Citykirken's privacy and cookie policy
Introduction
Citykirken Aarhus (we) is data responsible and respects the privacy of members and users. We (as a church and as individuals) take your data protection seriously and process personal data in accordance with the Danish Personal Data Act. The purpose of the privacy policy is to make you aware of why and how we process personal data and to describe your rights in connection with this.
As for our data processing in general, we only process personal data for specific purposes and based on legitimate interests. We only process personal data that is relevant and necessary to fulfill the stated purposes, and we delete your data when it is no longer necessary.
Data responsible
Contact person: Johnny Hansen
Citykirken Aarhus
Viborgvej 173
8210 Aarhus V
CVR: 70436914
Tel: +45 86 15 24 88
E-mail: jh@ckirken.dk
www.ckirken.dk
Why do we collect personal data?
Citykirken Aarhus collects various forms of personal data for various purposes. Overall for all groups, the purpose of collecting personal data is to make our service better and ensure a high quality in all services and all communication. This includes keeping members, volunteers and other interested parties up to date on our events and targeting services, advice and offers to the individual's circumstances. As a church, part of our task is also to register and document personal life events such as weddings and baptisms etc.
How do we collect data?
Citykirken Aarhus essentially only collects data that you actively give us. This may, for example, be in connection with membership registration, filling in online forms, participation in events, expressions of interest, signing up for newsletters or in connection with the provision of financial support.
When we ask you to make your personal data available to us, we inform you about which data we process about you and for what purpose. You receive information about this at the time of collection of your personal data.
What personal data do we register?
Processing of personal data is divided according to the following groups:
1. Employees, fee recipients and recipients of other compensation
2. Church members and volunteers
3. Financial contributors
4. Participants in church services and events as well as subscribers to newsletters
5. Collaborators
Name, address, telephone number and e-mail are collected for all groups. In addition, we reserve the right to record and store photos, video and audio recordings in connection with church services and other events for use on the website, social media and in connection with other forms of PR. If you do not wish to give your consent to this, please contact us.
Ad 1: The CPR number is stored for use for statutory reporting to SKAT and contracts and other relevant documents on cooperation agreements and obligations. In addition, bank details related to payouts.
Ad 2: Information is stored on date of birth, date of marriage, date of baptism and also bank details for expense holders. In addition, declaration of areas of interest and profession for use in coordinating voluntary work.
Ad 3: For contributors who have indicated that they want a tax deduction for their gifts, the CPR number is registered for reporting to SKAT. For donors who have signed an income-based declaration of commitment, income information/annual statements are also obtained and stored for use for statutory follow-up.
Ad 4: Information is stored about expressions of interest in the church, activities, services and engagement as well as requests for further contact, prayer, etc. The church's leaders and employees (including volunteers) can for internal use register attendance in connection with the church's activities. In addition, which groups/teams you may be a part of and any registrations for activities are registered and used.
Ad 5: To the extent that there are binding agreements, we store contracts and relevant documents as well as general personal data of contact persons in connection with cooperation with external associations and organisations.
We obtain your consent before we process your personal data
We obtain your consent before we process your personal data for the purposes described above, unless we have a legal basis for obtaining it. We inform you of such a basis and of our legitimate interest in processing your personal data.
Your consent is voluntary and you can withdraw it at any time by contacting us. Use the contact details above if you would like further information.
If you are under 18 years of age, we always obtain consent from a parent or guardian in addition to your consent before we process your personal data as described above.
We only process relevant personal data
We only process data about you that is relevant and sufficient in relation to the purposes defined above. The purpose is decisive for which type of data about you is relevant to us. The same applies to the extent of the personal data we use. For example, we do not use more data than we need for the specific purpose.
We only process necessary personal data
We only collect, process and store the personal data that is necessary in relation to fulfilling our stated purposes. In addition, it may be determined by legislation what type of data is necessary to collect and store for our business operations – this applies, for example, to the membership list and number of donors. The type and extent of the personal data we process may also be necessary to fulfill a contract or other legal obligation – this applies, for example, to declarations of commitment and employment.
We check and update your personal data
We check that the personal data we process about you is not incorrect or misleading. We also make sure to update your personal data on an ongoing basis.
How is personal data stored?
We protect your personal data and have internal rules on information security, which contain instructions and measures that protect your personal data from being destroyed, lost or changed, from unauthorized disclosure, and from unauthorized access or knowledge of it.
In the event of a breach of personal data security, we inform the Danish Data Protection Authority. We initiate an investigation to determine the extent of the breach, inform those involved and correct our security.
Who has access to personal data?
• Employees at Citykirken's office, including the pastoral team, have access to personal data in relation to the church's daily operations.
• Leaders and members of work branches in Citykirken have access to contact information such as name, telephone, e-mail and address for use in coordinating voluntary work.
• The leaders of the Senior group have access to personal data regarding birthdays and anniversaries, e.g. for internal celebratory use.
• Public organisations, as well as accountants and lawyers, receive personal data to the extent required to comply with legal obligations.
• With the exception of the above, Citykirken Aarhus does not pass on personal data to third parties without written consent.
For how long is personal data stored?
• We store personal data as long as it is relevant in relation to the purpose for which it was collected. They are then deleted.
• However, in order to comply with current legislation, personal data included in Citykirken Aarhus' bookkeeping and obligations towards SKAT are stored for 5 years.
• Data relating to expressions of interest in relation to the church's activities and events are stored for 2 years.
• Data relating to membership of the church is stored for 3 years after deregistration.
• Information that is considered to be part of the church's civil registration, including birthdays, weddings, baptisms and funerals is only deleted on request.
Your rights:
You have the right to access your personal data
You have the right to be informed at any time which data we process about you, where it comes from and what we use it for. You can also be informed how long we store your personal data and who receives data about you, to the extent that we pass on data in Denmark and abroad.
If you request it, we can inform you about the data we process about you in a structured, commonly used and machine-readable format (data portability). However, access may be limited for reasons of privacy protection of other persons, trade secrets and intellectual property rights.
You have the right to limit or change the use of your data, and you can withdraw your consent at any time with the restrictions that may be required by law and are described in this document.
You have the right to have inaccurate personal data corrected or deleted
If you believe that the personal data we process about you is inaccurate, you have the right to have it corrected. You must contact us and inform us of the inaccuracies and how they can be corrected.
In some cases, we will have an obligation to delete your personal data. This applies, for example, if you withdraw your consent. If you believe that your data is no longer necessary in relation to the purpose for which we obtained it, you can ask to have it deleted. You can also contact us if you believe that your personal data is being processed in violation of the law or other legal obligations.
When you contact us with a request to have your personal data corrected or deleted, we investigate whether the conditions are met and, if so, implement changes or deletion as quickly as possible.
You have the right to object to our processing of your personal data
You have the right to object to our processing of your personal data. You can use the contact information at the top to send an objection. If your objection is justified, we will make sure to stop processing your personal data.
Finally, you can complain about our processing of your personal data at any time to the Data Protection Authority, Borgergade 28, 5th floor, 1330 København K, tel. +45 33 19 32 00, e-mail:dt@datatilsynet.dk.
Use of cookies
Cookies, purpose and relevance
We place cookies on ckirken.dk to improve your user experience when you navigate around the site. You can read more about our cookie policy here.
Subject to change
We reserve the right to update and change the privacy policy if this becomes necessary, but always in accordance with the Personal Data Act. In the event of changes, the update will appear on the website and an e-mail will be sent to everyone affected by the changes.