Privacy policy

1. Who is responsible for your data

The Romanian Evangelical Church in Geneva, Carrefour du Bouchet 4, 1209 Geneva, is responsible for the data processed by this site, under the Swiss Federal Act on Data Protection (FADP).

For any question, write to pastor@eerg.ch. We reply within 30 days.

This policy covers the public site and the members’ area.

2. What data, and why

• The name, email, and message from the contact form or the “I’m new” page — so we can reply. The basis is your request.
• The email, password, and, if you add it, the phone number of the members’ area — so you can enter the account opened by the church and, if you agree, so the group host can reach you. The basis is the membership relationship.
• Your role, house group, and relatives noted by the church — so announcements and the contact list reach the right people. The basis is the life of the community.
• If you sign in with Google, we keep the email address and the Google account identifier, so we can recognise you next time. Google receives the authentication request.
• The amount, the fund, and the confirmation of an online gift — for the church accounts. The card number is entered at Stripe, not with us.
• A language preference and, after sign-in, a session cookie — so you stay in the chosen language and remain signed in.
• The date of a sign-in to the members’ area or the administration, and the changes made by an administrator — so the church can review its activity. The password is not kept in this log.
• Technical server logs, for example the date of an error — to repair the site. The basis is the security of the service.

3. What we do not do

• We do not sell or rent your data.
• We do not show ads and we do not work with advertising networks.
• We do not follow you from one site to another.
• We do not ask for and we do not see the card number. Card or TWINT payment happens at Stripe.
• We do not read the password. The database keeps only a fingerprint from which the password cannot be rebuilt.

4. Who has access

Access depends on the role. It is not open to everyone.

• You see your profile. Account administration belongs to the church administrator.
• The group host sees the members of that group. The phone number appears to the host only if you have marked that it may be seen.
• Announcements for servants are visible to leaders, the committee, and the administrator.
• Gifts recorded on the site are not shown to other members.

5. Where the data stays

The site and the database are hosted at Infomaniak, in Switzerland. Messages sent from the site leave through the church email.

An online gift is processed by Stripe. Stripe receives the amount and confirms the payment; card data stays at Stripe.

Recordings and the live stream are played from YouTube. When the player starts, YouTube may receive the network address of your device, under Google’s rules.

If you choose “Open the map”, you leave the site for Google Maps.

Public pages may count visits, without ads and without tracking across other sites. The members’ area is not included in this counter.

6. How long we keep data

• Messages from forms — as long as we need to reply, then we can delete them on request.
• The member account — while you are a member. After the account is closed, we delete the profile, except what the law requires us to keep.
• Gift records — 10 years, as Swiss accounting law requires. The record keeps the amount, the date, and the fund.
• Technical logs — a short period, long enough to fix errors.

7. Your rights

Under the FADP, you can ask to know what data we hold, to correct it, to delete it, to limit the processing or to object, and to receive a copy. If you are in the European Union, you can make the same requests.

You can file a complaint with the Federal Data Protection and Information Commissioner (FDPIC), at edoeb.admin.ch.

Write to pastor@eerg.ch and we will handle the request.

8. How to ask for account deletion

Send an email to pastor@eerg.ch, from the account address, with the text “I want the account deleted”.

We close the account within 30 days and confirm it to you. The accounting record of gifts remains for 10 years, with only the amount, the date, and the fund.

9. Children

The members’ area is for church members. A child may appear on a group list only through a parent or guardian, with the data that is strictly needed.

10. Safety

• Pages load over HTTPS.
• Passwords are stored only as a fingerprint in the database.
• The sign-in session is signed and cannot be forged from the browser.
• After eight failed attempts in 15 minutes, sign-in stops until the end of that interval.

11. Cookies and preferences

• A cookie remembers the chosen language.
• After sign-in, a session cookie keeps you signed in. If you tick “Keep me signed in”, it lasts at most 30 days.
• For Google sign-in we use a short cookie, to check that the reply comes from your request.
• The day or night choice stays in your browser and is not sent to the server.

12. Changes

If we change something important, we update the date at the top. The version in force is the one on this page.

13. Contact

Romanian Evangelical Church in Geneva, Carrefour du Bouchet 4, 1209 Geneva, Switzerland. pastor@eerg.ch.