Controller and contact details
Europe for Jesus e.V.
Johannesstr. 87/1, 70794 Filderstadt, Germany
Email: datenschutz@e4j.org
Purposes and legal bases
We process personal data to plan events, conferences and other activities, manage registrations, organise attendance, handle payments and answer organisational questions.
- Registration and provision of agreed attendance: Article 6(1)(b) GDPR where a corresponding participation agreement exists.
- Organisation and communication outside a contractual relationship: Article 6(1)(f) GDPR (our legitimate interest in running the event effectively).
- Statutory accounting and documentation obligations: Article 6(1)(c) GDPR.
- Images focusing on identifiable individuals, personal testimonies and their publication: generally based on consent obtained for the relevant purpose (Article 6(1)(a) GDPR). Where religious beliefs, health data or other special categories of personal data may be revealed, an additional condition under Article 9(2) GDPR is required; for such voluntary publications we obtain explicit consent under Article 9(2)(a) GDPR.
- General overview images for event documentation: may in individual cases be based on Article 6(1)(f) GDPR if justified by the specific purpose and a balancing of interests does not favour the persons depicted. This does not automatically apply to every group photograph. Where recordings reveal special categories of personal data, we also assess the additional conditions under Article 9 GDPR.
- Health information needed for safety during retreats: Depending on the event, we may need information about allergies, intolerances or other medically relevant conditions. We explain during registration what information is needed and how it will be used. Processing requires an appropriate legal basis under Article 6(1) GDPR and, for health data, an additional condition under Article 9(2) GDPR. For this purpose, we generally provide for separate explicit consent under Article 9(2)(a) GDPR.
Personal data we process
Depending on the event, this may include your name, contact details, registration and attendance, catering, accommodation and payment information where relevant and, where recordings are made, image and sound material. We process personal testimonies, prayer requests or information about health and religious beliefs only where there is a separate purpose and a lawful basis.
The details required depend on the event. Without essential registration or contact information, we may be unable to organise your attendance. Participation in photography or public sharing of personal testimonies is generally separate from event registration.
Health and Safety During Retreats
During retreats and similar events, we may need health-related information to help ensure participants' safety. This may include food allergies and intolerances or, where we have responsibility for participants' care, other medically relevant information needed in emergencies. The information required depends on the particular event and will be explained during registration.
We collect only the information necessary and on an appropriate legal basis, generally obtaining separate explicit consent for health data. Where minors are involved, we involve their parents or legal guardians as required. Information is made available only to those who need it for catering, supervision or emergency assistance. We delete or securely destroy it as soon as it is no longer needed for these purposes, unless legal obligations require further retention. If essential information for safe care is not provided, we will discuss possible alternatives on a case-by-case basis.
Prayer and spiritual care
In personal prayer and pastoral care, we do not normally keep permanent personally identifiable records of confidential conversations or individual health information. Consent or participation forms may be retained separately, without recording the substance of the conversation.
Prayer requests intended for an intercessory prayer team are handled by a designated trusted contact person. This person receives the request and prepares a data-minimised version. The prayer team receives only a generalised version, without names and, wherever possible, without identifying details. Original messages and temporary notes are deleted or destroyed promptly after preparation. Any remaining pseudonymised information is deleted after a short period defined in our internal retention rules. Where a person can still be identified, we continue to treat the information as personal data and apply the additional safeguards required for sensitive information.
Sharing personal prayer requests requires a suitable legal basis. Where health information or religious beliefs are involved, we additionally observe Article 9 GDPR; if consent is relied upon, it must be explicit.
Photographs, video and audio recordings
Recordings may be made at our events to report on our work. Wherever possible, we inform participants at registration or on site whether recordings are planned and for what purposes. General overview images and focused, individually identifiable images are not treated in the same way.
For close-ups, personal prayer situations, interviews and published testimonies, we generally seek consent covering the intended use and publication channels in advance; for particularly sensitive information, we seek explicit consent. Simply entering the venue does not constitute such consent. Where minors are involved, we assess when parental responsibility holders must be involved.
If you do not wish to be recorded, please inform the event organisers as early as possible. You may exercise your data protection rights even if you have not given advance notice. General event images used lawfully without consent always require an individual assessment, including the rights of those depicted; Section 23 of the German Kunsturheberrechtsgesetz does not give blanket permission.
Recipients, publication and international transfers
Access is limited to responsible persons within the association and service providers needed to run the event, such as those providing registration, event technology, payment processing, hosting or communications. Where data is shared with a local co-organiser, the arrangement depends on the parties' respective roles and the specific purpose.
Depending on the individual publication, our channels may include our website, printed publications or platforms such as YouTube, Instagram and Facebook, according to the relevant consent and medium. Content published on the internet may be accessible worldwide, and platform operators may carry out additional processing and international transfers. The intended publication channels are specified before publication based on consent.
Microsoft 365
We use Microsoft 365 for email, file management and collaboration, including Outlook, Teams and OneDrive. According to our documented arrangements, a data processing agreement is in place with Microsoft and the West Europe region is designated for our data. Certain access to or transfers of data to countries outside the European Economic Area, in particular the United States, may nevertheless occur. Where such transfers take place, the applicable transfer mechanism may include an adequacy decision under Article 45 GDPR (such as the EU–US Data Privacy Framework for appropriately certified recipients) or the EU Standard Contractual Clauses under Article 46 GDPR, subject to the relevant requirements. You can request information about the safeguards applicable to a particular transfer using our data protection contact address. For further information, see Microsoft.
Retention and withdrawal of consent
We delete registration and attendance data when no longer needed to organise and follow up on the event, unless legal retention duties or other lawful grounds apply. Depending on the record type, German tax law may require accounting records to be kept for six, eight or ten years (Section 147 of the German Fiscal Code, Abgabenordnung).
We review recordings and reports regularly to assess whether further storage or publication is still necessary and lawful for the relevant purpose. We do not apply a blanket unlimited retention period. If consent is withdrawn, we stop further use based on that consent and remove the relevant content from our own publications unless a separate legal basis for the same continued processing was established and communicated beforehand. We cannot always ensure complete removal of copies distributed by third parties; in those cases we assess what further steps are required.
Additional internal retention rules apply to media recordings. Raw material that is no longer needed is deleted in accordance with those rules, and we regularly review published content to assess whether its continued use remains necessary and lawful.
Your rights
Subject to the applicable legal conditions, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). You may object to processing based on legitimate interests on grounds relating to your particular situation; you may object to the use of your data for direct marketing at any time.
You may withdraw consent at any time with effect for the future (Article 7(3) GDPR). This does not affect the lawfulness of processing carried out before withdrawal. You may lodge a complaint with a data protection supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Article 77 GDPR).
To exercise your rights, email datenschutz@e4j.org.
Further information
Unencrypted email may involve confidentiality risks. Please provide particularly sensitive information only where necessary, or ask us about a suitable means of transmission. We do not retain your details indefinitely merely because you send us an email.
These notices supplement our website privacy notice. Individual events may require additional information about booking providers, local co-organisers or recordings. Last updated: 21 October 2026.