Privacy Policy

Effective October 28, 2026

This page explains what personal data we process when you visit martin.centrumkrestanov.sk, write to us, or sign up for something. We’ve kept it as simple as possible. If anything is unclear, just let us know.

1. Who is responsible for your data

The data controller is Centrum kresťanov Martin o. z., Bernolákova 6094/7, 036 01 Martin, Company ID (IČO) 57679991.

If you have a question or want to exercise your rights, email us at martin@centrumkrestanov.sk or send a letter to our registered address.

2. What data we process and why

Contact form and emails

• Data: your name, email, message, and anything else you choose to tell us.
• Purpose: to reply to you and continue the conversation you started.
• Legal basis: your consent, which you give by checking the box in the form (Art. 6(1)(a) GDPR), and our legitimate interest in replying to the messages we receive (Art. 6(1)(f) GDPR).
• How long: until we’ve handled your message, then for no more than 2 years after our last contact.

Planning a visit, small groups, and water baptism

• Data: your name, email, phone number (if you provide it), when you plan to come and whether you’re bringing kids, the small group you’re interested in, your interest in baptism, and your message.
• Purpose: to get ready for your visit, connect you with a small group leader, prepare you for baptism, and stay in touch with you.
• Legal basis: your consent (Art. 6(1)(a) GDPR) and the steps you asked us to take (Art. 6(1)(b) GDPR).
• Sensitive data: a sign-up (for example, for baptism or a small group) may reveal your religious beliefs. We process such data based on your explicit consent (Art. 9(2)(a) GDPR) and, as a nonprofit association with a religious purpose, as part of our regular activities (Art. 9(2)(d) GDPR). We share it outside our community only with your consent.
• How long: visit plans for no more than 1 year; small groups and baptism preparation for as long as you take part and then for no more than 2 years.

Event registrations

When you register for an event, we process your name, contact details, and the information needed to organize it (Art. 6(1)(b) and (f) GDPR), and we keep it for no more than 1 year after the event. Some events use an external registration form, such as Google Forms. In that case we use the data for the same purpose, and that service’s terms apply as well.

News and invitations by email

• Data: your name and email.
• Purpose: to send you news and invitations to services and events at Christian Centre Martin.
• Legal basis: your consent (Art. 6(1)(a) GDPR and the Slovak Electronic Communications Act). You give it in the newsletter sign-up form or by checking the optional box “I’d like to receive news and invitations by email” on our other forms. We only send news to people who have signed up this way.
• Unsubscribing: every email includes an unsubscribe link, or just send a short note to martin@centrumkrestanov.sk. Withdrawing your consent applies from that point on; processing before then remains lawful.
• How long: until you withdraw your consent. After that, we keep only your email address on an unsubscribe list so we can respect your choice. For now, sign-ups are stored in the website’s database; we plan to use MailerLite (UAB “MailerLite”, Lithuania) to send our emails.

Website visits, cookies, and analytics

• Technical data: on every visit, the server automatically logs technical data (IP address, browser type, time, and the page visited). We need this to keep the website secure and running, which is our legitimate interest (Art. 6(1)(f) GDPR).
• Analytics: with your consent in the cookie banner (Statistics category), we use Google Analytics and Microsoft Clarity. They show us which pages people read, where they come from, and where they get stuck, so we can improve the website. Clarity also creates heatmaps and session recordings in which form text is masked. Google Analytics keeps data for 14 months, Clarity keeps recordings for 30 days.
• Marketing: YouTube videos and Google Maps load only after you consent to the Marketing category or click the preview. Google may set its own cookies when they load.
• Consent mode: we pass your cookie banner choice on to Google services (Google Consent Mode), so analytics and advertising cookies are stored only with your consent.
• You can change your consent at any time via “Cookie settings” in the website footer. You’ll find a detailed list of cookies in our cookie policy.

Photos and videos

We livestream or record some services and events and publish them on YouTube. We also post photos from events on our website and social media so people can see what life in our community looks like. We do this based on our legitimate interest (Art. 6(1)(f) GDPR). We publish photos of children only with a parent’s consent. If you’d like us to remove a photo of you, write to us and we’ll take care of it.

Social media

Our website links to our social media profiles, such as Facebook, Instagram, YouTube, and Spotify. These are plain links, so a social network learns about your visit only when you click one. Each network’s own rules apply on our profiles. For page insights on Facebook and Instagram, we are joint controllers with Meta Platforms Ireland Limited.

3. Who we share data with

Only the people on our team who need your data can see it, such as a small group leader, a course leader, or an event organizer. We also work with trusted providers (processors) who process data only on our instructions:

• WEDOS Internet, a.s. (Czech Republic) – web hosting, server, and form database;
• Seznam.cz, a.s. (Czech Republic) – email accounts;
• Google Ireland Limited (Ireland) – Google Analytics, YouTube, Google Maps;
• Microsoft Ireland Operations Limited (Ireland) – Microsoft Clarity;
• Cloudflare, Inc. and jsDelivr – content delivery networks for the website’s scripts, which see only technical data such as your IP address.

If the law requires it, we also provide data to public authorities.

4. Transfers outside the European Union

Google and Microsoft may process some data in the United States. Both companies participate in the EU–U.S. Data Privacy Framework, for which the European Commission has confirmed an adequate level of protection, and they also use standard contractual clauses.

5. Your rights

At any time, you can:

• ask for access to your data and a copy of it;
• ask us to correct inaccurate data or complete incomplete data;
• ask us to delete your data or restrict how we process it;
• get the data you gave us in a common machine-readable format;
• object to processing based on legitimate interest;
• withdraw your consent just as easily as you gave it;
• file a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

Just email us at martin@centrumkrestanov.sk. We’ll reply without undue delay and within one month at the latest. We don’t use automated decision-making or profiling with legal effects.

6. Children and young people

If you’re under 16, ask a parent or legal guardian to fill out the form with you or for you. For children’s activities, we communicate with parents.

7. How we protect your data

The website uses an encrypted connection (HTTPS). Only authorized people can access the admin area and submitted forms, each with their own account and only the permissions they need for their role.

8. Changes to this policy

When we start using a new service or change how we process data, we update this policy. The current version is always on this page, with the effective date at the top.