Who we are
Data controller: Stichting EECD Lelystad. Contact: info@eecdlelystad.com.
What data we process
Account and membership data, volunteer-role information, content you post (prayer, testimonies, photos), and technical logs (IP anonymised to /24, user agent, date) for security.
Purposes and legal bases
- Carrying out our tasks as a church organisation (legitimate interest).
- Sensitive personal data (prayer / testimony) on explicit consent (GDPR Art. 9(2)(a)).
- Legal obligations (administration, ANBI).
Hosting and transfers
Our data is hosted in EU (Supabase Frankfurt + Cloudflare R2 EU jurisdiction). No transfers outside the EEA.
Retention
Membership data: until cancellation + 2 years for administration. Logs: 30 days. Consent proof: 5 years after withdrawal.
Your rights
Access, rectification, erasure, restriction, portability, and consent withdrawal. Email info@eecdlelystad.com. Complaint: Autoriteit Persoonsgegevens.