Privacy notice
How this service collects, uses, protects, and shares personal data.
Last updated:
Who is responsible for your data
Advent Center at Berivoi determines why and how center records are used. Authorized platform operators and contracted service providers may process data only to operate and protect the service.
Data we collect
Depending on how you use the service, we may collect account and contact details; stay, reservation, payment, and participation records; messages and support requests; accessibility, dietary, health, or faith information you choose to provide; consent records; and security data such as IP address, device, sign-in, and audit events.
Purposes and legal bases
We use data to provide requested services and manage our relationship with you, comply with legal duties, protect people and systems, and improve operations. The applicable basis may be performance of a contract, a legal obligation, legitimate interests assessed against your rights, or consent where consent is required.
Sensitive and special-category data
Health, dietary, accessibility, and faith information receives additional access restrictions and encryption. We process it only when you have given valid consent or another documented legal condition applies. You may withdraw consent without affecting processing that was lawful before withdrawal.
Who receives data
We do not sell personal data. Access is limited to authorized workers and contracted providers that need the data for hosting, communications, support, security, or other stated services. We may disclose data when law requires it or when necessary to protect vital interests and legal rights.
International transfers
If data is processed outside your country or the European Economic Area, the responsible organization must use an approved transfer mechanism and appropriate supplementary safeguards.
How long data is kept
Data is kept only for the documented period needed for the stated purpose, legal and accounting duties, safety, dispute handling, and system recovery. The center must apply its approved retention schedule and securely delete or anonymize records when that period ends.
Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and complain to the competent data-protection authority. We may need to verify your identity before fulfilling a request.
Automated decisions
The service does not use sensitive profile information to make a solely automated decision that produces legal or similarly significant effects. Staff review is required for accommodation and participation decisions.
How data is protected
Application safeguards include role-based access, multi-factor controls for privileged accounts, field-level encryption for designated sensitive records, audit records, and secure session defaults. The responsible organization must also maintain appropriate backup, monitoring, access-review, incident-response, and recovery procedures.
Cookies and analytics
Necessary cookies support authentication, security, language, and preferences. Optional analytics scripts are not loaded until you allow them. You can reject or change that choice at any time through Cookie preferences.
Contact and privacy requests
Contact the center to ask a privacy question or exercise a data right. Include enough detail to identify your request, but do not send health information or passwords through an unsecured message.
Contact the center