Vangažu baptistu draudze - Privacy and cookie policy

PRIVACY AND COOKIE POLICY OF THE VANGAŽI EVANGELICAL CHRISTIAN BAPTIST RUSSIAN CONGREGATION

1. GENERAL PROVISIONS

VANGAŽI EVANGELICAL CHRISTIAN BAPTIST RUSSIAN CONGREGATION, registration number: 90000659221, e-mail: [email protected], tel. no.: +371 22559162, legal address: Gaujas iela 2, Vangaži, Ropaži Municipality, LV-2136, actual address: Priežu iela 1a, Vangaži, Ropaži Municipality, LV-2136 (hereinafter the Congregation or Vangaži EKBK congregation or We) provides a safe and accessible place and environment for everyone, offering diverse opportunities, forms and content so that every person may get to know God and become more loving, more open, more truthful and more balanced – grow spiritually and emotionally, develop their thinking and learn to build healthier relationships with God, themselves and others. It is important to us that these goals are achieved; at the same time, We are aware of how important the protection of the privacy of all involved persons is. We invest resources and in our daily work take care that personal data are protected.

Our duty is to take care of personal data protection and privacy in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter – the “Regulation”) and other legal acts governing privacy and data processing. Therefore, we have developed this Privacy Policy to provide you with the information required by the Regulation about the purpose, scope, protection and retention periods of personal data processing. We comply with the requirements of personal data protection legislation and in each data processing process we ensure that we collect only the information necessary to achieve the purposes mentioned in this Privacy Policy.

When processing personal data, We comply with the laws and regulations in force in the Republic of Latvia, binding instructions and rules issued by the responsible institutions, as well as European Union legal acts. This privacy policy applies to every data subject whose personal data we process.

DEFINITIONS

1.1. Personal data are personal data within the meaning of the Regulation: User data, access data, technical data, communication data and cookie data, any information that directly or indirectly relates to a natural person.

1.2. Technical data are User data that are automatically generated and collected from the User’s device used during the visit to the Website, including, but not limited to: IP address (including location), access provider, referrer uniform resource locator (URL), date, time, access authorizations, browser type and version, operating system, volume and status of transmitted data, location data.

1.3. Anonymized data – information that is no longer attributable to a natural person because all person-identifying elements have been removed from the set of personal data.

1.4. Communication data are data that the User provides in any electronic correspondence with SIA “Kipu”, for example, using the Website or e-mail, including the e-mail address and the content of the message.

1.5. Cookie data are the User’s personal data collected by cookies used on the Website.

1.6. Website is an environment placed on the internet created to provide information about the activities and objectives of the Vangaži EKBK congregation, which the Vangaži EKBK congregation administers at www.vangazudraudze.lv or www.vangažudraudze.lv.

1.7. Services – any type of activities that the Vangaži EKBK congregation carries out, offers and provides in accordance with its objectives and statutes: worship services, weddings, baptisms, funeral ceremonies, etc.

1.8. Congregation events – any other type of activities that the Vangaži EKBK congregation carries out and organizes in accordance with its objectives and statutes - camps, celebrations, games, youth evenings, Sunday school, etc.

2. HOW DO WE OBTAIN PERSONAL DATA?

The information we obtain about a person depends on the content of the cooperation. We may receive personal data in several ways, including:

The data subject has provided their Personal data to the Vangaži EKBK congregation, i.e., when the data subject or their authorized person applies for services, concludes an agreement, participates in activities organized by the Vangaži EKBK congregation, subscribes to receive news, requests information or submits an application for the examination of a specific issue or request, fills in a contact form on the website, visits Us or contacts Us through information channels.
We may receive data from other sources, for example, if you participate in one of our events, during which photographs may be taken or other types of information may be recorded on data carriers.

3. WHAT PERSONAL DATA DO WE OBTAIN?

Depending on the type of cooperation or communication, the types of Personal data may differ. In general, we divide the types of Personal data into the following categories.

Basic personal data. Person-identifying data, including contact and communication data, consent data, personal visual data (photo, video, etc.), personal document data, etc.
Data of minors.
Data on a person’s religious affiliation in accordance with Article 9(2)(d) of the General Data Protection Regulation.

4. CHILDREN’S PRIVACY POLICY, NOTICE TO PARENTS AND GUARDIANS

We care about children’s privacy. We recognize that children’s participation in Congregation events, as well as how children use the internet, including this website, raises special concerns related to the privacy and security of personal data and requires more careful data security.
Data about minors are collected in the context of Sunday school, youth evenings and children’s events. We apply additional efforts to ensure that the processing is appropriate.
The child’s parent or legal representative is responsible for providing minors’ data.
Parents have the right to review, correct, update, conceal, restrict and/or request deletion of the personal data we have collected about their children, as well as to prevent further collection, use and disclosure of such data. If you wish to perform any of the above actions, you may contact us by writing to [email protected].
We sometimes invite children to submit and we accept materials created by them, for example, artworks submitted for a contest, and some of them may be published on our websites. Such materials may be submitted offline and online. If a child or parent does not want us to publish the child’s photograph, materials created by the child, artworks or other personal data of the child, we invite the parent to contact us by writing to [email protected]. If children submit their materials to us offline, for example, by sending them by mail, the Congregation retains all the information they have submitted.

5. HOW DO WE USE PERSONAL DATA?

We process Personal data to ensure the provision of services and the conduct of congregation events, to maintain the register of congregation members, and to provide spiritual and/or practical support to those in difficulty. Personal data are also processed to ensure event organization and other activities related to the congregation’s work. For personal data security purposes, to avoid repeated identification, we prefer Anonymized data processing. However, the nature of cooperation or an event often creates the need to process identifiable Personal data.

We process Personal data only for specific and necessary purposes, based on certain legal grounds, including the Congregation’s legitimate interests, for example:

Provision of services – the purpose relates to performing and ensuring the functions entrusted to the Congregation in accordance with the congregation’s statutes and the obligations assumed by the Congregation.
Opinion gathering – the purpose of surveys relates to actions that, for example, are necessary to gather opinions about Congregation events, congregation life or organized activities.
Handling submitted questions. The purpose relates to communication between the data subject and the congregation, including applications, submissions or any contact submitted by the person (incl. by mail, e-mail, on the congregation’s website, etc.).
Conclusion/amendment of an agreement. Processing is carried out on the basis of law and the agreement.
Communication with Congregation members or candidates for membership. We respect the right of each Congregation member or candidate to give, withdraw or change their options for receiving information. In cases where a Congregation member or candidate has expressed a wish to receive information, Personal data may be processed in order to provide the necessary information. In such cases, the consent of the Congregation member or candidate is always important. Processing is carried out on the basis of legitimate interest and the consent given by the Congregation member or candidate.
Compliance with binding legal acts. The purpose relates to the legal basis for processing Personal data provided for in regulatory enactments, e.g., in the field of accounting, taxes and duties, etc.
Security of the Congregation’s infrastructure, services and events, information, Congregation members and visitors, prevention of unlawful or other threats, facilitation of the detection of criminal offences in the premises and adjacent territory, including in information systems. The purpose relates to measures carried out with physical and logical security means, including video surveillance, technical and organizational measures to ensure protection against threats caused by physical impact and to ensure protection. Processing is carried out on the basis of law and legitimate interest.
Accounting/financial and tax management. The purpose relates to accounting records, payment of taxes, settlements, etc. Processing is carried out on the basis of law and the agreement (transaction).
Processing of personal data for the Congregation’s internal administrative purposes. The purpose relates to processing Personal data for internal administrative purposes, e.g., prevention of conflicts of interest and prevention of unlawful actions. Processing is carried out on the basis of legitimate interest.
During services and Congregation events, filming, photographing and streaming may take place. The obtained materials may be used for documenting congregation life, publicity and public information needs, by placing them on the Vangaži EKBK congregation’s website and social media pages. Purpose - documenting the life of the Vangaži EKBK congregation, publicity and informing the public

In any of the above cases, we process Personal data only to the extent permitted by the specific purpose of processing.

6. HOW DO WE PROTECT PERSONAL DATA?

For the protection of the interests of natural persons, we continuously develop our security processes and measures. Such security measures include the protection of personnel, information and technical resources, IT infrastructure, internal and public networks, as well as Congregation buildings. Within these measures, we ensure an appropriate level of information security to prevent unauthorized access to Personal data.

We strive to ensure the protection of your personal data; therefore, the Congregation’s website www.vangazudraudze.lv or www.vangažudraudze.lv is protected with appropriate means intended to protect information that we cannot control against loss, malicious use or alteration. Although we implement security measures to protect confidential information and ensure appropriate security, we do not guarantee that information transmitted over the internet is secure or that such transmissions will not be subject to delays, disruptions, interception or errors.

7. TO WHOM MAY WE PROVIDE PERSONAL DATA?

Information will not be disclosed to third parties, except in cases where We have received your clearly expressed consent, or where disclosure of information is required in accordance with the law. Exchange of personal data may be necessary in certain cases where there is a specific purpose, for example, there may be a need to provide Personal data to the following categories of data recipients:

State institutions, for example, the State Revenue Service information about donations made by Congregation members, or the Register of Enterprises of the Republic of Latvia information about members of the Congregation’s Board and Council;
To each individual upon their personal request – about themselves or about another person on the basis of a power of attorney;
Supervisory authorities, for example, law enforcement institutions and rescue services in accordance with regulatory enactments;
Cooperation partners with whom an agreement and arrangement on the processing of personal data has been concluded, for example, to ensure delivery (couriers, post, etc.).
The obtained materials may be used for documenting congregation life, publicity and public information needs, by placing them on the Vangaži EKBK congregation’s website and social media pages.
Maksekeskus AS - acceptance of donations and payment processing is ensured by the payment platform makecommerce.lv, therefore our organization transfers to the platform owner Maksekeskus AS the personal data necessary for the execution of payments.

We also process Anonymized data that are not related to a specific natural person and do not allow identification of the data subject. Such data may be used for other purposes and transferred to other persons. We ensure the confidentiality of Personal data by implementing security measures in accordance with the requirements set out in regulatory enactments.

8. HOW LONG DO WE STORE DATA?

We store personal data only as long as necessary to achieve the purposes set out in this Privacy Policy, unless longer storage is required or permitted by applicable regulatory enactments. To determine the data retention period, we use criteria that comply with what is set out in regulatory enactments, and we also take into account the rights granted to natural persons, for example, by setting retention for a period during which claims related to a transaction could be submitted, should such arise.

No direct restrictions apply to the storage of Anonymized data; however, we also store them only to the necessary extent and for the necessary duration.

9. HOW DO WE USE COOKIES?

As on other websites, cookie technology is also used on the Vangaži EKBK congregation’s website. The congregation’s website uses the following mandatory cookies:

Name PHPSESSID, Type - session cookie; Usage explanation - This cookie is native to PHP applications. The cookie is used to store and identify a user’s unique session ID to manage the user’s session on the website. The cookie is a session cookie and is deleted when all browser windows are closed. Expiry - during the session.
Name AWSALB, Type - session cookie; Usage explanation - This cookie is used for services provided by Amazon. The Vangaži EKBK congregation’s website is hosted on Amazon servers. Expiry - during the session.

The above cookies are mandatory cookies. Mandatory cookies ensure the functionality and usability of the website. Without them, the website cannot function properly. Since mandatory cookies are necessary for providing quality services, it is not possible to refuse their use. If the user has concerns about their security and decides that they do not want to receive mandatory cookies, they can block or delete them by changing settings individually in their browser.

10. WHAT ARE THE DATA SUBJECT’S RIGHTS AND OBLIGATIONS?

The data subject has the right to:

Become acquainted with the information that We store about them, insofar as it is not contrary to regulatory enactments and does not unjustifiably affect the rights of other persons; information about oneself may be obtained through any channel provided by Us that allows identification of the person.
Request access to their data, correction or, where necessary, supplementation, deletion, restriction of processing or object to processing in cases specified in regulatory enactments, as well as the right to data portability. When choosing to receive information about oneself remotely, for example, by mail, e-mail, to another addressee or similar, the applicant is responsible for the security of the chosen method of receipt and the actions of the person acting on the applicant’s behalf.
Request a copy of the personal data being processed, if this does not adversely affect the rights and freedoms of other persons.
At any time, easily withdraw the consents they have given. Giving or withdrawing consent is a person’s free choice and does not impose mandatory additional obligations. However, if a person decides to withdraw any of the consents given, it must be taken into account that the data processing related to the specific consent will no longer be ensured and opportunities may no longer be available to the previous extent. For example, withdrawal of consent to receive current news will mean that news or other updates will no longer be delivered. It is important to remember that such withdrawal does not affect the lawfulness of processing carried out up to the withdrawal.
Contact Us and supervisory authorities regarding data processing issues. If support is needed to obtain broader information about this privacy policy, data processing aspects or applicable data protection legislation, we invite you to contact Us so that we can carefully consider the issue and provide an answer. In any case, a natural person always has the right to submit a complaint also to the Data State Inspectorate.

The data subject has the obligation to

Within a reasonable period of time, provide Us with information about changes in the data provided. It is important to us that we have truthful and up-to-date information at our disposal.
Where necessary, provide additional information. Within the framework of communication and cooperation, we may ask to provide additional information to ensure that communication or cooperation is taking place with a specific natural person. This is necessary for the protection of the data of the specific person and other persons, so that it is clear that this person is the Personal data subject and that the information disclosed about this person within the framework of communication and/or cooperation is disclosed only to this specific person, without infringing the rights of other persons. For example, when a person wishes to find out information about themselves by sending Us a request. In such a case, it is important for Us to make sure that it is this person who has signed and submitted the request. Accordingly, we may ask to provide additional identifying information. However, if the person has not provided additional information and/or We have doubts about the identity of the requester, then for personal data protection purposes (so that they are not disclosed to third parties) we may postpone the examination of the request until we are convinced that it is indeed this person who requested the said information.
Become acquainted with this Privacy Policy, as well as familiarize any person related to this data subject whose interests may thus be affected by this person’s data processing processes. We expect that the data provided to Us do not affect the interests of other persons. In cases where the data directly relate to another person (in the event of a change of data subject), the person has the obligation to inform us without delay. Until full identification of persons, the data are attributed to the specific natural person as the data subject.

11. HOW CAN YOU FIND OUT INFORMATION ABOUT CHANGES TO THIS PRIVACY POLICY?

As we continuously improve and develop our activities, it is possible that we will periodically amend and supplement this privacy policy. Therefore, we invite you to regularly familiarize yourself with the current version of the Privacy Policy. It is available on the website www.vangazudraudze.lv or at the congregation office. When we make changes to this policy, we will inform you with a notice on the website. In the case of significant changes, information may be provided through additional channels.

12. HOW TO CONTACT US?

If you have any questions or uncertainties regarding this Privacy Policy or the processing of Personal data, we invite you to contact Us using the Congregation’s contact information provided on this website. The Congregation’s data protection specialist - Mārtiņš Karolis +37129393256.