Stichting Oude Salviuskerk attaches great importance to the protection of your personal data. In this privacy statement, we explain what data we collect, why we do so, and how we protect your privacy. This policy has been drawn up in accordance with the General Data Protection Regulation (GDPR). Last updated: February 2026.
Stichting Oude Salviuskerk is the data controller within the meaning of the GDPR. Address: Platz 2, 6141 AT Limbricht, the Netherlands. Email: info@salviuskerkje.nl.
We only collect personal data that is necessary for providing our services. Per feature: Bookings: name, email address, phone number, group size, and optionally a message. Contact forms: name, email address, subject, and message. Newsletter: email address (with double opt-in confirmation). Story Archive: name, email address, story text, and optional images. Memorial service forms: name, email address, phone number, ceremony type, preferred date, and message. Accounts (administrators/volunteers): name, email address, and password (stored encrypted).
Your data is used exclusively for: processing and confirming bookings (legal basis: performance of a contract), responding to contact requests (legal basis: legitimate interest), sending the newsletter (legal basis: explicit consent), publishing submitted stories after approval (legal basis: consent), processing payments via Mollie (legal basis: performance of a contract), and operating the volunteer portal (legal basis: legitimate interest).
We only share your data with processors that are necessary for our services: SendGrid (Twilio) for sending emails (US, EU Standard Contractual Clauses), Cloudflare R2 for image storage (EU), Mollie for payment processing (the Netherlands), and Google for displaying maps and calendar integration (US, EU Standard Contractual Clauses). Data processing agreements have been concluded with all these parties.
We apply the following retention periods: Bookings: 2 years after the event. Contact forms and memorial requests: 1 year after handling. Newsletter subscribers: until unsubscription, then 30 days. Submitted stories: as long as published, unless deletion is requested. Accounts: until deletion by the user or administrator. Audit log: 3 years.
Under the GDPR, you have the following rights: Right of access: you can request which data we process about you. Right to rectification: you can have incorrect data corrected. Right to erasure: you can request deletion of your data. Right to data portability: you can receive your data in a common format. Right to object: you can object to processing based on legitimate interest. Right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). To exercise your rights, contact us at info@salviuskerkje.nl. We will respond within 30 days.
Our website uses the following cookies: Necessary cookies: session cookies for login (NextAuth) and storing your cookie preferences. These are always active. Functional cookies: only set with your consent. These are needed for displaying Google Maps and the StudiovR virtual tour. Analytical cookies: we use Plausible Analytics, a privacy-friendly analytics tool that does not set cookies and does not collect personal data. No consent is required for this. You can change your cookie preferences at any time via the 'Cookie settings' button at the bottom of every page.
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Passwords are stored encrypted. The connection to our website is secured with SSL/TLS encryption.
We reserve the right to modify this privacy statement. The most recent version is always available on our website. In case of significant changes, we will inform you via the website or by email.
Do you have questions about our privacy policy or would you like to exercise one of your rights? Contact us at info@salviuskerkje.nl or write to Stichting Oude Salviuskerk, Platz 2, 6141 AT Limbricht.