Privacy Policy
This policy explains how Kaplanská mise pro pravoslavné Ukrajince v ČR, z.s. processes the personal data of website visitors, people who contact us through the contact form, people who submit prayer notes, and people who make donations. It has been prepared with regard to the GDPR and the applicable laws of the Czech Republic.
- Data controller: Kaplanská mise pro pravoslavné Ukrajince v ČR, z.s.
- Czech Company ID (IČO): 23470666
- Registered address: Lannova 2061/8, 110 00 Praha 1
- Email for data-protection enquiries: yosyp@cerkva-praha.cz
Public forms
The contact form collects a name, email address or phone number, the text of the message, and the communication language. Before submission, the request goes through server-side Cloudflare Turnstile verification, and the message is delivered to the mission's official mailbox through Resend.
Private prayer notes
Prayer notes collect the type of note, the names to be commemorated, and, where relevant, the date of the liturgy, contact details, or a pastoral note. This data is stored only within a narrow internal church workflow on Supabase and is not exposed through public client-side queries.
Analytics and technical quality
The website uses Vercel Web Analytics and Vercel Speed Insights for aggregated visitor statistics and for measuring the technical quality of the pages. These tools are not used for advertising profiling or for selling data.
Who is the data controller and how to contact us
The controller of personal data is Kaplanská mise pro pravoslavné Ukrajince v ČR, z.s., Czech Company ID (IČO) 23470666, with its registered address at Lannova 2061/8, 110 00 Praha 1.
For data-protection questions, please write to yosyp@cerkva-praha.cz. If you believe that your data is being processed unlawfully, you also have the right to lodge a complaint with the Czech Office for Personal Data Protection (UOOU).
What data we process
Depending on how you interact with the website, we may process the data that you provide in the contact form: your name, email address, phone number, and message.
In the prayer-note form, we may process the type of note, the names to be commemorated, the preferred date of the liturgy, and optional contact details or a pastoral note. We may also process technical and security data needed for the operation of the forms and protection against abuse, as well as limited donation-related data if we receive it from a payment provider or bank.
The names submitted in prayer notes may concern living or deceased persons. The GDPR primarily applies to data relating to living persons, but the mission treats all submitted content with care and asks that only data be provided that you are entitled to submit for church commemoration.
Why and on what basis we process data
We process data in order to respond to your enquiry, arrange further contact or a pastoral conversation, and also to receive, review, prepare for printing, and pass a prayer note into the internal church workflow.
Separately, data may be used for the administration of donations, accounting, protecting the website against spam, technical failures and abuse, and for aggregated visitor statistics and measurement of technical page quality.
Depending on the specific situation, the legal basis may be the controller's legitimate interest, compliance with a legal obligation, steps taken at the request of the person before further communication, or consent where it is genuinely required. If you voluntarily include sensitive information in a message or prayer note, we process it only to the minimum extent needed for the relevant church purpose.
Who may receive the data
We do not sell personal data. However, the operation of the website and certain processes may involve Vercel for website hosting, web analytics, and technical performance measurement, Cloudflare Turnstile for protection of the forms against automated abuse, Resend for delivery of contact-form messages, Supabase for the internal service storage of prayer notes, and Stripe, banks, and other payment institutions for receiving donations outside any on-site card checkout.
Where necessary, accounting, IT, or legal contractors may also be involved if this is required for the proper operation of the mission or directly required by law. If any provider accesses data from outside the EEA, such transfers must be based on appropriate safeguards.
Retention periods
We do not keep data longer than is necessary for the relevant purpose. Messages sent through the contact form are retained for the time needed to reply and for reasonable follow-up communication.
Prayer notes are kept only for the time needed for review, preparation, printing, short-term reprinting, and correction of errors. The basic target retention period for this data is no longer than 60 days after batching or printing, unless the law or a particular situation requires otherwise.
Donation-related data may be retained longer to the extent required by accounting, tax, anti-fraud, or other legal obligations. Technical security logs are retained for a short period as needed for the stability and protection of the service.
Your rights, security, and changes to this policy
You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability in cases provided by law, and also the right to object to processing or withdraw consent where the processing is based on consent. To exercise these rights, please write to yosyp@cerkva-praha.cz.
The mission uses HTTPS, access controls, separation between the public website and the internal service workflow, backups, and minimisation of data access. The content of prayer notes is not written to public client-side logs. If this policy changes materially, the current version will be published on the website with an updated date.