Privacy policy
Last updated: 16 September 2026. This document explains how Kościół Nowego Przymierza w Lublinie processes personal data of people who use megachurch.pl. It is also the information required by Article 13 GDPR (RODO).
1. Controller
The controller is Kościół Nowego Przymierza w Lublinie, ul. Czeremchowa 12/19, 20-807 Lublin, Poland.
For matters about personal data, write to [email protected].
The controller has not appointed a data protection officer.
Meetings take place at Panieńszczyzna 44A. That is a meeting place, not the controller’s correspondence address.
The Polish-language site megakosciol.pl has a separate privacy policy.
2. What you can do on this site
On megachurch.pl you can:
- send a message through the contact form,
- read about the church, its beliefs and the Gospel,
- follow a link to our YouTube channel — that takes you off this site.
We do not run user accounts and we have no analytics of our own: there is no Google Analytics and there are no advertising pixels. We do not load tracking scripts. We do not embed YouTube players; a click on YouTube opens Google’s site.
3. Contact form
What data: a first name or whatever we should call you, an e-mail address, and the message.
Purpose: to reply to the message.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in corresponding with people who contact us of their own accord.
Recipients: the message is sent by e-mail through EmailLabs (Vercom S.A., Poland) to [email protected]. Cloudflare Turnstile checks that a person, not a bot, filled in the form.
IP address: we do not attach it to the message. The server uses the IP address only for anti-spam checks and a sending limit. The counter stores a hash of the address, not the address itself.
How long: for as long as we need to reply and continue the correspondence, and — if a dispute arises from the message — until claims become time-barred.
Sending a message does not add you to a mailing list or a newsletter database.
Providing the data is voluntary, but without an e-mail address and a message we cannot reply.
4. Technical tools on this site
Hosting and CDN. dhosting.pl serves the site. Cloudflare (Cloudflare, Inc. and Cloudflare Ireland Limited) sits in front of the server: delivery, attack protection, and the HTTPS certificate. Servers keep logs (IP address, date, requested URL, browser) for as long as the providers’ settings require, for security and diagnostics. Legal basis: Article 6(1)(f) GDPR.
Cloudflare Turnstile protects the contact form. Cloudflare processes the IP address and browser data in order to reject bots. Legal basis: Article 6(1)(f) GDPR — protecting the form and the mailbox. Details: Cloudflare’s privacy policy.
YouTube. We do not load Google or YouTube servers from this site. If you follow a link to our channel, Google may process your data under its privacy policy.
Cookies. We do not set our own tracking cookies. Cloudflare may set technical cookies related to security — Turnstile works as part of that mechanism.
We do not profile you for advertising, we do not sell data, and we do not take decisions about you by solely automated means.
5. Recipients and transfers outside the EEA
Data go only to parties that need them for a specific service:
| Party | What for |
|---|---|
| Cloudflare | CDN, attack protection, Turnstile |
| dhosting.pl | hosting the site |
| Vercom S.A. (EmailLabs) | sending e-mail from the contact form |
| Google / YouTube | only if you follow a link to the channel |
A public authority will receive data only when a legal provision requires it.
EmailLabs and dhosting operate in Poland. Cloudflare — and Google, if you follow a YouTube link — may use subprocessors outside the EEA. In that case they rely on standard contractual clauses and other safeguards under Chapter V GDPR.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability (where we process data on the basis of consent or a contract and by automated means), objection to processing based on legitimate interest, and withdrawal of consent where we rely on it.
To exercise them, write to [email protected]. You also have the right to lodge a complaint with the President of the Personal Data Protection Office of Poland (uodo.gov.pl).
7. Children
The form on this site is not directed at children. If you are under 16, a parent or guardian should write on your behalf.
8. Changes
If we change how we process data — a new form, a new processor, or a new purpose — we will update this page and the date at the top.