Privacy Policy

Effective October 28, 2026

This page explains what personal data we process when you visit centrumkrestanov.sk, write to us, or sign up for something. We’ve kept it as simple as possible. If anything is unclear, just let us know.

1. Who is responsible for your data

The data controller is Centrum kresťanov o. z., Rožňavská 1399/1, 831 04 Bratislava – Nové Mesto district, Company ID (IČO) 57509913.

If you have a question or want to exercise your rights, email us at info@centrumkrestanov.sk or send a letter to our registered address.

2. What data we process and why

Contact form and emails

• Data: your name, email, message, and anything else you choose to tell us.
• Purpose: to reply to you and continue the conversation you started.
• Legal basis: your consent, which you give by checking the box in the form (Art. 6(1)(a) GDPR), and our legitimate interest in replying to the messages we receive (Art. 6(1)(f) GDPR).
• How long: until we’ve handled your message, then for no more than 2 years after our last contact.

Need help or a personal contact

• Data: your name, email, city, and whatever you share with us in your message. This may include sensitive information, for example about your health, family situation, or faith.
• Purpose: to reply to you, pray for you if you ask us to, and connect you with a specific person from our team. If you’d like, we’ll pass your contact details on to the team in your city.
• Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR).
• How long: while we’re in touch, then for no more than 2 years. Only the people who are handling your message can see it.

Event registrations

When you register for an event, we process your name, contact details, and the information needed to organize it (Art. 6(1)(b) and (f) GDPR), and we keep it for no more than 1 year after the event. Some events use an external registration form, such as Google Forms. In that case we use the data for the same purpose, and that service’s terms apply as well.

Website visits, cookies, and analytics

• Technical data: on every visit, the server automatically logs technical data (IP address, browser type, time, and the page visited). We need this to keep the website secure and running, which is our legitimate interest (Art. 6(1)(f) GDPR).
• Analytics: with your consent in the cookie banner (Statistics category), we use Google Analytics and Microsoft Clarity. They show us which pages people read, where they come from, and where they get stuck, so we can improve the website. Clarity also creates heatmaps and session recordings in which form text is masked. Google Analytics keeps data for 14 months, Clarity keeps recordings for 30 days.
• Marketing: YouTube videos load only after you consent to the Marketing category or click the preview. Google may set its own cookies when they load.
• Consent mode: we pass your cookie banner choice on to Google services (Google Consent Mode), so analytics and advertising cookies are stored only with your consent.
• You can change your consent at any time via “Cookie settings” in the website footer. You’ll find a detailed list of cookies in our cookie policy.

Photos and videos

We livestream or record some services and events and publish them on YouTube. We also post photos from events on our website and social media so people can see what life in our community looks like. We do this based on our legitimate interest (Art. 6(1)(f) GDPR). We publish photos of children only with a parent’s consent. If you’d like us to remove a photo of you, write to us and we’ll take care of it.

Social media

Our website links to our social media profiles, such as Facebook, Instagram, YouTube, and Spotify. These are plain links, so a social network learns about your visit only when you click one. Each network’s own rules apply on our profiles. For page insights on Facebook and Instagram, we are joint controllers with Meta Platforms Ireland Limited.

3. Who we share data with

Only the people on our team who need your data can see it, such as a small group leader, a course leader, or an event organizer. We also work with trusted providers (processors) who process data only on our instructions:

• WEDOS Internet, a.s. (Czech Republic) – web hosting, server, and form database;
• Seznam.cz, a.s. (Czech Republic) – email accounts;
• Google Ireland Limited (Ireland) – Google Analytics, YouTube;
• Microsoft Ireland Operations Limited (Ireland) – Microsoft Clarity;
• Cloudflare, Inc. and jsDelivr – content delivery networks for the website’s scripts, which see only technical data such as your IP address.

If the law requires it, we also provide data to public authorities.

4. Transfers outside the European Union

Google and Microsoft may process some data in the United States. Both companies participate in the EU–U.S. Data Privacy Framework, for which the European Commission has confirmed an adequate level of protection, and they also use standard contractual clauses.

5. Your rights

At any time, you can:

• ask for access to your data and a copy of it;
• ask us to correct inaccurate data or complete incomplete data;
• ask us to delete your data or restrict how we process it;
• get the data you gave us in a common machine-readable format;
• object to processing based on legitimate interest;
• withdraw your consent just as easily as you gave it;
• file a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

Just email us at info@centrumkrestanov.sk. We’ll reply without undue delay and within one month at the latest. We don’t use automated decision-making or profiling with legal effects.

6. Children and young people

If you’re under 16, ask a parent or legal guardian to fill out the form with you or for you. For children’s activities, we communicate with parents.

7. How we protect your data

The website uses an encrypted connection (HTTPS). Only authorized people can access the admin area and submitted forms, each with their own account and only the permissions they need for their role.

8. Changes to this policy

When we start using a new service or change how we process data, we update this policy. The current version is always on this page, with the effective date at the top.