Thank you for your interest in this Privacy Policy! The following provides an overview of what happens to your Personal Information data when you visit my website at Christ Centered Counseling Ministries (c-ccm.org).
What is Personal Information?
Personal Information is all data that can be related to you personally, e.g., name, e-mail addresses, user behavior. The Personal Information of users processed within the scope of my website includes inventory data (e.g., names, e-mail addresses), usage data (e.g., information about your visit of my website technical data and IP addresses) and content data (e.g., information in the contact form messenger).
What law applies?
In principle, we (that is me and the third parties processing your Personal Information on my behalf) will only use your Personal Information in accordance with the Pennsylvania Consumer Data Protection Act, House Bill 2257 (“HB 2257”) for the, and only as described herein.
What do we process your data for (purpose of processing) and on what legal basis? We process Personal Information in accordance with the HB 2257:
· For the fulfilment of contractual obligations,
o Personal Information is processed for the purpose of providing the services,
o The purposes of the data processing are primarily based on the services.
· Within the framework of my legitimate interests Where necessary, we process your data beyond the actual performance of the contract in order to safeguard my legitimate interests or the legitimate interest of third parties that process Personal Information for me.
Examples are:
o Ensuring IT security and IT operations,
o Measures for business management and further development of services,
o Defense against third-party claims and enforcement of own claims.
· Based on your consent.
o Insofar as you have given me your consent to process Personal Information for certain purposes, passing on data to third parties, marketing, advertising etc., this processing is lawful on the basis of your consent.
o Consent given can be revoked at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.
What data protection rights do I have? You may have the right to:
· know what personal information is being collected about you;
· know whether your personal information is sold or disclosed and to whom;
· decline or opt out of the sale of your personal information;
· access your personal information that has been collected;
· equal service and price, even if you exercise your rights.
You may also withdraw your consent and request me to stop using and/or disclosing your Personal Information for any or all of the Purposes by submitting your request in writing. However, please note that should you withdraw your consent to the collection, use or disclosure of your Personal Information, it may impact my ability to proceed with your transactions, agreements, or interactions with me. Prior to you exercising your choice to withdraw your consent, I will inform you of the consequences of the withdrawal of your consent. Please note that your withdrawal of consent will not prevent me from exercising my legal rights (including any remedies) or undertaking any steps as I may be entitled to at law.
Who is Responsible Party for data processing?
The responsible party for data processing in terms of HB 2257 is:
Holistic Life Services LLC Nathan Trommler 4712 Penn Ave. PMB 1005, Sinking Spring, PA 19608, United States,
Web: Christ Centered Counseling Ministries (c-ccm.org)
E-Mail: clyde@c-ccm.org
Phone: +1 610-207-0583
What sources and data do we use?
We process Personal Information that we receive from you in the course of our business relationship. Relevant Personal Information are contact data (name, e-mail, telephone number and other contact data), as well as other data you share with me on a voluntary basis. In addition, this may also include contractual data, data about your use of my services offered as well as content data in messages and communications you send us.
Processing of special categories of data:
No special categories of data are processed.
Contacting me:
If you contact me per e-mail, contact form, or social media, we process the following data from you for the purpose of processing and handling your enquiry: Name, contact details -if provided by you- and your message. The legal basis of the data processing is my obligation to fulfil the contract and/or to fulfil my pre-contractual obligations and/or my legitimate interest in processing your enquiry.
Social Media Based on my legitimate interest, I have profiles on Social Media, in particular Facebook, and LinkedIn. When you use my offers and services on those platforms, the relevant platform provider and I are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. A Joint Controller Agreement itself if very legalistic and lengthy, but in a nutshell, it clarifies how the jointly responsible parties will fulfil the obligations arising from data protection laws that are applicable to them. So, if you contact me via social media, you should note the that the chat history can neither be deleted by me nor by you. For the storage period of the Personal Information stored by the platform provider, please refer to the relevant Privacy Policy (linked above).
Also please note that, your use of the platforms and its functions is your own responsibility, this applies in particular to the use of the interactive functions (e.g., commenting, sharing, rating). In addition, the platforms may use your data for market research, advertising purposes and to create profiles about your usage behavior and your interests. This allows, for example, advertisements to be placed within and outside the platforms that presumably correspond to your interests. I, as the provider of this policy, do not collect and process any data from your use of my service beyond this.
Lastly, when you leave comments on my profile, you may be able to display certain profile information, share certain details, engage with others, exchange knowledge and insights, post and view relevant content. It’s your choice whether to include sensitive information on your comment and to make that sensitive information public. Please do not post or add Personal Information to your comment that you would not want to be available.
My Services
I collect, process, and use the information you provide for the purpose of executing the contract this may include Personal Information and non- Personal Information, in particular your name, billing address and e-mail address, as well as information on the type of payment method you have chosen. I store the information you provide for the period of processing and handling the purchased services. Afterwards, your data will be deleted. Data that I am required to store due to legal, statutory, or contractual retention obligations will be blocked instead of being deleted to prevent it being used for other purposes. The processing of the data serves the fulfilment of the contract with you.
Access data and log files:
We collect data on each access to the server on which my website is located (so-called server log files) on the basis of my legitimate interests. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the operating system you are using, referrer URL (previously visited page), IP address and the requesting provider. This is used to defend against third-party claims and to enforce my own claims.
Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of seven days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the final clarification of the respective incident.
Are you using cookies?
Cookies are pieces of information that are transmitted from my web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies may be small files or other types of information storage. There are different types of cookies:
· Essential Cookies Essential cookies are cookies to provide a correct and user-friendly website.
· Non-essential Cookies Non-essential Cookies are any cookies that do not fall within the definition of essential cookies, such as cookies used to analyze your behavior on a website (‘analytical’ cookies) or cookies used to display advertisements to you (‘advertising’ cookies).
I have refrained from using cookies that are requiring your consent (non- essential cookies). For further information on the strictly necessary cookies used on my website, please contact me.
Is there an obligation for me to provide data?
Within the scope of our business relationship, you are only required to provide Personal Information that is necessary for the establishment, implementation, and termination of a business relationship or that I am legally obliged to collect. Without this data, I will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it.
Data Security
We secure my website and other systems through appropriate technical and organizational measures against loss, destruction, access, modification, or distribution of your data by unauthorized persons. However, and despite regular checks, complete protection against all dangers is not possible.
Our website uses the industry standard SSL (Secure Sockets Layer) for encryption. This ensures the confidentiality of your Personal Information over the Internet. You can tell whether encrypted transmission is taking place by the closed key/lock symbol in your browser display.
Passing on of data Your Personal Information will only be passed on to third parties,
· if you have given your express consent to this;
· if the disclosure is necessary for the fulfilment of contractual obligations; · if I am legally obligated to disclose the data;
· if the disclosure of the data is in the public interest;
· if the disclosure of the data is necessary for the protection of my legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data override these interests.
Duration of storage of Personal Information
Your data will be stored by me for as long as it is needed for the respective purposes underlying the processing. Beyond that, I only store data insofar as I am legally obligated to do so, e.g., due to statutory retention obligations.
Marketing
Insofar as you have also given me your separate consent to process your data for marketing and advertising purposes, I am entitled to contact you for these purposes via the communication channels you have given your consent to.
You may give me your consent in a number of ways including by selecting a box on a form where I seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with me. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with me.
Direct Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by me, or by my contracted service providers. Every directly addressed marketing sent or made by me or on my behalf will include a means by which you may unsubscribe or opt out.
Integration of third-party services and content
Within my website, I use content or service offers of third-party providers on the basis of my legitimate interests in order to integrate their content and services (hereinafter uniformly referred to as "content").
This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content.
The following provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and so-called opt-out measures, if any:
· Nameserver and Webhosting: GoDaddy and Google Inc
Validity and questions
This privacy policy is valid as of Wednesday, November 23, 2022. It is the current and valid version of my privacy policy. However, from time to time due to actual or legal changes a revision of this privacy policy may be necessary.
If you have any questions, comments, concerns, wish to exercise your rights, withdraw your consent or opt out from marketing, please feel free to contact me.