Data processing

Draft, 2026-10-23, under Art. 28 GDPR, to be checked by a lawyer.

Parties and subject

The church (controller) and [to be completed: the company's name] (processor). We process the church's recordings and the files made from them only to mix, cut, store, archive and deliver them as the church asks through the service.

Kind of data

Sound and video of services, which may show and let be heard the people present, including special categories (religious belief, Art. 9 GDPR) by the nature of a church service.

Measures

Each church has its own server and disk; the servers are reachable only through the front and a private network; the archive is reachable only from our provider's network, each church with its own login and key; access is by sign-in links to named members; deleting is an owner's.

Sub-processors

Hetzner Online GmbH (servers, disks, the archive, in Germany); Resend (sign-in emails). We tell the church before adding one.

End

When the service ends we delete the church's files after it could download them, within thirty days, and confirm it.