Privacy Statement of the Uganda Martyrs Community Holland (UMCH)
Also known as, Stichting tot ondersteuning van de Oegandese R.K. Gemeenschap
This privacy statement explains which personal data the parish processes and for what purposes. It also outlines your rights and where you can direct any questions.
1. Name and Contact Details of the Parish
- Name: Stichting tot ondersteuning van de Oegandese R.K. Gemeenschap
- Postal Address: Laurierstraat 30, 2023 NC Haarlem
- Visiting Address: Pieter Calandlaan 194, 1069 LA Amsterdam
- Email (Parish Secretariat): secretariat@umch.nl
2. Personal Data Processed by the Parish
The parish maintains various personal data in its membership administration concerning parishioners and their household members (e.g., partners, children), such as names and telephone numbers. The financial system contains data related to church contributions, including bank account numbers if contributions are made. Photos of parish activities in which individuals may be recognizable are published on our Facebook page. Names and contact details of pastors and volunteers are listed on our website, along with photos of parish activities where individuals may be identifiable. Church registers record data on sacraments (baptism, confirmation, marriage, ordination) administered in one of the parish’s churches. Details of the personal data recorded can be found above and in Article 5 of the General Regulation on the Protection of Personal Data for Parishes (2018), available at www.rkkerk.nl/avg.
3. Purpose of Processing Personal Data
The parish processes personal data to record sacraments received in church registers, specifically:
- Registration of Baptism, Confirmation, Holy Communion, Marriage, and Ordination
- Registrations required under Canon Law
As a community of parishioners, their families, and others involved, the parish maintains administration to ensure proper organization. This includes:
- Recording contact details to send information and invitations regarding parish activities
- Managing volunteer tasks and maintaining a volunteer registry
- Maintaining financial records related to church contributions, donations, fundraising activities, grave rights, and stipends
As part of the Roman Catholic Church, the parish collaborates with other ecclesiastical institutions in the Netherlands, contributing to the accuracy of church membership records. The parish maintains an archive and may store personal data for historical, statistical, or scientific research, provided there is a legitimate interest in maintaining the archive.
4. Legal Basis for Processing Personal Data
The parish may process personal data based on its legitimate interest in:
- Fulfilling ecclesiastical duties, organizing parish activities, and maintaining contact with parishioners
- Managing accurate volunteer and financial records, and conducting fundraising activities
- Maintaining church registers and complying with Canon Law
Other legal bases include:
- Performance of a contract to which the data subject is a party
- Compliance with legal obligations imposed by civil (e.g., tax authorities, social services, police, judiciary) or ecclesiastical authorities
- Consent provided by the data subject (e.g., joining a working group as a volunteer or subscribing to the parish newsletter)
The parish may process special categories of personal data, such as received sacraments, under Article 9(2)(d) of the GDPR.
5. Streaming and Online Broadcasting of Church Services
Not all individuals wishing to attend a church service can be physically present. Therefore, video and/or audio recordings of services are made and streamed online to enable participation. The parish respects the privacy of attendees. Cameras are focused on the sanctuary, but it cannot be fully guaranteed that attendees will not appear in the footage or be audible. Recordings are made for all Sunday services and special feast days. While efforts are made to avoid capturing attendees, the first few rows may be visible. Livestreams are broadcast via the church’s YouTube channel. If you wish to avoid being filmed, please ask a volunteer or staff member where to sit. Reserved seating is available for this purpose. Recordings remain permanently online. For more information on the rights of church attendees regarding personal data, see Article 9 and subsequent sections of this privacy statement. Streaming is conducted as part of the parish’s ecclesiastical activities. As outlined in Section 1, recordings are necessary, and the parish has a legitimate interest in doing so while respecting attendees’ privacy.
6. Retention Period
Personal data is retained as long as the individual is registered as a parish member. If you move to another parish, your data will be deleted from the membership administration within one year. Data in church registers (e.g., baptismal records) cannot be deleted, as it is essential to maintain records of received sacraments, even after deregistration. The parish adheres to Canon Law. Data stored in other files, such as volunteer records, is retained only as long as necessary for the purpose of the file.
7. Receipt and Disclosure of Personal Data
Personal data is usually received directly from the data subject. Data about children is provided by parents or guardians. Data about godparents, baptismal witnesses, marriage witnesses, or next of kin may be received from the person completing the contact form. Personal data such as name, address, and bank account number may also be obtained from bank statements. Data may be shared with ecclesiastical institutions within the Roman Catholic Church in the Netherlands, such as other parishes, dioceses, or IPAL (the interdiocesan platform for financial and membership administration). If you have a contract with the parish (e.g., employment or donation agreement), certain data must be provided to the Tax Authority or other government agencies under legal obligations. Other than as described above, the parish will not share personal data with organizations outside the Roman Catholic Church without your consent.
8. Security of Stored Personal Data
Access to the membership administration system is restricted to membership administrators and parish board members. No other individuals have access. Access to the financial system is restricted to financial administrators and parish board members. No other individuals have access. Volunteers may receive files containing personal data only if necessary for their role. These files must be destroyed once no longer needed.
9. Right of Access and Correction
Every parishioner has the right to access their stored personal data. You may submit a request, including identification, to the parish secretariat. Contact details are listed at the top of this privacy statement. If you identify an error, please notify the parish secretariat. More information about your rights can be found in the General Regulation on the Protection of Personal Data for Parishes, available at www.rkkerk.nl/avg.
10. Deletion of Personal Data
Requests to delete contact details, financial data, or other general personal data may be submitted to the parish secretariat. The contact details of the parish secretariat can be found at the top of this privacy statement. Your request will be handled by the membership administrators or members of the parish board.
If you wish to deregister as a parishioner, we kindly ask you to follow the official procedure for registration and deregistration from the Roman Catholic Church. Information about this procedure and the relevant form can be found on the website www.rkkerk.nl. This form should be sent to the parish secretariat. The contact details are listed at the top of this privacy statement. Your request will be handled by the membership administrators or members of the parish board.
More information about your rights can be found in the General Regulation on the Protection of Personal Data for Parishes, available at www.rkkerk.nl/avg. The website www.rkkerk.nl also provides further details about the church’s deregistration procedure and the deregistration form.
11. Right to Lodge a Complaint
Requests or complaints regarding the handling of personal data may be submitted by the data subject to the parish board. The contact details can be found at the top of this privacy statement.
The data subject will receive a written response regarding the outcome of the submitted request or complaint.
If the parish board does not fully or partially grant the request or complaint, the data subject may, if desired, submit a complaint regarding the matter to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).