collected via your Google Analytics Client ID, as well as other data generated from Google’s web analytics applications, to perform analyses of your interactions with our services and websites. More information about how Google works can be found here.
For web analytics, Google uses the information obtained with the help of the cookies set on our behalf to evaluate your use of our websites and services, to compile reports for us on website activity, and to provide us with other services related to the use of our websites and internet usage. With the help of Google’s Analytics Demographics and Interest Reporting, for example, we obtain analyses of the age, gender and interest categories of our users. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
You can also prevent the collection of data generated by cookies and related to your use of the website and services (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
The storage of Google Analytics cookies is based on your consent. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. The storage takes place for 2 years, unless you make use of your opt-out options.
Google Tag Manager
We use Google Tag Manager in connection with marketing and analysis to manage Google tools. This is a tag management system that allows us to quickly and easily update tracking codes and related code fragments, commonly called “tags”, on our websites.
You can get an overview of Google’s privacy policy in connection with Google Universal Analytics and Google’s privacy policy here.
The data processing is also based on your consent pursuant to Art. 4 No. 11 DSGVO. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. Storage is for an unlimited period of time, unless you make use of your revocation options.
We also use other tracking tools on our websites based on your consent pursuant to Art. 6 (1) lit. a DSGVO, which enable us to offer you a more customized and interactive web experience by serving ads on your social media channels. You will thus receive advertising that is more relevant to you and thus more interesting. For this purpose, we use cookie-based tools offered by social media platform providers. Specifically, this concerns tracking tools from:
- Facebook Ireland Ltd., whose business address is 4 Grand Canal Square Grand Canal Harbour Dublin 2 in Ireland. Facebook Ireland Ltd. is a subsidiary of Facebook Inc. and is legally located at 1601 S California Ave, Palo Alto 94304 in California in the U.S.A. More information about the tool we use can be found here. Additional information on data processing by Facebook can be found here.
In order to be able to use the aforementioned tool, we integrate so-called tracking pixels into our websites. These tracking pixels are transparent, pixel-sized images with tracking functions that load a small library of tracking functions. These functions allow us to track your activities on our websites, such as the URLs and domains you have visited, or devices you have used while doing so, and especially conversions. Conversions or the conversion rate represent a key figure with which we can measure the success of our activities. The conversion rate describes, for example, the proportion (“rate”) of visitors to our websites who register for one of our actions after interacting with our offers. The conversions are based on the cookie set by Facebook and enable us to compare our website visitors with the corresponding user accounts on the social media platforms. The data is deleted after one year, unless you have exercised your right of revocation at an earlier point in time.
Social Media Buttons (recommendation buttons) – Facebook und Twitter
We maintain presences in social media. They are part of our external presence. Our aim is to inform target groups and to exchange information with interested parties. Social media enable us to establish contact quickly electronically and thereby communicate directly via the media of your choice, as stipulated by Section 5 (1) No. 2 of the German Telemedia Act (TMG).
Recommendation buttons from Facebook, Instagram and YouTube are integrated on our website. The links to these platforms are integrated in such a way that your data is only sent to the respective service when you click on the recommendation button.
We have no influence on what data is transmitted to Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) or YouTube (Google Ireland Limited, Gordon House, Barrow Street Dublin 4) after clicking. You use the platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions, such as commenting, sharing or rating our posts and liking our site. Most interactive functions are reserved for registered and logged-in users.
You have the following rights regarding the processing of your data: Right to access; Right to rectification; Right to erasure; Right to restriction of processing; Right to object; Right to data portability and the right to complain about unlawful processing of your personal data to the competent data protection authority.
We do not have complete access to your personal data at the social media providers. Therefore, you should contact the provider of the respective platform directly when asserting your rights. The latter has access to the personal data of its users and can take the appropriate measures and provide information. We will be happy to support you if you still require assistance. To do so, please contact info@johanneshartl.org.
For a detailed presentation of the respective processing and the options to object (opt-out), please refer to the information linked below:
Objection with Instagram
For a detailed presentation of the respective processing and the options to object (opt-out), please refer to the information linked below:
For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:
According to the case law of the European Court of Justice, we are joint controllers in the cases listed below.
Joint responsibility with Facebook
As the operator of fan pages on the social network Facebook, we are joint responsible parties with the operator of this network within the meaning of Art. 4 No. 7, 26 DSGVO. Facebook is a service for which Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland is responsible. When visiting our fan pages, personal data is processed by the responsible parties, i.e. by us and by Facebook.
We have entered into an agreement with Facebook which, among other things, governs the terms and conditions for the use of our respective fan page. The terms of use of Facebook as well as the other conditions and guidelines listed there at the end are authoritative for the use.
In connection with the operation of our respective fan page, we use the Page Insights function to obtain statistical data on users. For this purpose, according to its own information, Facebook stores a cookie on the terminal device of the registered user who visits our fan page. So when you visit our fan page, Facebook stores the cookies listed here on your terminal device to enable us to statistically analyze your visit. The information stored in the cookies is processed by Facebook, especially when you as a user visit Facebook services and services provided by other companies that use Facebook services. More information about Facebook’s use of cookies can be found here, in their Cookie Policy.
In connection with statistical analysis, we use the filters provided to us by Facebook to specify the categories of data according to which Facebook provides us with anonymized statistics. In this context, the following criteria or categories are available to us in anonymized form for evaluating your activities on our Facebook page, provided that you, as a user, have provided the relevant information:
- Location (place of work or residence)
- Field of activity
- Career level
- Industry
- Company size
- Age range
- Gender
- Language
- Mobile or stationary page views
- Interactions in the context of posts (e.g., reactions, comments, shares, clicks, views, video usage time)
- Time of use
Sharing of data in the context of Facebook interactions
Joint responsibility with YouTube
In its ruling in case C-210/16, the EU Court of Justice decided that platform operators (in this case YouTube) and the operator of a channel located on the platform are jointly responsible for the data processing carried out via the respective channel. In this respect, the platform operator and the channel operator are to be regarded as joint controllers pursuant to Article 26 of the GDPR.
Shared responsibility with Instagram
Johannes Hartl is responsible for the content on the Instagram club page. The Instagram service is a product provided by Facebook Ireland Limited (“Facebook”). As the operator of an Instagram club page, we are jointly responsible with the operator of the social network Facebook Ireland Ltd) in the sense of Art. 4 No. 7 DSGVO. When visiting our Instagram page, personal data is processed by the responsible parties.
Instagram is an online platform that enables the sharing of photos and videos. Users can edit photos and videos and add filters. Other users can in turn share the photos and videos, comment on them or mark them as “like”. Users can also get in touch with each other by writing private messages.
As the person responsible for this site, we have entered into agreements with Facebook, which, among other things, regulate the conditions for using the Instagram page.
There is a possibility that your data may also be processed outside the European Union by Facebook Inc. in the USA. We ourselves do not pass on any personal data.
The shared responsibility agreement with Facebook essentially means that you can assert your data subject rights directly against Facebook. However, should our assistance be required, please feel free to contact us at any time.
Provision of statistical evaluations – Instagram Insights:
The Instagram page is an association page and has the Instagram Insights feature. This means that part of the data collected by Facebook during use is made available to us as a statistical evaluation in anonymized form. However, this statistical evaluation only relates to the audience, content and activity on our Instagram page. Specifically, the evaluation includes the following data:
- Number of “likes” of our photos and videos.
- Number of comments on our photos and videos
- Number of people who have seen a photo or video
- Number of times a photo or video was shared
- Number of times a photo or video was reported as spam
- Number of times it was clicked that the user no longer likes the page
- Age, gender, location, and language of visitors in aggregate form
This information transmitted to us by Facebook is anonymized and cannot be associated by us with your person. However, this does not necessarily mean that the data collection and data processing by Facebook itself is anonymized. For more information, please see the Instagram privacy policy.
Visibility of your personal data to us and other users:
When using certain interactive functions on Instagram (e.g. the comment function or the “Like” button), comments or likes are visible to other users and to us as the provider of the Instagram page. Thus, a direct user assignment can be made based on the disclosed personal data.
We have no influence on interactive functionalities and visibility of comments, likes or other activities on our Instagram page. We are therefore not the responsible party in terms of data protection law. The type, scope and duration of the processing and storage of personal data in this regard are determined by Facebook, so Facebook is also responsible for this.
It is always possible to visit our Instagram page without leaving comments or clicking “Like”.
Please note that the interactive functions of Instagram are generally only possible after registration. Data relating to this may also be processed by Facebook, but does not fall within our area of responsibility.
Contacting us via private message or comment
It is possible to contact us through our Instagram page either by private message or comment. In this way, you can contact us with questions about us, our Instagram page or other inquiries.
When you contact us, we will be provided in particular with your username, the text of the request and, if applicable, other personal data from you. We store this data in order to be able to answer your inquiry. Comments are public and visible to all other Instagram users.
We delete the data generated in the course of your inquiry/contact six months after the last message. If there are legal storage obligations, the data will be stored for the duration of the legally required storage obligation. A public comment can only be deleted by you or by Instagram.
Purposes of processing
The purpose of processing personal data in connection with our Instagram presence is, on the one hand, to compile statistics on visitor flows. This allows us to better understand how users interact with our site and the products and services presented. It allows us to better design our internet content and adapt our products and services to the needs of users. On the other hand, we process users’ personal data in order to be able to communicate with you directly via media of your choice.
Legal basis of data processing
We operate this Instagram page to present ourselves to Instagram users and to communicate with them directly. The processing of your personal data is based on our legitimate interests in an optimized company and product presentation as well as direct communication with Instagram users (Art. 6 para. 1 lit. f DSGVO). This also corresponds to the reasonable expectations of the data subjects, as the communication is not initiated by us, but by them.
If we publish images of individuals, this is done via consent (legal basis: Art. 6 para. 1 lit. a DSGVO), on the basis of a contractual agreement (legal basis: Art. 6 para. 1 lit. b DSGVO) and in exceptional cases on the basis of legitimate interests (legal basis: Art. 6 para. 1 lit. f DSGVO in conjunction with § 23 para. 1 No. 3 Art Copyright Act).
Possibilities of objection and removal
In accordance with Art. 21 DSGVO, you have the right to object to processing for reasons relating to your particular situation at any time. You can make your right of objection via the Instagram/Facebook settings. If you wish to object to processing within our area of responsibility, you can contact us for this purpose.
Storage period
Since, as the operator of an Instagram page, only limited personal data is transmitted to us as described above, the criteria specified by Instagram apply to the storage period, unless it is data accrued in the context of your inquiry/contact. These will be deleted by us six months after the last message.
Information videos on our website
If we integrate videos on our website, these are stored on YouTube. YouTube is a platform offered by YouTube LLC, located at 901 Cherry Ave, San Bruno, CA 94066 in the USA. YouTube is a company affiliated with Google. We embed our videos via YouTube because local hosting is not powerful enough to display the videos.
When you click on one of our videos, a connection to YouTube is established to embed the video for you on our site. The integration of the video results – for technical reasons – in a call to the YouTube or Google servers. The servers are located in Ireland, i.e. in the EU. We have no influence on what data is transmitted to YouTube after clicking. Therefore, for the associated use of data from your browser or terminal device, we refer you to the privacy notices of YouTube or Google, which you can find here .
You have the right to object to the processing of your personal data, but you must address the objection to YouTube and Google.
When you visit our website with an embedded YouTube video, YouTube receives information about the specific website you are visiting. In the process, your personal data is transmitted to YouTube as just described. Such a transmission takes place regardless of whether you have logged in to your YouTube account or whether you do not have a corresponding account at all. If you have logged in to your YouTube account, your personal data will be assigned to your YouTube profile. If you do not want your personal data to be assigned to your profile, you should log out of your YouTube account before activating one of our videos. YouTube and Google use this data for advertising, market research and / or a demand-based design of their website.
Interested parties and communication partners
If you contact us by calling us, sending us an e-mail, fax or letter, we process your data (name, mail address, message content) to process your request. The provision of data is necessary in order to process your request. Without the provision of data, communication is not possible.
Purpose
We thus process your data for the purpose of efficient and effective communication. There are no plans to change this purpose.
Legal basis
The legal basis for processing your data is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest is based on being able to communicate efficiently and effectively with interested parties as well as with other communication partners. Furthermore, as the operator of this website, we are legally obliged to provide you with an effective means of contact. Therefore, Art. 6 para. 1 lit. c) DSGVO in conjunction with § 5 para. 1 No. 2 TMG forms the legal basis for the processing of your data.
Deletion
In principle, your data will be deleted as soon as the communication has been completed or the purpose has ceased to apply, unless we are legally obliged, e.g. as a result of commercial or tax regulations, to retain the communication data for a longer period. In this case, retention may be for slightly more than ten calendar years.
Our service providers
We use service providers in the provision of services, in particular for the provision, maintenance and care of IT systems. Our service providers process your personal data on our behalf and according to our instructions within the European Union (EU), unless we have explicitly described otherwise in this privacy notice.
We have concluded the EU standard contractual clauses with non-European providers. We point out that these providers thereby undertake to comply with the data protection standards of the EU, so that there is an appropriate level of protection for your personal data under data protection law.
Notice
This English version of the Privacy Policy is for informational purposes only. The legally binding version of the Privacy Policy is the German version.
