Privacy policy

This is an English translation provided for information. The binding text is the Polish version: Ochrona danych osobowych.

Data controller

The controller of your personal data is the Roman Catholic Parish of St Martin in Pacanów, ul. Kościelna 24, 28-133 Pacanów, Poland, phone +48 41 376 54 42, e-mail: kancelaria@parafiapacanow.pl. We process data in accordance with the General Decree of the Polish Bishops' Conference on the protection of natural persons with regard to the processing of personal data in the Catholic Church of 13 March 2018 (the "Decree") and, to the extent it applies, the GDPR.

Data protection officer

In data protection matters you can contact the Diocesan Data Protection Officer of the Diocese of Kielce – Fr Sebastian Wieczorek, PhD, ul. Jana Pawła II 3, 25-013 Kielce, Poland, phone +48 41 341 56 59 or +48 730 113 347, e-mail: diodokielce@gmail.com.

What data, for what purpose and for how long

| Where | Data | Purpose and legal basis | How long | |---|---|---|---| | Ordering a Mass intention | first name and surname, phone or e-mail, wording of the intention | accepting the intention and contacting you about it – your request and consent | data of the person ordering: 12 months; the wording of the intention remains in the list of intentions | | E-office (e-kancelaria) | data from the form and attached scans of documents | handling a parish office matter – your request; sacramental data in accordance with canon law | documents: 30 days after the matter is closed; the matter: 12 months after the last change | | Join us (Przyłącz się) | first name, contact details, message | contacting you about a parish community – consent | 12 months | | Report to the parish office from the virtual cemetery | contact details, content of the report | correcting or hiding data of a deceased person – your request | 12 months | | Virtual candle | signature (without surname) and a short message | displaying the candle – consent | 7 days | | Announcements by e-mail (if available) | e-mail address | sending parish announcements – consent confirmed by a link | until you unsubscribe; unconfirmed sign-up – 7 days | | Register of graves and fees (grave holders) | first name and surname, contact details, fees | running the cemetery and the register of fees – the grave agreement and the legitimate interest of the parish | for the period of use of the grave and the mandatory retention period of financial records |

Providing data is voluntary, but without it we cannot accept an order or a request. We do not make automated decisions and do not carry out profiling.

Accessibility settings and reading aloud

The settings of the "Accessibility" panel (contrast, text size, underlining, spacing) are stored only in your browser (localStorage) – not on the parish server and not in cookies; you can remove them with the "Reset" button or by clearing the site data in your browser. The "Read aloud" function uses your browser's speech synthesiser. If your device has no Polish voice installed locally, the browser may use its manufacturer's service (e.g. Google, Apple, Microsoft) and send the text of the page being read to it – without your personal data. The website does not use any external accessibility scripts.

Data of deceased persons

In the virtual cemetery we publish the first name, surname, maiden name, dates of birth and death and the grave location of deceased persons, on the basis of the parish priest's decision. The family may ask for the data of a loved one to be hidden, at the parish office or with the "Report to the parish office" button. The data of grave holders are not published.

Who has access to the data

The data are seen by the clergy of the parish and by persons authorised by the parish priest, to the extent necessary for their tasks. The website is maintained on behalf of the parish by a technical administrator, who processes data under a data processing agreement. The server and the backups are located in the European Union (OVH, Poland). Documents from the e-office and data of grave holders are stored in encrypted form, and backups are encrypted. We do not transfer data outside the European Economic Area.

Your rights

You have the right to access your data, to have it rectified, erased or its processing restricted, within the limits set out in the Decree. You may withdraw your consent at any time; this does not affect the lawfulness of processing before its withdrawal. It is best to submit a request at the parish office. You also have the right to lodge a complaint with the Church Data Protection Inspector (Kościelny Inspektor Ochrony Danych), Skwer kard. Stefana Wyszyńskiego 6, 01-015 Warsaw, Poland, kiod@episkopat.pl.

Data recorded in parish registers (e.g. a baptismal record) cannot be erased – an annotation may be added to them in accordance with canon law.

Cookies and statistics

The website does not use advertising or statistics cookies and does not connect to external services (fonts and the panorama viewer are on our server). The only cookie is the login session of the administration panel, used only by the people who run the website. YouTube videos are embedded in cookie-free mode, and maps open only after you click "Directions to the grave". If the parish enables visitor statistics, the website counts how many times a given page was opened on a given day and – in total for all visitors – from which country, on what device (computer, phone, tablet), in which browser and on which operating system, and, when someone enters the website, from which service they came (e.g. Google search, Facebook, the municipality's website; we store only the name of the service, without the address of the page). The country is determined at the moment of the page view from the IP address on our server (the DB-IP country database, CC BY 4.0 licence); we do not store the IP address or the full browser data. The statistics work without cookies and without identifying anyone; browsers with the "Do Not Track" setting are not counted. The reports are seen only by the clergy and the website administrator.

Server log

The website server keeps a technical log of requests: IP address, date and time, the address of the page opened, the result and the name of the browser. It is used only for security – detecting attacks and errors. Before saving, we remove cookies and one-time codes in links (e.g. password reset) from it. The log is stored on our server (OVH, Poland) for 31 days and then deleted automatically. In the panel it is seen only by the website administrator, with IP addresses shortened so that they do not identify anyone.

Changes

We update this policy when the functions of the website change. Date of the last change: 25 October 2026.