Privacy Policy

Last updated: July 2026

This privacy policy explains what personal data we process when you register for an event of the Jüdische Gemeinde Düsseldorf (Jewish Community of Düsseldorf) through this online form, and why.

1. Data Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Jüdische Gemeinde Düsseldorf
Paul-Spiegel-Platz 1
40476 Düsseldorf, Germany
represented by Susan Borofsky
Email: privacy@eg-jgdus.de

2. Data Protection Officer

No dedicated Data Protection Officer is currently appointed for this service. Please direct any data protection inquiries to the email address above.

3. What data we process, and why

a) Registration data

When you register for an event, we collect: your name, email address, membership status, and – where applicable – the name of your community and your postal code, your connection to Judaism or a Giur/conversion program, whether this is your first time attending, any referral by an existing member, and – depending on the event – details about requesting an Aliyah, observing a Yorzeit, a Mi Shebeirach request, and whether you'd like to help with setup or cleanup. Any notes you add are voluntary. This data is used solely to organize, run, and follow up on the relevant event.

Legal basis: your consent (Art. 6(1)(a) GDPR). Where this information reveals your religious affiliation (e.g. membership status, connection to Judaism, Giur program), it constitutes a special category of personal data under Art. 9 GDPR; its processing relies on your explicit consent (Art. 9(2)(a) GDPR) and, for members or people in regular contact with the community, on Art. 9(2)(d) GDPR.

b) Identification document

For certain membership categories (non-members, those interested in the Giur program, members of other communities), we require an uploaded identification document (ID card, passport, or similar) for security screening. Access to uploaded documents is restricted to authorized community administrators.

Legal basis: consent (Art. 6(1)(a), Art. 9(2)(a) GDPR) and our legitimate interest in the safety of our events (Art. 6(1)(f) GDPR).

c) Additional registered people

If you register other members of your household (e.g. spouse, children), we process their information to the same extent as your own. You confirm that you are entitled to do so, particularly for minors in your household.

d) Internal membership and security lists

To match registrations against known members, and to maintain an internal record of declined registrations (e.g. due to safety concerns or repeated misconduct), we process names and email addresses in separate internal lists. These support the safe and orderly running of future events.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the safety and good order of our events; where special categories of personal data are involved, Art. 9(2)(d) GDPR.

e) System and log data

For technical and organizational reasons, we log sent emails (subject, timestamp, delivery status) and administrative actions within the registration system (e.g. status changes). These logs are only visible to administrators and are periodically cleared.

Legal basis: legitimate interest in a reliable, traceable registration system (Art. 6(1)(f) GDPR).

f) Language preference

Your chosen language (German/English) is stored only locally in your browser (local storage) before you submit the form, and is not sent to our server. Once you submit a registration, the language used is stored as part of your registration so we can email you in the correct language.

4. Recipients of your data

Your data is shared only with authorized administrators and moderators of the Jüdische Gemeinde Düsseldorf who are involved in organizing the relevant event. We use the following hosting provider as a processor under Art. 28 GDPR to operate the website, store data, and send emails:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
D-02742 Friedersdorf, Germany

We do not share your data with any other third parties, and we do not sell it or use it for advertising.

5. International transfers

We do not transfer personal data to countries outside the European Union or the European Economic Area.

6. Retention period

We retain your registration data for as long as you remain connected to, or participate in events of, the community, so that we can track your participation history and process future registrations; it is not currently deleted automatically. Regardless, you may request deletion of your data at any time (see Section 7); we will comply unless a legal retention obligation or an overriding legitimate interest (e.g. maintaining the security list) applies.

7. Your rights

Subject to applicable law, you have the right to:

• access the data we hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw any consent given at any time, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, please contact the email address listed in Section 1.

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is generally:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany

9. Providing your data

Providing your data is necessary to register for an event. Without it, we cannot process your registration.

10. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. A person always decides whether a registration is accepted, rejected, or waitlisted.

11. Changes to this policy

We may update this privacy policy from time to time, e.g. if our registration process or the applicable law changes.