Data protection

Thank you for your interest in our online offer. The protection of your privacy is of particular concern to us. The following information is intended to explain to you how, to what extent and for what purposes we process personal data and what rights data subjects are entitled to.

1 General section

1.1 Scope of application

This privacy policy applies to all pages accessible at https://www.eh-ludwigsburg.de, including their subpages (hereinafter referred to as the "website").

1.2 Legal basis

The legal basis for data protection can be found in the Church Law on Data Protection of the Protestant Church in Germany (DSG-EKD).

1.3 Name and address of the controller

The controller within the meaning of the DSG-EKD and other national data protection laws of the member states as well as other data protection regulations is

Ludwigsburg Protestant University of Applied Sciences

• hereinafter: "the controller"/"we"/"us".

You can find more information about the controller in our legal notice.

1.4 Name and address of the data protection officer

We have appointed a data protection officer: Attorney Ziar Kabir SCO-CON:SULT GmbH Hauptstraße 27 53604 Bad Honnef E-Mail: datenschutz(at)eh-ludwigsburg.dewww.sco-consult.de

1.5 Contact details of the competent supervisory authority

The Commissioner for Data Protection of the EKD Data Protection Region South Branch Office Ulm Hafenbad 22, 89073 Ulm Phone: +49 (0) 731 140593 0 Fax: +49 (0) 731 140593 20 Email: sued(at)datenschutz-ekd.de

1.6 Principles of data protection and your rights

1.6.1 Definitions

This data protection declaration is based on the terms used in the enactment of the DSG-EKD. You can view the definitions in the official gazette of the Evangelical Church in Germany.

1.6.2 Principles for the processing of personal data

The following principles apply to all processing operations about which information is provided in this privacy policy:

1.6.2.1 Purpose and scope of the processing of personal data Personal data is only collected for the specified purposes. The scope of processing is limited to what is necessary for the purposes of processing. The controller reserves the right to process personal data if and insofar as this is necessary for the assertion, exercise or defense of legal claims. 1.6.2.2 Legal bases for the processing of personal data Personal data may be processed if at least one of the following conditions is met:

• Permission or order by legal regulation (Section 6 No. 1 DSG-EKD)
• Consent of data subjects (Section 6 No. 2 DSG-EKD)
• Necessity for the fulfillment of the tasks of the responsible body (§ 6 No. 3 DSG-EKD)
• Necessity for other tasks that are in the church's interest (Section 6 No. 4 DSG-EKD)
• Necessity for the performance of a contract or pre-contractual measures (Section 6 No. 5 DSG-EKD)
• Necessity for the fulfillment of a legal obligation (§ 6 No. 6 DSG-EKD)
• Necessity for the protection of vital interests (Section 6 No. 7 DSG-EKD)
• Safeguarding a legitimate interest of a third party, provided that the interests of the data subject worthy of protection do not outweigh this (Section 6 No. 8 DSG-EKD)

1.6.2.3 Storage period of personal data The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

1.6.2.4 Recipients of personal data Recipients of personal data of data subjects are generally only the controller and processors employed by the controller in compliance with data protection law. Data may also be passed on to third parties if the controller is entitled to do so by virtue of a permission standard or is obliged to do so due to statutory provisions, administrative or judicial orders.

1.6.2.5 Transfer of personal data to third countries If personal data of data subjects are transferred to countries outside the European Union (EU) or outside the European Economic Area (EEA), this will only take place if there is an adequate level of protection (Section 10 (1) No. 1 DSG-EKD) or if suitable guarantees are in place (Section 10 (1) No. 2 DSG-EKD) or under the conditions of Section 10 (2) DSG-EKD for exceptions in certain cases.

1.6.3 Rights of data subjects

Data subjects have the following rights:

1.6.3.1 Right to withdraw consent (Section 11 (3) DSG-EKD) You can withdraw your consent to the processing of data once given at any time with effect for the future.

1.6.3.2 Right to information (Section 19 DSG-EKD) You can request information as to whether your personal data is being processed. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period or criteria for this, the existence of a right to rectification, erasure, restriction of processing, objection or the existence of the right to lodge a complaint. You can also request information about the origin of data that was not collected from you. The right to information does not exist if the data or the fact of its storage must be kept secret due to a legal provision or the overriding interests of third parties and the interest in information must take a back seat or if the information would jeopardize the performance of the church's mission or if the information would require a disproportionate effort.

1.6.3.3 Right to rectification (Section 20 DSG-EKD) You may request the immediate rectification of incorrect personal data or, taking into account the purposes of the processing, the completion of your stored personal data. If the data is processed for archiving purposes in the interest of the church, the right to rectification may be restricted.

1.6.3.4 Right to erasure (Section 21 DSG-EKD) Personal data must be erased if the storage is unlawful or the data is no longer required by the controller to fulfill its tasks or you have withdrawn your consent or objected to the processing and there are no overriding grounds for the processing or other legal bases or there is a legal obligation to erase the data or the erasure of personal data collected in electronic offers made directly to minors is requested. If we have made your data public, we are obliged to take reasonable steps to inform each recipient that you have requested the deletion of all links to or copies of the personal data concerned.

The obligations to delete or inform recipients about the deletion do not exist if the processing is necessary to exercise the right to freedom of expression and information or to fulfill a legal obligation or to perform a task in the interest of the church or to assert legal claims or to exercise or defend rights or if the processing is carried out in the exercise of official authority vested in the controller.

1.6.3.5 Restriction of processing (Section 22 DSG-EKD) You have a right to restriction of processing if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data or if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead or if we no longer need the personal data for the purposes of the processing, you need it for the establishment, exercise or defense of legal claims, or if you have objected to processing pursuant to Section 22 DSG-EKD and it is not yet certain whether our legitimate grounds override your grounds.

1.6.3.6 Right to data portability (Section 24 DSG-EKD) You have the right to receive the personal data you have provided to us on the basis of your consent or a contract concluded with us, which is processed using automated procedures, in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, provided that this does not adversely affect the rights and freedoms of other persons and is technically feasible. The right to data portability does not apply to processing that is necessary for the performance of a task carried out in the interest of the church or in the exercise of ecclesiastical supervision vested in the ecclesiastical authority.

1.6.3.7 Right to object (Section 25 DSG-EKD) You have the right to object, on grounds relating to your particular situation, to processing which we carry out on the basis of Section 6 (1), (3), (4) or (8) DSG-EKD; this also applies to the processing of personal data in the context of profiling. Processing may only be continued after your objection if there is a compelling interest of the church, if the interest of a third party prevails or if a legal provision requires processing.

1.6.3.8 Right to lodge a complaint (Section 46 (1) DSG-EKD) Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations.

1.7 Information on cookies and similar technologies

Cookies are text files that are created by the browser when a page is accessed in order to store data about a browser during and after a page visit. For this purpose, unique character strings are regularly stored in the cookie by means of which a server can recognize a browser. Cookies can be stored by the visited page (first-party) or by third-party providers (third-party) if their services are used on the visited page. If a third-party service is used on several websites, the third-party provider can store information about user activity in cookies and track it across several pages. The domain of the page from which the cookie originates is stored in the cookie and access to this domain is restricted. Cookies are either valid for the duration of a browser session (session cookies) or until a point in time noted in the cookie (persistent cookies). Expired cookies are no longer loaded by the browser when you visit the site and are deleted or overwritten directly, depending on the browser.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. However, if you deactivate cookies, you may not be able to use all the functions of our website to their full extent. Information on the cookie settings of your browser can be found in the help section of the browser or under the following links:

• To Google Chrome

• To Mozilla Firefox

• To Safari

• To Microsoft Edge

• To Internet Explorer

• To Opera

In addition, data may be stored for the same purposes in your browser's local storage or local session storage.

For information on the use of cookies or similar technologies when visiting our website, please refer to the information on individual processing operations in the special section of the privacy policy.

1.8 Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.

2 Special section

2.1 Necessary processing when visiting our website

2.1.1 Provision of our website

As part of order processing, we commission an external service provider to provide the website. The service provider is obliged to comply with data protection regulations to the same extent as we are and offers the guarantee of reliable and secure handling of the data on our website. Personal data of data subjects that is collected via the website is stored on the service provider's servers within the European Economic Area (EEA). The data is stored separately from other applications. The processing of personal data by the service provider only takes place in accordance with our instructions and insofar as this is necessary to fulfill its performance obligations.

2.1.2 Collection of access and connection data

Each time our website is accessed, our system automatically collects information from the computer system of the accessing computer.

2.1.2.1 Scope of processing The following data is collected:

• Browser type and version used,

• operating system,

• IP address,

• Date and time of access,

• address of the website from which a browser accesses our website

• address of the page of our website accessed by the browser.

The data is stored in log files. This data is not stored together with other personal data of data subjects. 2.1.2.2 Legal basis of the processing The legal basis for the processing is § 6 No. 4 DSG-EKD.

2.1.2.3 Purpose of processing The processing of the IP address by the system is necessary to enable delivery of the website to the computer of the data subject. It is stored in log files to monitor system security and stability.

2.1.2.4 Storage period Data in log files is anonymized after 7 days, unless the aforementioned purposes require longer storage.

2.1.2.5 Possibility of objection and removal The provisions of § 25 DSG-EKD apply. As the processing is mandatory, there is generally no possibility to object to the processing.

2.1.3 Allocation of browser sessions

When you use our website, so-called session cookies may be stored in your browser.

2.1.3.1 Scope of processing Our system assigns a random, unique identifier to your browser and stores it for the duration of your browser session. The identifier is stored in a cookie and transmitted to our system when you access pages of our website. The identifier stored in the cookie cannot be used to identify data subjects. The cookie is only valid for our website and cannot be used to track your activities on third-party websites.

2.1.3.2 Storage and access to data in the browser The following cookies can be stored in your browser and read out for the assignment of sessions:

2.1.3.3 Legal basis of the processing The legal basis of the processing is § 6 No. 4 DSG-EKD.

2.1.3.4 Purpose of processing Session identifiers are used to be able to assign requests to a browser on the system side. The assignment of requests to browsers by a server is necessary for the assignment of authorizations, the use of protected areas and for the maintenance of logins.

2.1.3.5 Storage duration The session data is deleted at the end of the session or after a time limit appropriate to the purposes has been exceeded.

2.1.3.6 Possibility of objection and removal The provisions of § 25 DSG-EKD apply. As the processing is mandatory, there is generally no possibility to object to the processing.

2.1.4 Management of consents

Our website stores the status of your consents for services used on our website in a cookie. No personal data is processed with the consent banner we use.

To manage your settings or consent, the following cookie is stored in your browser and read out. If you delete this cookie, all saved settings will be deleted and any consent you have given will be revoked. Our website will then use the default settings for the respective services.

2.1.5 Accessible provision of the information offer

Our website uses the ReadSpeaker service of the operating company ReadSpeaker, Dolderseweg 2A, 3712 BP Huis ter Heide, Netherlands (hereinafter referred to as "ReadSpeaker"). The ReadSpeaker read-aloud function is used to enable barrier-free access to our content.

2.1.5.1 Scope of processing When you visit our website, a connection is established to ReadSpeaker's servers in the European Economic Area in order to load the resources required for the read-aloud function. Your IP address, the address of the page visited and technical connection data are transmitted.

You can use the read aloud function by highlighting a text and selecting "Read aloud" in the menu that appears.

The text content is transmitted to a ReadSpeaker server. An audio file is generated in real time and sent to your browser. When you use the read aloud function, a necessary cookie is saved. If you change the settings of the audio player, the settings are saved in a cookie (see cookie overview). The storage is necessary in order to be able to provide the read-aloud function in the configuration set by the user over several page views. Further information can be found in the provider's privacy policy at https://www.readspeaker.com/de/erklarung-zum-datenschutz/.

2.1.5.2 Storage and access to data in the browser The following cookies can be stored and read in your browser to store user settings.

2 .1.5.3 Legal basis of the processing The legal basis of the processing is § 6 No. 4 DSG-EKD.

2.1.5.4 Purpose of processing The processing of your IP address for the transmission of audio content is carried out to provide a barrier-free user experience on our website.

2.1.5.5 Storage period We do not store any personal data when using the read-aloud function. Your transmitted IP address is not processed further.

2.1.5.6 Possibility of objection and removal The provisions of § 25 DSG-EKD apply. As the processing is necessary to ensure the barrier-free usability of our website, there is generally no possibility to object to the processing.

2.2 Optional processing when visiting our website

2.2.1 Google Tag Manager

The Google Tag Manager service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") is used on our website. Google acts as a processor in this service relationship.

2.2.1.1 Scope of processing If you have consented to the use of marketing cookies, a connection to Google's servers will be established when you visit our site in order to load the script required for Google Tag Manager. Your IP address, the address of the page visited and details of the browser and operating system used are transmitted. When using the Google Tag Manager itself, no personal data is processed, only settings that are used to control and activate or deactivate optional services.

Further information can be found in the following Google help article:

• About the data collected with Google Tag Manager

2.2.1.2 Legal basis for processing The legal basis for processing is Section 6 No. 2 DSG-EKD.

2.2.1.3 Purpose of processing We use Google Tag Manager to control the activation of optional services and to configure them.

2.2.1.4 Storage period We do not store any personal data as part of our use of Google Tag Manager.

2.2.1.5 Possibility of objection and removal You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link at the bottom of each page.

2.2.2 Google Analytics Our website uses Google Analytics, a service for analyzing visitor flows provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). Google acts as a processor in this service relationship.

2.2.2.1 Scope of processing If you have consented to the use of marketing cookies, a connection to Google's servers will be established when you access a page on our website in order to load the script required for Google Analytics. Your IP address, the address of the page visited and details of the browser and operating system used are transmitted. When Google Analytics is initialized, cookies are stored that contain unique identifiers that can be used to recognize your browser when you visit pages on our website. These cookies are only valid for our site and cannot be used to track your activities on third-party sites.

Each time you visit a page on our website, data on the page visit (including the page from which you accessed our website and the page accessed), browser and system information (including browser, operating system, IP address) and data from cookies, including the identifiers stored in cookies, are processed and transmitted to a Google server in the USA and stored there.

This website uses IP anonymization (so-called IP masking). If you access our website from locations within the member states of the European Union or the European Economic Area, the IP address collected is shortened so that the IP address is no longer personally identifiable. You can find more information on the transmitted data in the following Google articles:

• Overview of the tracking code

• Overview of IP anonymization

• Further information on data protection

2.2.2.2 Storage and access to data in the browser The following cookies can be stored in your browser and read out to measure visitor flows. For more information, please refer to Google's information on the types of cookies used and the cookies used for Google Analytics:

2.2.2.3 Legal basis of the processing The legal basis of the processing is § 6 No. 2 DSG-EKD.

2.2.2.4 Purpose of processing We use Google Analytics to measure and evaluate visitor flows on our website. Google processes the data collected by us to evaluate the use of our website and to compile reports on the use of our website.

2.2.2.5 Storage period The entries in the statistics provided by Google are stored for up to 10 years to enable long-term analysis. Information about Google's criteria for storing connection data can be found in Google's data storage guidelines.

2.2.2.6 Objection and removal options You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link at the bottom of each page.

2.2.3 Google Ads conversion tracking

We use the Google Ads service and the conversion tracking function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") on our website. Google acts as a third party in this service relationship.

2.2.3.1 Scope of processing If you have consented to the use of marketing cookies, we collect information about whether you have performed a certain action after one of our advertisements has been displayed to you in the Google advertising network or you have clicked on it. For this purpose, Google stores information about the advertising material in a cookie in your browser for a period of up to 90 days. Access is restricted to an identifier that is only valid for our website. If you have clicked on an advertisement, the information about the advertising material and a randomly generated user ID are stored in a cookie that is only valid for our site.

By carrying out an action measured by us on our site, e.g. completing an order, the data from the conversion cookies with information on the action carried out is transferred to a Google server in the USA. Your IP address is also necessarily transmitted in the process. With the help of this information, we and Google can link the defined events with the impression or the call-up of advertisements. This information is available to us in the form of anonymized statistics on conversions.

Further information can be found on the following Google pages:

• About the function of conversion tracking

• On the use of event data by Google

2.2.3.2 Storage and access to data in the browser The following cookies can be stored and read in your browser to collect conversion data and to control data collection. Further information can be found in Google's information on the types of cookies used and their use in ads.

2.2.3.3 Legal basis of the processing The legal basis of the processing is § 6 No. 2 DSG-EKD.

2.2.3.4 Purpose of processing We use Google Ads conversion tracking to evaluate the effectiveness of advertising media used in the Google advertising network and to optimize our advertising measures. For these purposes, Google provides us with the data collected on advertising media and events in the form of anonymized statistics, which we can use to understand which of our advertising measures are particularly effective and have led to the actions we intended from visitors to our website. Google uses the data for its own purposes, for example to optimize advertising campaigns in the Google advertising network.

2.2.3.5 Storage period The entries in the statistics provided to us by Google are stored for up to 10 years to enable long-term analysis. Further information on the duration of storage and the criteria for the storage period can be found in Google's data storage guidelines.

2.2.3.6 Objection and removal options You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link at the bottom of each page.

2.2.4 Google Ads Remarketing

We use the Google Ads service and the remarketing function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") on our website. Google acts as a third party in this service relationship.

2.2.4.1 Scope of processing If you have consented to the use of marketing cookies, information about your usage behavior will be used to show you relevant advertising in the Google advertising network. For this purpose, Google assigns an advertising profile identifier to your browser and links this identifier with information on websites viewed, advertisements and actions performed. If your browser does not yet have a cookie with an advertising profile identifier, this will be created by the Google Ads remarketing function on our website. Google can also access this cookie on third-party sites. Each time you visit our website, the Google advertising profile identifier, the address of the page visited and previously visited, data on the device used, any advertising identifiers from mobile devices, any conversion data and your IP address are transmitted to Google. We do not provide Google with any other personal data. Google attempts to link this information with the visitor's Google user account or existing advertising profiles in order to subsequently include the identifiers of these profiles in lists of potential interested parties. Data subjects can be recognized by Google using the identifiers stored in the cookies. If the identifier is included in a remarketing list, the data subject can be shown interest-based advertising in the Google advertising network.

The user profiles linked by Google to remarketing lists are not disclosed to us.

Further information can be found in the following Google help articles:

• About the function of remarketing

• About remarketing lists

• On the use of remarketing data by Google

• How Google uses data collected on third-party websites

2.2.4.2 Storage and access to data in the browser The following cookies can be stored and read in your browser to collect remarketing data and to control data collection. Further information can be found in Google's information on the types of cookies used and their use in advertisements.

2.2.4.3 Legal basis of the processing The legal basis of the processing is § 6 No. 2 DSG-EKD.

2.2.4.4 Purpose of processing Depending on your selected settings for advertising for the Google advertising network and the settings for personalized advertising on mobile devices, the remarketing data transmitted by us to Google and the remarketing lists created by Google are used to personalize advertisements and to address previous visitors (remarketing) or similar target groups. This enables us to display personalized and interest-based advertisements in the Google advertising network.

2.2.4.5 Storage period User IDs in remarketing lists created by us are deleted after 18 months at the latest. Further information on the duration of storage and the criteria for the storage period can be found in Google's data storage guidelines.

2.2.4.6 Objection and removal options You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link, which you will find at the bottom of every page.

2.2.5 Ströer Online Marketing

We use the Ströer Online Marketing service of RegioHelden GmbH, Rotebühlstraße 50, 70178 Stuttgart (hereinafter: "RegioHelden") on our website. RegioHelden acts as a processor in this service relationship.

2.2.5.1 Scope of processing If you have consented to the use of marketing cookies, we collect data on your use of our website, such as the use of contact options. For this purpose, we use measurement phone numbers that describe the actual phone number in order to be able to track which campaigns users use to reach the target page. The cookies specified are also stored.

2.2.5.2 Storage and access to data in the browser The following cookies can be stored and read in your browser:

2 .2.5.3 Legal basis of the processing The legal basis of the processing is § 6 No. 2 DSG-EKD.

2.2.5.4 Purpose of processing The purpose of processing is to analyze the website and determine the effectiveness of advertising and to generate statistical data on how visitors use the website.

2.2.5.5 Storage duration The general regulations on storage duration apply.

2.2.5.6 Possibility of objection and removal You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link at the bottom of each page.

2.2.6 Integration of YouTube videos

This website embeds videos that are loaded from servers on the YouTube platform. YouTube is a platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). Google acts as a third party in this service relationship.

2.2.6.1 Scope of processing If you have consented to the display of videos from the YouTube platform and access a page on our website that embeds videos from the YouTube platform, your browser will connect to Google's servers in the USA to load resources for the video component, preview images and fonts. Your IP address, the address of the page visited and details of the browser and operating system used are transmitted. Google can assign this information to your personal Google account if you are logged in at the time you access the page. Configuration data is stored on your device, with which the YouTube platform can recognize the browser used and apply user settings.

Videos from the YouTube platform are embedded on our website in so-called extended data protection mode. This instructs YouTube not to store cookies with advertising profile identifiers or data on user behavior. This setting only applies to the videos embedded by us on the YouTube platform and has no effect on other videos or links that you may be able to access via a displayed video. Further information can be found on the Google website:

• To the extended data protection mode

• To Google's privacy policy and terms of use

2.2.6.2 Storage and access to data in the browser By embedding videos from the YouTube platform, the following data can be stored in your browser and read out:

2.2.6.3 Legal basis of the processing The legal basis of the processing is § 6 No. 2 DSG-EKD.

2.2.6.4 Purpose of processing The purpose of embedding is to display videos from the YouTube platform on our website. YouTube provides the necessary storage space and technical infrastructure for the provision of video content. By publishing the video content via the YouTube platform or retrieving it from the platform, a higher reach can be achieved.

2.2.6.5 Data transfer to third countries Google also transfers and processes your data in third countries such as the USA, for which there is no adequacy decision by the EU Commission. In the case of embedding videos from the YouTube platform, there are no equivalent guarantees for the transmission of your IP address, so that compliance with the data protection laws applicable in the EU and your rights cannot be guaranteed. If you nevertheless consent to the display of videos from the YouTube platform, the processing is based on your consent to the transmission without guarantee within the meaning of Section 10 (2) No. 1 DSG-EKD.

2.2.6.6 Storage period We do not store any personal data when embedding videos from the YouTube platform. Information about Google's criteria for storing connection data can be found in Google's data storage policy.

2.2.6.7 Objection and removal options You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link, which you will find at the bottom of every page.

2.2.7 Integration of Google Maps

We use the Google Maps service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") on our website. Google acts as a third party in this service relationship.

2.2.7.1 Scope of processing If you have consented to the display of maps from the Google Maps platform and access a page on our website that embeds maps from the Google Maps platform, your browser will connect to Google's servers in the USA to load map data. Your IP address, the address of the page visited and details of the browser and operating system used are transmitted. The use of the map content provided by Google on the Google Maps platform is subject to Google's terms of use and the additional terms of use for the Google Maps service. In this respect, visitors enter into a direct user relationship with Google when using Google Maps. Further information can be found on the Google website:

• To the terms of use for Google Maps

• To Google's privacy policy and terms of use

2.2.7.2 Legal basis of the processing The legal basis of the processing is § 6 No. 2 DSG-EKD.

2.2.7.3 Purpose of processing The purpose of embedding is to display geographical maps from the Google Maps platform on our website. The display of the maps in combination with location information serves to improve the user-friendliness of our website.

2.2.7.4 Storage period We do not store any personal data when embedding maps from the Google Maps platform. Information about Google's criteria for storing connection data can be found in Google's data storage policy.

2.2.7.5 Objection and removal options You can view the status of your consent via our Consent Manager and revoke your consent at any time with effect for the future. To do this, click on the "Cookie settings" link at the bottom of each page.

2.3 Processing when using our website

2.3.1 List of persons

On our website, we provide a list of the full-time employees and persons with teaching assignments who work for us.

2.3.1.1 Scope of processing The contact details in the directory are collected directly from the data subjects. In connection with the collection of the data, data subjects receive login information, which they can use to change the data provided via the internal area of our website.

2.3.1.2 Legal basis for processing The legal basis for processing may be Section 6 No. 5 DSG-EKD and Section 6 No. 8 DSG-EKD, depending on the data subject's area of activity and the resulting need to publish official contact data or the data subject's interest in publishing their contact data.

2.3.1.3 Purpose of the processing The purpose of the processing is the public disclosure of the data subject's official contact details.

2.3.1.4 Storage period The data is deleted when either the need to publish the contact details no longer applies or, if there is no need, the data subject has objected to the processing.

2.3.1.5 Possibility of objection and removal If there is no need for disclosure due to your area of activity, you can object to the processing.

2.3.2 Registration for training courses

Our website offers you the opportunity to register for training courses.

2.3.2.1 Scope of processing We process the data collected in the registration form. After submitting the form, our system sends an email to the email address provided to confirm your registration.

2.3.2.2 Legal basis of the processing The legal basis of the processing is § 6 No. 5 DSG-EKD.

2.3.2.3 Purpose of the processing The purpose of the processing is the preparation, organization, implementation and billing of the booked training courses.

2.3.2.4 Storage period The general regulations on the storage period apply.

2.3.2.5 Possibility of objection and removal There is no possibility to object to processing that is necessary for the fulfillment of the contract with data subjects or the initiation of a contract at the request of data subjects.

2.3.3 Making contact

Contact details such as addresses, telephone numbers and email addresses are provided on our website to enable quick contact and direct communication with us and the contact persons working for us.

2.3.3.1 Scope of processing We process the personal data that you provide to us depending on the means of communication selected. This may include your full name, your address, the telephone number used, the e-mail address used and other personal data that you provide to us in the course of communication. The recipients of the data are the persons working in our area of responsibility and processors employed by us in compliance with data protection law. Subject to the general provisions, your data will not be passed on to third parties without your consent.

2.3.3.2 Legal basis for processing The legal basis for the processing of personal data in the context of communication with you is § 6 No. 3 DSG-EKD. If the purpose of the contact is to initiate or fulfill a contract, the additional legal basis for the processing is § 6 No. 5 DSG-EKD.

2.3.3.3 Purpose of processing We process your data to process the purpose of contacting you, to communicate with you and for the purpose of following up on communication that has taken place. These purposes also constitute our legitimate interest in processing.

2.3.3.4 Storage period The data will be deleted as soon as it is no longer required for the purpose for which it was stored. The assessment of this depends on the circumstances of the individual case. Otherwise, the general provisions on the storage period apply.

2.3.3.5 Possibility of objection and removal The provisions of Section 25 DSG-EKD apply. The objection may be precluded by the necessity of processing the data for the initiation of a contract, fulfillment of a contract or provision of evidence.