Privacy policy

This policy explains, in accordance with Art. 13 GDPR, which personal data are processed when you visit this website or contact us, for what purpose and on what legal basis. This English version is provided for convenience; the German version is authoritative.

At a glance

This website does not set any cookies itself.
Fonts are served from our own server. Maps are not embedded, only linked.
YouTube videos load only when you click “Play”.
We use visitor statistics without cookies (Umami) only with your consent; you can withdraw it at any time.
We use no advertising services and no contact form.

Controller

Christ the Living Petra Church e.V.
Sportplatzstraße 8
84155 Bodenkirchen, Germany
Represented by: Issac Franklin David, board member
Email: contact@christ-livingpetra.de
Phone: +49 151 75930759

Hosting and delivery of the website

This website is hosted on Microsoft Azure (service “Azure Static Web Apps”). The provider is Microsoft Ireland Operations Limited, Dublin, Ireland. Microsoft processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum).

When you open the website, your browser automatically transmits technical data required to deliver it: IP address, date and time of access, page or file requested, amount of data transferred, the previously visited page (referrer), and browser and operating system. These data are processed to deliver the website and to keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, working website. We do not keep access logs ourselves, do not analyse these data and do not combine them with other data. The provider deletes them as soon as they are no longer needed for these purposes.

Microsoft may also process data outside the EU, in particular in the USA. Microsoft is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the data processing agreement includes the European Commission’s standard contractual clauses (Art. 46 GDPR).

The connection to this website is encrypted using TLS (shown by https:// in the address bar).

No cookies, locally hosted fonts

This website does not set any cookies itself. Apart from your browser’s normal cache, it only stores your choice about visitor statistics on your device (see below), so that we don’t ask you on every visit; this does not require consent (§ 25(2) No. 2 TDDDG). After you click “Play”, YouTube may store data on your device (see below). The fonts are loaded from our own server; there is no connection to font providers such as Google.

Visitor statistics with Umami

To understand which pages are read and how visitors find us, we use the statistics service Umami, provided by Umami Software, Inc., USA – but only if you agree in the notice at the bottom of the screen. Until then, no connection to Umami is made. Umami sets no cookies and does not recognise you across different websites.

With each page view, the following are transmitted: the page and its title, the previously visited page (referrer), your browser’s screen size and language setting, and – for technical reasons – your IP address and information about your browser, operating system and device type. Umami derives an approximate location (country, region, city) from this and creates a pseudonymous identifier from your IP address and browser information so that visits can be counted; the IP address itself is not stored. The data are therefore pseudonymised, not anonymised. We only see aggregated statistics and cannot identify individuals. URL parameters, such as click identifiers from social networks, are not recorded. We also count clicks on certain buttons and links – WhatsApp, call, email, map services, “Plan your visit”, play video, joining the prayer group, calendar entry and Google review – without any message content.

Statistics are only active on christ-livingpetra.de. If your browser sends “Do Not Track” or “Global Privacy Control”, we do not ask and do not load the statistics.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Umami processes the data on our behalf under a data processing agreement (Art. 28 GDPR). The statistics data are stored in the EU (Frankfurt). Service providers based in the USA are involved in delivering the script and receiving the data (including Cloudflare and Vercel), and Umami Software, Inc. is also based in the USA. For this, the European Commission’s standard contractual clauses are incorporated into the data processing agreement (Art. 46(2)(c) GDPR). Umami publishes its sub-processors and their processing locations at https://umami.is/subprocessors. The statistics data are deleted after six months.

Withdrawal: You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR) – via “Statistics settings” at the bottom of every page or with the following button. Your browser stores your choice on your device; if you clear your browser’s site data, we will ask again on your next visit.

YouTube videos

Some pages let you play videos from our YouTube channel. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Until you click “Play”, no connection to YouTube is made; you only see a graphic or preview image from our own server. Only when you click is the video loaded via youtube-nocookie.com (“privacy-enhanced mode”). Google then receives, in particular, your IP address, information about your browser and device, and the address of our website. YouTube may store or read information on your device (such as cookies or local storage) and transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is your consent, which you give by clicking “Play” (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We do not store your choice: after reloading the page there is no connection to YouTube until you click again. For more information, see Google’s privacy policy: https://policies.google.com/privacy

Contact by email, phone, text message or WhatsApp

When you contact us, we process the information you provide – such as your name, phone number, email address and the content of your message – in order to respond. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries); where your enquiry concerns membership or taking part in our activities, Art. 6(1)(b) GDPR. We delete the data once your request has been dealt with, unless statutory retention obligations apply.

Email: Emails to contact@christ-livingpetra.de are processed via Microsoft 365 (Exchange Online) by Microsoft Ireland Operations Limited. Microsoft acts on our behalf; the same data processing agreement and the same safeguards for transfers to the USA apply as for hosting (see above).

Prayer requests: A prayer request may contain information about your faith or your health. We treat such requests confidentially and use them solely to pray for you. We share them with others, such as a prayer group, only with your explicit agreement. The legal basis is your explicit consent, given by sending the request (Art. 9(2)(a) GDPR); you can withdraw it at any time.

WhatsApp: Our WhatsApp links only open WhatsApp when you tap them; no data are transmitted before that. If you message us on WhatsApp, the provider, WhatsApp Ireland Limited, also processes data – in particular your phone number and connection data. Message content is end-to-end encrypted. WhatsApp may transfer data to other Meta companies, including in the USA. Information from WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea. If you prefer not to use WhatsApp, you can reach us by email or phone.

Links to Google Maps, Apple Maps, OpenStreetMap, YouTube, Facebook and Instagram are plain links. The provider’s page opens only when you click a link; that provider is responsible for any processing there.

Our Facebook page and Instagram profile

We run a page on Facebook (https://www.facebook.com/christthelivingpetrachurch) and a profile on Instagram (https://www.instagram.com/christthelivingpetra/). Meta Platforms Ireland Limited is primarily responsible for processing your data when you visit these pages.

For the page statistics (“Page Insights”), which Meta provides to us only in aggregated form, we are joint controllers with Meta (Art. 26 GDPR). In an agreement, Meta has assumed primary responsibility for this processing, including the duty to inform and handling data subject requests. The essential content of this agreement is available at https://www.facebook.com/legal/terms/information_about_page_insights_data. We cannot identify individual visitors from these statistics. The legal basis for our part is Art. 6(1)(f) GDPR; our legitimate interest is informing people about our church and understanding the reach of our posts.

You can exercise your rights directly with Meta or with us; we forward requests that concern Meta. Everything on our Facebook page is also available on this website.

Services, livestreams and recordings

We broadcast services live or as recordings on our YouTube channel. The camera is fixed on the pulpit; the congregation is not in the picture. People who take part within the camera’s view – for example in the sermon, readings or worship – are recorded only with their written consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). This consent can be withdrawn at any time with effect for the future; we will then remove or edit recordings already published, as far as technically possible. Google’s privacy policy also applies on YouTube.

Storage period

Unless stated otherwise in this policy, we keep personal data only as long as necessary for the respective purpose or as required by statutory retention obligations.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). Simply contact contact@christ-livingpetra.de.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint (Art. 77 GDPR): You can complain to a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Further information

Copies of the standard contractual clauses referred to in this policy are available on request at contact@christ-livingpetra.de.

You can use this website without providing any personal data; providing data is neither a statutory nor a contractual requirement. We do not use automated decision-making, including profiling.

We update this policy when our website, our activities or the law change. The version published here applies.