PRIVACY INFORMATION NOTICE – Social Media
1. Who is the Data Controller?
Red Rocks Church US, a non-profit corporation incorporated under the laws of Colorado, with registered office at 9132 West Bowles Ave., Littleton, CO 80123, United States (“Red Rocks Church”) is, together with Facebook (as defined below), the data controller and determines the purposes and means of the processing of personal data. Red Rocks Church designated Red Rocks Church ASBL, having its registered office at Chaussée de Bruxelles 196, 1410 Waterloo, Belgium and with company number 0646.891.911, as its representative within the European Union.
2. What are the categories of Personal Data collected?
When you “like” the Facebook page, you acknowledge that Red Rocks Church and its agents or employees, will process the following personal data relating to you: your first name, last name, gender, age, location, language, comments on and shares of the page, messages you send us on Facebook, post reach and whether you visit the page from an external website (the “Personal Data”).
3. How are Personal Data used?
The Personal Data will be processed by Red Rocks Church in order to manage its Facebook pages, analyse the behaviour of its followers and answer requests from its followers.
4. What legal basis does Red Rocks Church rely on to process your Personal Data?
Red Rocks Church relies its legitimate interests to process the Personal Data. The legitimate interests of Red Rocks Church are to manage its Facebook pages, to increase its audience and to access to its followers requests.
5. What are your rights and how can you exercise them?
You have the right to access your Personal Data, as collected and used by Red Rocks Church, and request their rectification, restriction of processing or erasure, as the case may be. To exercise these rights, you must send a written and signed request to Red Rocks Church at the above-mentioned address or by email at [email protected], together with the necessary elements allowing Red Rocks Church to confirm your identity.
In general, you also have the right to withdraw your consent to any processing at any time. This withdrawal of consent does not affect the lawfulness of the processing based on consent made prior to such withdrawal.
If you consider that the processing of your Personal Data constitutes a violation of the applicable legislation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of the European Union of your usual place of residence, your place of work or the place where the violation occurred. The Belgian supervisory authority is the “Autorité de Protection des Données/Gegevensbeschermingautoriteit” and can be contacted at Rue de la Presse, 35, 1000 Brussels or by email at [email protected]
6. Personal Data retention period
Personal Data will be retained for a maximum period of 6 months after you “unlike” the page unless Red Rocks Church has a specific legitimate interest in storing your Personal Data for a longer period (e.g. to comply with a legal obligation). Any Personal Data which is contained in Red Rocks Church’s or any of its processor’s regular backups will not be deleted, provided that any such Personal Data shall remain subject to the applicable confidentiality, data privacy and security obligations until destroyed.
7. Transfer and security of Personal Data
Red Rocks Church will process the Personal Data through Red Rocks Church ASBL. The Personal Data may however be transferred to third parties for hosting and processing purposes. If necessary, the Personal Data may also be transferred to Red Rocks Church in the United States for management purposes. Appropriate measures will be taken to ensure the security of the Personal Data with respect to such transfer, in particular outside of the European Union (e.g. conclusion of the Standard Contractual Clauses or adhesion to the Privacy Shield). A copy of such appropriate measures may be obtained upon request by following the procedure described above. Personal Data are processed through Facebook, operated by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA (“Facebook”), which adhered to the Privacy Shield.