top of page

DATA PROTECTION

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Andrea Kahl, Gospelchor Rejoice, Maaßfeld 6, 33378 Rheda-Wiedenbrück, Germany, Tel.: 0176 23420308, Email: hallo@gospelchor-rejoice.de.
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

 

2) Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, that is, if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data which are technically necessary for us to display the website:

  • Our visited website

  • Date and time at the moment of access

  • Amount of data sent in bytes

  • Source/referrer from which you accessed the page

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymized form)

Processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to check the server log files retrospectively should concrete indications of unlawful use arise.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

 

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying the page content, we use the system of the following provider:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website are processed on the provider’s servers.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

3.2 Wix

For hosting our website and displaying the page content, we use the system of the following provider:
Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel
Data is also transferred to: Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA
All data collected on our website are processed on the provider’s servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
When data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European data protection level.

 

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies—small text files stored on your device. Some cookies are automatically deleted after closing the browser (“session cookies”), while others remain stored longer and enable the saving of page settings (“persistent cookies”). The storage duration of persistent cookies can be found in your browser’s cookie settings.

If personal data are processed by cookies we use, processing takes place either pursuant to Art. 6(1)(b) GDPR for contract performance, pursuant to Art. 6(1)(a) GDPR if consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can configure your browser to inform you about the setting of cookies and to decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or in general.
Please note that disabling cookies may limit the functionality of our website.

 

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data are collected. The data collected when using a contact form can be seen from the respective form. These data are stored and used solely for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.

The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.
Your data will be deleted once your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the relevant matter has been conclusively resolved and no statutory retention obligations prevent deletion.

 

6) Tools and Miscellaneous

Cookie Consent Tool

This website uses a “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications requiring consent. The cookie consent tool is displayed to users upon page access in the form of an interactive interface, allowing them to grant consent for certain cookies and/or cookie-based applications by selecting checkboxes. Through the use of the tool, all cookies/services requiring consent are only loaded if the user has given the corresponding consent. Thus, such cookies are only set on the user’s device if consent is provided.

The tool sets technically necessary cookies to save your cookie preferences. Personal data are generally not processed in this context.
If, in individual cases, personal data (such as IP addresses) are processed for the purpose of storing, assigning, or logging cookie settings, this is done pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management, and therefore in a lawful design of our online presence.
Another legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of non-essential cookies dependent on user consent.
Where required, we have concluded a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.

Further information about the operator and settings of the cookie consent tool can be found directly within the tool’s interface on our website.

 

7) Rights of the Data Subject

7.1 Applicable data protection law grants you the following rights with respect to the controller concerning the processing of your personal data (rights of access and intervention). The legal basis for each right is indicated:

  • Right of access pursuant to Art. 15 GDPR

  • Right to rectification pursuant to Art. 16 GDPR

  • Right to erasure pursuant to Art. 17 GDPR

  • Right to restriction of processing pursuant to Art. 18 GDPR

  • Right to notification pursuant to Art. 19 GDPR

  • Right to data portability pursuant to Art. 20 GDPR

  • Right to withdraw consent pursuant to Art. 7(3) GDPR

  • Right to lodge a complaint pursuant to Art. 77 GDPR

7.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

 

8) Duration of Storage of Personal Data

The duration of storage of personal data depends on the respective legal basis, the processing purpose, and—if applicable—also on statutory retention periods (e.g., commercial or tax retention periods).

For processing based on explicit consent under Art. 6(1)(a) GDPR, the data are stored until you withdraw your consent.

If statutory retention periods exist for data processed under Art. 6(1)(b) GDPR (contractual or precontractual obligations), these data will be routinely deleted after the retention periods expire, provided they are no longer required for contract fulfillment or initiation and/or no legitimate interest in further storage remains.

For processing under Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or processing serves the establishment, exercise, or defence of legal claims.

For processing for direct marketing purposes under Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in this declaration for specific processing situations, personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

 

Created with it-recht-kanzlei.de
Status: December 2025

bottom of page