Personally identifiable information such as name, address, etc. are not captured unless you provide this information voluntarily, for instance in a contact form. We use your data in accordance with statutory data protection regulations. In the following, we inform you about the types, uses, and purposes of the data we collect.

1. Anonymous data collection and data processing

It is possible to visit our web pages within the domain immanuel.de without telling us who you are.
When you visit our website, your online behavior may be captured for statistical analysis. For this purpose, we primarily use cookies and so-called analytics programs. As a rule, any analysis of your online behavior is anonymous; your online activities cannot be traced back to you. You may opt out from having your online activities analyzed in such a way or prevent it by not using certain tools. You will find detailed information on this along with opt-out options here:

a) Web server logs

As is the case with almost all websites, the server on which our web pages are located (hereinafter referred to as "web server") automatically collects information from you when you visit our website in order to log security-related events. This means that every time a page or file is retrieved or attempted to be retrieved on this web server, data is stored in a log file, which your browser automatically transmits to us.

Specifically, the following data record is stored for each retrieval:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Host name of the accessing computer
• IP address of the requesting computer
• Date and time of the server request
• Name and URL of the file retrieved
• Data volume transferred
• Web server access status (file transferred, file not found, command not executed, retrieval failed, etc.)

Purpose for logging

The legal basis for data processing is Article 6 (1) (f) of the GDPR. Our legitimate interest is based on the data collection purposes listed below: The stored data is used for the purpose of identifying and tracking unauthorized access or access attempts to the web server. Other than that, the data will only be used to create anonymous access statistics for website optimization purposes. No access profiles will be created. The data cannot be merged with any other data sources. No personally identifiable information will be used specifically for the purpose of revealing information about you.

Retention period

The logged data will be stored and deleted at regular intervals unless a system abuse results in a civil or criminal prosecution of the originator of the abuse.

Review

The review of the web server logs within the immanuel.de domain is performed by the infrastructure managers of the Medical Technology, Information Technology, and Process Management departments of Immanuel Dienstleistungen GmbH and, if applicable, by the web managers of the Corporate Communications Department at Immanuel Diakonie GmbH.

b) Cookies

Some of the Internet pages use cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our website more user-friendly, effective, and secure.

Types of cookies

Most of the cookies we use are session cookies. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser the next time you visit our website.

Preventing and controlling the use of cookies

You can set your browser in a way that keeps you informed about cookie settings and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and activate automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited.

Cookies are needed for the electronic communication process or to provide certain functions desired by you (e.g. shopping basket function) and are stored on the basis of Article 6(1) (f) of the GDPR. The website operator has a legitimate interest in the storage of cookies to provide optimized services that are free from technical errors. If other cookies (e.g. cookies for analyzing your online behavior) are stored, they will be handled separately below.

c) Analytics Tool

The tracking activities listed below are performed in accordance with Article 6 (1) (f) of the GDPR. Legitimate interest means that we use tracking data to capture statistics about the use of our website to constantly evaluate our offerings and optimize our services for you. This way, we ensure that our webpages are continually updated and are serving user needs.

Tracking Tool Google Analytics

This website uses Google Analytics, a web analytics service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies, i.e. text files that are stored on your computer to analyze how this website is used. The information generated by the cookie about your use of this website is typically transferred to a Google server in the USA and stored there. As a rule, IP addresses are not stored by user but solely based on IP addresses which are captured anonymously on these websites.

Google Analytics cookies make it possible to identify the website from where you access our website and the webpages you visit on our website.

The following data are stored for each session:

• Number and size of pages visited
• Duration of each page visit
• If cookies are not automatically deleted at the end of a session, this will be the number of repeat visits to a web page
• Access via search engines and search terms used
• Referrer URL (previously visited page)

We use this data for statistical purposes and to analyze the use of the Internet, enabling us to further develop and improve our web presence. Google Analytics cookies are stored in accordance with Article 6 (1) (f) of the GDPR.

More information on how Google Analytics handles user data can be found in Google's privacy policy:  https://support.google.com/analytics/answer/6004245?hl=en

IP anonymization

IP anonymization functionality is activated on this website. Google uses this method to shorten your IP address within Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area before transmitting it to Google servers in the US. Only in rare cases will the full IP address be transmitted to a Google server in the USA and shortened there. To facilitate shortening, the tracking code for Google Analytics on this website has been extended by the addition “gat._anonymizeIp()." This renders IP addresses anonymous by deleting the last octet of the IP address as described above.

On behalf of this website’s operator, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.

Objecting to data collection

By using this website, you consent to Google processing data about you in the manner and for the purposes set out above.

You have several options, if you do not agree to the collection and analysis of data described above:

a) Browser settings

You can prevent the use of cookies by selecting the appropriate settings on your browser. When cookies are disabled, the functionality of this website may be limited.

b) Browser plugin

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available under the following link: For more information, see
http://tools.google.com/dlpage/gaoptout?hl=en
In addition, you will receive general information about Google Analytics and data protection via this link: https://policies.google.com/privacy?hl=en

c) Opt-Out-Cookie

This lets you decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data.
You can prevent Google Analytics from collecting your data by clicking on the following link. This will activate an opt-out cookie, preventing the collection of your data on future visits to this website.

If you delete your browser cookies, the opt-out cookie will also be deleted and you may have to reactivate it.

Contract on order processing

To comply with the strict requirements of the EU privacy regulation GDPR and the Federal Data Protection Act (BDSG) in organizational terms, we have entered into an order processing agreement with Google which allows us to fully implement the strict requirements from German data protection authorities when using Google Analytics.

Collecting and processing personally identifiable information (PII)

Personally identifiable information are individual sets of information about personal or factual circumstances relating to a specific or identifiable natural person, for example: Name, address, telephone number, date of birth, email address. In accordance with the principle of data reduction, we will only collect personally identifiable information we need for the use of our service.

As a rule, we only obtain personally identifiable information you provide to us voluntarily. This may happen, for example, if you submit your contact data to us via a contact form, when you request information material, register for an event or newsletter, or send an email or other communications.

Storage, retention, and deletion of personally identifiable information

The data you voluntarily transmitted to us will only be stored and processed inside the Federal Republic of Germany and only for the purposes stated under item 3. The data voluntarily transmitted by you will only be transmitted to third parties if this is one of the stated purposes of the data collection.

Personally identifiable information will be deleted immediately once they are no longer needed to fullfill the stated purposes for storage and if there is no legal or statutory obligation to prevent deletion or destruction of those records.

a) Use of our contact form

If you have any questions, we invite you to contact us using the form provided on the website. To this end, a valid email address is required so that we know who sent the request and can respond to it. Further information may be provided voluntarily. If you send us inquiries using the contact form, your details from the inquiry form, including the contact data you have provided there, will be stored by us for purposes of responding to your inquiry or to any follow-up questions and will be answered by the appropriate office at Immanuel Diakonie.

The data will be processed for the purpose of contacting us in accordance with Article 6 (1) (a) of the GDPR on the basis of your voluntary consent. You can revoke this consent at any time. To this end, please send a formless email message to:
unternehmenskommunikation@immanuel.de
Any revocation has no bearing on the lawfulness of any data processing procedures that were performed before the revocation came into effect.

The data entered by you in the contact form will be retained by us until you request us to delete it, revoke your consent for storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). This has no bearing on mandatory statutory provisions including retention periods.

Transmitting data when requesting information via a contact form

We only transfer personally identifiable information we collected via contact forms to third parties if needed in the context of order processing, for example, to companies entrusted with the delivery of requested information materials. Any additional transmission of data will not be permitted unless you have expressly consented to such transmission. Your data will not be shared with third parties for any reason, for example for advertising purposes, without your express consent.

The basis for data processing is Article 6 (1) (b) of the GDPR which permits the processing of data for performing contractual obligations or precontractual activities. The collected customer data will be deleted after completion of the order or termination of the business relationship. This has no bearing on statutory retention periods.

b) Anonymous online appointment scheduling form

You can schedule advisory/counseling and interpretation/translation appointments using our online appointment forms on our website. Their use is completely anonymous; any use of personally identifiable information is neither necessary nor intended. You have the option of voluntarily entering further information about the appointment in the comment field.

If you send us personally identifiable information via the comment field on the anonymous online appointment scheduling form, your details, including the date selected by you, will be saved for processing the scheduling request and will be handled by the consultants/counselors or interpretation/translation staff in charge. The data from the anonymous online appointment scheduling form will not be merged with other personally identifiable information.

The data will be processed for the purpose of contacting us in accordance with GDPR Article 6 (1) (a) of the GDPR based on your voluntary consent. You can revoke this consent at any time. To this end, please send a formless email message to: 
unternehmenskommunikation@immanuel.de
The revocation has no bearing on the lawfulness of any data processing procedures that were performed before the revocation went into effect.

The data you entered in the contact form remains with us until you request us to delete it, revoke your consent for storage, or the purpose for data storage no longer applies (e.g. once a service booked online was provided). This has no bearing on mandatory statutory provisions including retention periods.

c) Newsletter data

If you would like to subscribe to a newsletter offered on our website, we need your email address and, in accordance with the double-opt-in procedure, your confirmation that you are the owner of the email address provided and that you have agreed to receive the newsletter. No further data will be collected. You may voluntarily provide further information such as salutation, title, first or last name. They are used exclusively to generate a personal salutation in the newsletter.

The data entered in the newsletter registration form will be processed only based on your consent (Article 6 (1) (a) of the GDPR). The data you voluntarily submit will be stored in a central database, used only for sending the requested information, and will not be shared with unauthorized third parties.

Double-Opt-In procedure

Following your registration on the website, you will receive a message to the email address provided to confirm you are the rightful owner of the email address and that you have subscribed to the newsletter yourself. In this email we ask you to follow the link contained therein and to confirm that you would like to receive our newsletter. You can unsubscribe at any time.

Revocation of consent to the newsletter

You can revoke at any time your consent to having your data and email address stored for newsletter distribution purposes via the "unsubscribe" link at the bottom of each newsletter or by writing to Immanuel Diakonie GmbH, Corporate Communications Department, Am Kleinen Wannsee 5A, 14109 Berlin, or by fax to +49 30 80505-847, or by email to  post@immanuel.de. The revocation has no bearing on the lawfulness of any data processing procedures that were performed before the revocation came into effect.

Deletion of newsletter data

The data you provide us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter.

d) Registration for events

When registering for professional events and occasions of similar nature, we require your contact details such as name, address, institution/company, email address, phone number to process your registration and manage the event. The information requested during registration is mandatory and must be provided in full. Without the requested information, your registration will be declined. Registration for professional events can be made electronically using the web form or by email or non-electronically using the fax form. The data provided with the registration will be transmitted to the appropriate organizer at the Immanuel Diakonie hosting organization, stored there, and processed for the sole purpose of organizing the event.

For important information such as registration information, payment information for registration fees due, etc. we use the email and/or postal address provided with the registration to keep you informed.

Revocation of consent for event registrations

The data entered during registration will be processed on the basis of your consent (Article 6 (1) (a) of the GDPR). You can revoke your consent at any time. All you need to do is send us a formless notification by email. The revocation has no bearing on the lawfulness of any data processing procedures that were performed before the revocation came into effect.

Deletion of registration data

You can change or delete at any time the data you voluntarily provided when registering for the event by emailing, faxing, or mailing the organizer. The registration data will be stored by us as long as they are needed for the organization of the event and will be updated and deleted at regular intervals. This has no bearing on statutory retention periods.

e) Application for job openings

Applications for vacancies advertised or unsolicited applications can be mailed as hard copies or electronically by email. In the case of electronic transmission, the data and documents transmitted will be stored for the duration of the application process at Immanuel Diakonie GmbH in the human resources department. In addition, data and appendices will be forwarded to the respective hiring office/department within Immanuel Diakonie and also stored there. The data and documents collected will never be shared with third parties outside Immanuel Diakonie organizations.

f) Personally identifiable information of minors

Children and adolescents under the age of 16 may not transmit personally identifiable information on the Internet without the consent of their parents or legal guardians. Please note that services involving the collection of personally identifiable information, such as registering for newsletters, using contact forms, online booking forms, and event registrations, may not be used by adolescents under 16 years of age. We do not knowingly collect personal information from anyone under the age of 16.

3. Use and disclosure of personally identifiable information

Your personally identifiable information will not be transmitted to third parties for purposes other than those listed below.

We will only share your personally identifiable information with third parties if:

• you have given prior express consent pursuant to Article 6 (1) (a) of the GDPR,
• the disclosure pursuant to Article 6 (1) (f) of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that a legal obligation exists for the transfer pursuant to Article 6 (1) (c) of the GDPR, and
• to the extent legally permissible and necessary for carrying out contractual obligations towards you in accordance with GDPR Article 6 (1) (b) of the GDPR.

Contract processors

Immanuel Diakonie GmbH has entered into contract processing agreements with the following service providers:

• 3pc GmbH Neue Kommunikation – for technical and editorial support of the web server
• SC-Networks GmbH - for the provision of the newsletter registration form on the website, hosting of the central subscriber database, and handling newsletter distribution
• Google Inc. for the provision of the Google Analytics tool using anonymized IP addresses
• Immanuel Dienstleistungen GmbH - for the technical support of IT infrastructure and hosting

4. Embedded Third Party Content and Tools

In order to increase the appeal of our websites and offer various features we have embedded content and tools of third party providers. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR. In the following, we list the third party contents and tool used within this websites, name the data collected and explain, in which way you are able to restrict data collection.

a) Google Maps

This page uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to use Google Maps functions, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no control over this data transmission.

The use of Google Maps increases the appeal of our online offerings and the searchability of the places featured on our website. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR.

More information about the handling of user data can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=en.

b) Embedded Social Media Content

To enhance our website’s attractiveness, we provide channels on social networks such as Youtube. These services collect, process, and use personally identifiable information independently and at their own discretion. Video content form these Youtube channels can be integrated through iframes on the Immanuel Albertinen Diakonie websites. What shape or form this takes is explained in the following section:

Use of Embedded YouTube Videos

On this website videos are embedded from the social network youtube.com, which is operated by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066, USA and represented by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("YouTube"). If you visit one of our web pages featuring such an embedded video, no data will be transferred to the servers of YouTube since we use so called No-cookie-URLs. As soon as you play an embedded Youtube video a cookie might be placed, which establishes a connection to the servers of Youtube and might transfer data such as which of our Internet pages you have visited.

If you are logged into YouTube as a member, you allow YouTube to link your online behavior directly to your personal profile. When using the player functions (e.g. clicking the rating buttons, comment function), this information will also be linked to your YouTube account. We would like to point out in our capacity as provider of these pages that we have no knowledge of the content of the data transmitted or how they are used by YouTube. You can prevent your data from being used by logging out of your YouTube account before using this website. Even if you do not have your own YouTube account, it cannot be ruled out that YouTube will store your IP address.

You will find further information on the collection of user data by YouTube, your rights in this regard and possibilities for protecting your privacy in YouTube's data privacy policy at  https://policies.google.com/privacy?hl=en.

We use YouTube videos on our web pages to enhance the appeal of our online offerings. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR.

By using this website, you agree with the items depicting the "Use of Embedded YouTube videos". If you do not agree, you may not use this website.

5. Data integrity

We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. We continually improve our security measures in line with technological developments.

Limited data security on the web and on email

However, it is important to note that unauthorized access by third parties cannot be completely ruled out given the security loopholes in online data transmission, e.g. in email communications. There is a risk that information contained in an email and attachments, including confidential information, may be intercepted or destroyed, lost or delayed during transmission.

Personal and confidential data (for example, health-related information) should be kept confidential and should not be sent to us by email. You can also contact us at any time by mail or phone.

SSL-encryption

For security reasons and to protect the transmission of confidential content such as requests in contact forms that you send to us in our capacity as site operator, this site employs the widely used SSL procedure (Secure Socket Layer). You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the display of the green key or closed lock symbol in the upper status bar of your browser.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

6. Links to third party websites

The assurances of this privacy policy apply exclusively to the web pages of Immanuel Diakonie and not to the websites of third parties which we have linked to. We have no control over whether these providers comply with statutory privacy regulations. Therefore, you should always review the privacy policies offered on the third party websites.

7. Rights of the data subject

You are entitled to the following:

• to request information about your personally identifiable information processed by us in accordance with Article 15 GDPR. In particular, you may request information about the purposes of processing, categories of personally identifiable information, categories of recipients to whom your data have been or will be disclosed, the anticipated length of storage, whether or not there’s a right of rectification, deletion, restriction of processing or objection, and a right of appeal. You may request information about data sources to the extent they are not collected by us, and about the existence of automated decision-making including profiling and, if applicable, meaningful information on specific aspects of profiling.
• to request that we immediately correct incorrect or incomplete personally identifiable information we store in accordance with Article 16 GDPR;
• to request that we delete your personally identifiable information stored by us in accordance with Article 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• pursuant to Article 18 GDRP, to restrict the processing of your personally identifiable information if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete the data and we no longer need the data, but you need the data to assert, exercise, or defend legal claims, or if you have filed an objection to the processing pursuant to Article 21 GDPR;
• pursuant to Article 20 GDPR, to receive your personally identifiable information that you have provided to us in a structured, current, and machine-readable format or to request its transfer to another person responsible for its handling. If you request that data be directly transferred to another person, this will only be put into effect to the extent technically feasible.
• to revoke your consent to us at any time in accordance with Article 7 (3) of the GDPR. As a consequence, we will no longer be allowed to continue the processing of data based on this consent.
• to complain to a supervisory authority pursuant to Article 77 GDPR. The responsible supervisory authority for data protection issues is the privacy officer of the (German) federal state in which our company is based. A list of Data Protection Officers and their contact details can be found on the following link:  https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

a) Right to object to the processing of personally identifiable information

If your personally identifiable information is processed on the basis of legitimate interests pursuant to Article 6 (1) (f) of the GDPR, you have the right to object to the processing of your personally identifiable information pursuant to Article 21 GDPR, provided there are reasons relating to your particular situation or you are opting out because of direct advertising. In the latter case, you have a general right to object, which we will honor without the need for you to cite particular reasons.

If you would like to make use of your right to revoke or object, simply send an email to: unternehmenskommunikation@immanuel.de or datenschutz@immanuel.de.

b) Information, rectification, restriction of processing, erasure

For information, rectification, restriction of processing, erasure, and further questions on the subject of personally identifiable information, you can contact the Data Protection Officer named at the bottom of the page at any time.

If you have any questions about privacy law concerning a hospital stay, please contact the responsible privacy officer directly datenschutz@immanuel.de.

Status: May 23, 2018

As we further develop our web pages and implement new technologies, changes to this data protection declaration may become necessary. We therefore recommend that you review this privacy policy on a regular basis.