Privacy Policy

We are pleased that you are interested in the work of the Evangelische Indonesische Kristusgemeinde Rhein-Main (“we”, “our church” or “the congregation”). Protecting your personal data is very important to us.

You can use this website without providing personal data in most cases. If you make use of certain services (for example newsletter subscription or contact forms), the processing of personal data may become necessary. If there is no applicable legal basis in the Church Data Protection Act of the Protestant Church in Germany (Datenschutzgesetz der Evangelischen Kirche in Deutschland, “DSG-EKD”), we will ask you for your consent before we process your data.

We process personal data (such as name, address, e-mail address, telephone number) in accordance with the DSG-EKD, which governs data protection for Protestant churches in Germany, and – where relevant – in accordance with other applicable German law such as the Telecommunication Digital Services Data Protection Act (TDDDG) regarding cookies and similar technologies. In this Privacy Policy we explain what personal data we collect on this website, for which purposes we use it, and which rights you have.

We have implemented technical and organisational measures to protect the personal data processed via this website as well as possible. Nevertheless, internet-based data transmission can have security gaps. You are therefore free to contact us by telephone or other means if you prefer.

1. Definitions

The terms used in this Privacy Policy are based on the Church Data Protection Act of the Protestant Church in Germany (DSG-EKD). Where the wording is similar to the General Data Protection Regulation (GDPR), the meaning is essentially the same. In particular:

• a) Personal data

  Personal data means any information relating to an identified or identifiable natural person (“data subject”). A person is identifiable if they can be identified, directly or indirectly, e.g. by name, an identification number, location data, or an online identifier.

• b) Data subject

  A data subject is any identified or identifiable natural person whose personal data are processed by us.

• c) Processing

  Processing means any operation performed on personal data, such as collection, storage, use, disclosure, restriction or erasure.

• d) Restriction of processing

  Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.

• e) Profiling

  Profiling means any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person (for example interests or behaviour).

• f) Pseudonymisation

  Pseudonymisation means processing personal data so that they can no longer be attributed to a specific data subject without additional information, provided that this additional information is kept separately and protected.

• g) Controller

  The controller is the church body which decides on the purposes and means of processing personal data. For this website, the controller is our congregation (see section 2).

• h) Processor

  A processor is any person or organisation that processes personal data on behalf of the controller.

• i) Recipient

  A recipient is any person or body to whom personal data are disclosed.

• j) Consent

  Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of their personal data for a defined purpose.

2. Name and address of the controller

The controller within the meaning of the DSG-EKD is:

Evangelische Indonesische Kristusgemeinde Rhein-Main (EIKG)
Jemaat Kristus Indonesia Rhein-Main (JKI)
Saalgasse 15
60311 Frankfurt am Main
Germany
Phone: +49 69 / 264 989 53
Email: buero[@]jki-rhein-main.de
Website: www.jki-rhein-main.de

3. Data protection supervision and contact for data protection

Supervisory authority (church data protection authority according to § 46 DSG-EKD)
Commissioner for Data Protection of the Protestant Church in Germany (BfD EKD)
Regional Office “Mitte-West” (Außenstelle Dortmund)
Friedhof 4
44135 Dortmund
Germany
Phone: +49 231 / 533827-0
Fax: +49 231 / 533827-20
Email: mitte-west[@]datenschutz.ekd.de

You have the right to contact this supervisory authority at any time with questions or complaints concerning data protection.

Contact person for data protection in our congregation
Jens Balondo
Evangelische Indonesische Kristusgemeinde Rhein-Main
Saalgasse 15
60311 Frankfurt am Main
Germany
Phone: +49 69 / 506 075 312
Email: jens.balondo[@]jki-rhein-main.de

You may contact us at any time with questions and suggestions regarding data protection.

4. Cookies and similar technologies

Our website uses cookies and comparable technologies (for example tracking pixels). Some cookies are technically necessary in order to provide basic website functions such as navigation and security. We use these necessary cookies on the basis of our legitimate ecclesiastical interest in providing a secure and functional website (§ 6 No. 8 DSG-EKD).

Other cookies or technologies (for example analytics, reach measurement, embedded external media that track usage) are not technically necessary. Before we set or read such cookies, we will ask for your explicit consent. The legal basis for this is § 25 of the Telecommunication Digital Services Data Protection Act (TDDDG), which generally requires prior consent for storing or accessing information on your device, and § 6 No. 2 DSG-EKD (consent).

You can block cookies in your browser settings at any time and you can revoke your consent at any time with effect for the future. Please note that disabling technically necessary cookies may restrict some website functions.

5. Collection of general data and log files

Each time our website is accessed, our web server automatically records certain information and stores it in so-called server log files. This may include:

• browser type and version,
• operating system used,
• referrer URL (the page visited before),
• pages and files accessed on our site,
• date and time of access,
• IP address of the accessing system,
• the internet service provider of the accessing system.

These data are technically necessary to deliver the website correctly, to ensure long-term stability and IT security, and — in case of an attack on our IT systems — to support law enforcement authorities. We do not use these log file data to identify you as an individual. Log data are stored separately from other personal data and are deleted on a regular basis.

6. Registration / access-protected areas

If parts of our website provide a login/registration area, we will process the personal data you enter there only to provide the respective service or content (for example, internal materials for specific groups). The legal basis is generally § 6 No. 5 DSG-EKD (performance of a service requested by you or necessary pre-contractual steps) or, if you explicitly agree, § 6 No. 2 DSG-EKD (consent).

For security reasons we may also store the IP address, date and time of registration. This helps us to prevent misuse and to protect our systems.

7. Newsletter

If you subscribe to our newsletter, we will collect your e-mail address and any additional information you voluntarily provide. We use a double opt-in process: after registration you will receive an e-mail asking you to confirm that you wish to receive the newsletter.

When you register, we also store the IP address used and the date/time of registration. We do this to be able to trace misuse (for example, someone else registering your address without permission).

We use your data exclusively to send the newsletter and to manage your subscription. You can unsubscribe at any time by using the unsubscribe link in every newsletter or by contacting us. The legal basis is § 6 No. 2 DSG-EKD (consent).

8. Newsletter statistics / tracking pixels

Our newsletters may contain tracking pixels. These tiny image files allow us to understand, for example, whether an e-mail was opened and which links were clicked. We use this information to improve the relevance of our communication.

This evaluation takes place only if you have given consent (§ 6 No. 2 DSG-EKD in combination with § 25 TDDDG). You may revoke this consent at any time with effect for the future. Unsubscribing from the newsletter will automatically stop such tracking.

9. Contacting us (contact form / e-mail)

If you contact us by e-mail or via a contact form, we will process the data you provide (for example your name, contact details and your message) in order to respond to your request. We do not share this data with third parties unless we are legally obliged to do so.

The legal basis is generally § 6 No. 5 DSG-EKD (fulfilling a service you requested / responding to your enquiry). If you explicitly agree to further use of the data (for example being added to a mailing list), the legal basis is § 6 No. 2 DSG-EKD (consent).

10. Public comments / blog functions

If our website allows public comments (for example on blog posts), then the published comment may include the display name/pseudonym you chose and the time of posting. For security reasons and to prevent abuse, we may also store the IP address used when submitting the comment. This serves to protect us in case of unlawful content or rights violations.

The legal basis is our legitimate ecclesiastical interest in offering interactive communication channels and protecting them from misuse (§ 6 No. 8 DSG-EKD).

11. Routine erasure and storage periods

We process and store personal data only for as long as necessary for the respective purpose or as long as statutory or church retention obligations require it. Once the purpose ceases to apply or retention periods expire, the data will be deleted or restricted in processing in accordance with the DSG-EKD and other applicable provisions.

12. Legal bases for processing

The processing of personal data in our congregation is primarily governed by § 6 DSG-EKD. In particular, processing is lawful if:

• you have given consent (§ 6 No. 2 DSG-EKD),
• it is necessary to perform tasks of the church or the congregation (§ 6 No. 3 and No. 4 DSG-EKD),
• it is necessary to perform or prepare a contract or service you requested (§ 6 No. 5 DSG-EKD),
• we are legally obliged to do so (§ 6 No. 6 DSG-EKD),
• it is necessary to protect vital interests (§ 6 No. 7 DSG-EKD), or
• it is necessary for our legitimate ecclesiastical interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests (§ 6 No. 8 DSG-EKD).

For cookies and comparable technologies that are not strictly technically necessary, we additionally rely on § 25 TDDDG, which generally requires prior informed consent before storing or accessing information on your device.

13. Your rights

Under the Church Data Protection Act of the Protestant Church in Germany (DSG-EKD), you have in particular the following rights:

• Withdrawal of consent: You have the right to withdraw any consent you have given, at any time, with effect for the future (§ 11 (3) DSG-EKD).
• Access: You have the right to obtain information about the personal data we store about you (§ 19 DSG-EKD).
• Rectification: You have the right to have inaccurate personal data concerning you corrected, and incomplete data completed (§ 20 DSG-EKD).
• Erasure: You have the right to request the deletion of personal data that are no longer required (§ 21 DSG-EKD).
• Restriction of processing: You have the right, under certain conditions, to request that the processing of your data be restricted (§ 22 DSG-EKD). This may apply, for example, where erasure is not (yet) possible but the data may no longer be actively processed.
• Data portability: You have the right to receive certain data in a commonly used, machine-readable format, or to request that we transmit such data to another controller (§ 24 DSG-EKD). This particularly applies if processing is based on your consent or is necessary to fulfil a contract with you. This right does not apply where your data are processed as part of the statutory/public tasks of the Protestant Church in Hesse and Nassau (EKHN).
• Right to object: You have the right to object, on grounds relating to your particular situation, to the further processing of your personal data (§ 25 DSG-EKD), insofar as that processing is based on the performance of public tasks or on public, ecclesiastical or legitimate interests.
• Right to lodge a complaint: You have the right to lodge a complaint with the competent church data protection supervisory authority (§ 46 DSG-EKD) if you believe that the processing of your data violates applicable data protection requirements.

Supervisory authority for church data protection

Commissioner for Data Protection of the Protestant Church in Germany (BfD EKD)
Regional Office “Mitte-West” (Außenstelle Dortmund)
Friedhof 4
44135 Dortmund
Germany
Phone: +49 231 / 533827-0
Fax: +49 231 / 533827-20
Email: mitte-west[@]datenschutz.ekd.de

You may contact this authority at any time with questions or complaints regarding data protection. You may also contact us directly using the contact details in section 2.

14. Embedded external services (e.g. social media, YouTube)

Our website may embed content from third-party providers (for example, social media links, YouTube videos). When such content is loaded, technical data (such as your IP address, browser information, and timestamp) may be transmitted to that provider. Depending on the provider, this may also involve transfer to countries outside the EU/EEA.

Where technically possible, we will load such external content only after you have actively agreed (“click to load” / consent banner). The legal basis is your consent (§ 6 No. 2 DSG-EKD) and, where cookies or similar technologies are used, § 25 TDDDG.

If you are simultaneously logged in to services such as Facebook or YouTube, those services may directly associate your visit with your user account. To avoid this, please log out of those services before activating external content on our pages, or withhold consent in the banner.

15. Existence of automated decision-making

As a responsible church community, we do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

16. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy if legal requirements (for example DSG-EKD or TDDDG) or our services change. The version published here at the time of your visit applies.

Last updated: 27 October 2025