Contents
Who Is Responsible for Your Data
The data controller is Iglesia Ortodoxa Española, NIF R0800545F.
Church address: Calle Teobaldo Power, 25, 38400 Puerto de la Cruz, Tenerife, Spain.
For questions about personal data, please email info@ortodoxatenerife.es.
Using Our Website
We process IP addresses and essential technical information to operate and protect our website and diagnose faults. Our legal basis for doing so is legitimate interest (Article 6(1)(f) GDPR).
We do not use website traffic analytics or advertising trackers.
A cookie called "locale" remembers your chosen language for up to 180 days. This period may be renewed when you visit the website again. Essential technical cookies may also be used to protect the website. You can manage or delete cookies through your browser settings.
Enquiries and Donations
When you contact us by email or WhatsApp, we use the information you provide to deal with your enquiry and reply to you. This is based on our legitimate interest in communicating with people who contact us.
We process special categories of personal data only where permitted under Article 9 GDPR.
We use donation details to keep records, prepare documents and comply with our legal obligations.
Information entered into the online donor declaration form, including your signature, is processed only in your browser and is not sent to our website server. If you choose to send the completed document to the parish, we use the information it contains to process your donation.
Photographs
We publish photographs of parish life only where we have a lawful basis to do so. If you appear in a photograph and would like us to remove it, please contact us at the email address above.
How We Store and Share Data
We use technical service providers to support our website and email services, including Cloudflare for content delivery and website protection, Laravel Nightwatch to diagnose faults, and Zoho for email.
Data may be processed outside the European Economic Area using the safeguards provided for under the GDPR, including adequacy decisions and the European Commission's Standard Contractual Clauses. Information about these safeguards and how to access them is available in the relevant service providers' documentation.
We keep email correspondence for as long as necessary to deal with enquiries and related matters. Donation records are kept for the periods required by law. We retain photographs for as long as we have a lawful basis to do so. Technical data is kept for as long as necessary to maintain security and diagnose faults, taking into account the terms of the services used.
Your Rights
Under the GDPR, you may have the right to access, correct or delete your personal data, restrict how it is used, request data portability or object to its processing.
Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing before its withdrawal.
To exercise your rights, please contact us at the email address above.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).