Privacy
Your datain view.
Information about the processing of personal data.
Controller
FCG Neues Leben e.V. – public presence “City Church Gronau”
represented by the board: Nigel Sheldrick (Chair), Frida Sheldrick (Vice-Chair), Marina Didyk (Treasurer), Ralf Flügge and Knut Naunin (Assessors)
Mühlenmathe 41 (rear building)
48599 Gronau, Germany
Phone: +49 176 96384987
Email: info@citychurch-gronau.de
Legal basis
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German TDDDG. As a congregation within the Bund Freikirchlicher Pfingstgemeinden (BFP KdöR), the BFP data protection order (BFP-DSO) additionally applies to us.
Data protection supervision & contact
The data protection officer of the Bund Freikirchlicher Pfingstgemeinden is responsible for our congregation:
Daniel Aderhold
BFP-Geschäftsstelle, Industriestraße 6–8, 64390 Erzhausen, Germany
Phone: +49 6150 9737-14
Email: datenschutz@bfp.de
Daniel Aderhold also heads the independent ecclesiastical data protection supervision of the BFP, which is responsible for the federation and its congregations, agencies and institutions; the contact details are the same as above. Independently of this, you may contact a state supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Hosting, email & server log files
This website is hosted by Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. Our email mailboxes are also operated by Alfahosting GmbH; delivery runs via their mail servers in Germany.
When the website is accessed, the web server automatically processes technically required connection data in so-called server log files: IP address, date and time of access, requested page or file, referrer URL, browser type and version, operating system, transferred data volume and HTTP status code. The purpose is the stable and secure operation of the website, the prevention of attacks and error analysis. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR or the corresponding provision of the BFP-DSO). Log files are not merged with other data sources and are deleted on a rolling basis; the retention period is seven days.
Cookies
During an ordinary visit to this website nothing is stored on or read from your device – no cookies, no local storage, no comparable techniques. Our audience measurement works without cookies too. The consent requirement of § 25 (1) TDDDG therefore does not apply and a consent banner is unnecessary. We set a single cookie (cc_optout) only if you explicitly object to measurement; it is strictly necessary for that function you requested (§ 25 (2) no. 2 TDDDG). Names, purposes and lifetimes can be found on our cookies page. We do not use a content delivery network, an upstream web application firewall or any third-party cookies.
Audience measurement (Matomo, self-hosted)
We use the analytics software Matomo on this website. Matomo runs entirely on our own servers; no data is transferred to third parties or external service providers. The measurement is cookie-free: nothing is stored on or read from your device and no persistent identifier is assigned. The legal basis is our legitimate interest in a data-minimising analysis of how our own website is used (Art. 6(1)(f) GDPR, or the corresponding provision of the BFP data protection regulation). If your browser sends the “Do Not Track” signal, no measurement takes place.
We process in particular:
- pages visited, the order in which they were viewed and time spent,
- referring source (e.g. search engine, linking website, campaign parameters),
- device class, screen resolution, browser and operating system,
- approximate country of origin, derived from the truncated IP address (no town or region is determined),
- interactions with the content, such as playing sermons or music, downloads, clicks on podcast and contact links, and submission of the contact form (the event only, never field content).
The following safeguards apply:
- IP addresses are truncated before storage; full IP addresses are never stored.
- There is no fingerprinting and no cookie is set for measurement.
- There are no heatmaps and no session recordings.
- Form input (e.g. name, email address) is not captured.
- Recognition beyond the individual visit is not possible; visits by the same person on different days count as separate visits.
- The data is not merged with other data sources and is not used for advertising.
The purpose is to understand which parts of our church website are helpful, in order to improve it. Raw data is automatically deleted after at most twelve months; aggregated monthly figures are kept for a maximum of 25 months.
You may object to this processing at any time with effect for the future (Art. 21(1) GDPR). The objection takes effect immediately; we set the cookie cc_optout for it so that it is honoured on every further visit. This is described in detail on our cookies page.
Your current status is loading.
Getting in touch
If you contact us by email or phone, we process the data you provide (e.g. name, contact details, content of the enquiry) solely to handle your request. The legal basis is the performance of pre-contractual or membership-related measures or our legitimate interest in responding. The data is deleted as soon as it is no longer required and no statutory retention obligations apply.
You can write to us directly using the contact form on the contact page. We process the mandatory details name, email address and message as well as the optional details phone number and subject. Your message is delivered to the mailbox info@citychurch-gronau.de and is additionally stored on our web server at Alfahosting GmbH in a directory that is not publicly accessible, so that no enquiry is lost. The legal basis is Art. 6(1)(b) or (f) GDPR (handling your request). The data is deleted as soon as your request has been dealt with conclusively and no statutory retention obligations apply, at the latest twelve months after receipt.
To protect against automated submissions, the form contains an additional field that is invisible to you and limits the number of submissions per sender. For this purpose your IP address is stored solely as a shortened one-way hash for no longer than one hour; it cannot be traced back to you. The legal basis is our legitimate interest in a functioning contact channel free from misuse (Art. 6(1)(f) GDPR). We do not embed external services such as captchas or form providers; processing takes place exclusively on our own server. Providing the data is voluntary – without a message and a way to reach you, however, we cannot answer your request. You can also contact us at any time by email, phone or post.
The WhatsApp link on this website only establishes a connection to the WhatsApp service (Meta Platforms Ireland Ltd.) when clicked. From that point on, WhatsApp’s privacy policy applies; use is voluntary.
Media & external content
Fonts, images, audio and video files are loaded entirely from our own server. No Google Fonts are embedded and no maps or players from Google Maps, YouTube, Spotify or similar providers are integrated.
External links – such as the route link to Google Maps, the WhatsApp link, the PayPal link on the giving page or links to our profiles on podcast and music services – only open the respective providers’ pages after you click them. From then on, their privacy policies apply.
Security (TLS encryption)
This website uses TLS encryption (“https://”). Data you transmit to us is thereby protected against third-party interception in transit.
Your rights
Within the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with the competent data protection supervisory body (see “Data protection supervision & contact” above).
Last updated: 13 August 2026.
