Privacy Policy

1. Website operator and contact

Sihtasutus Gospelmeedia, registry code 90016565 (the “Foundation”, “we” or “us”), operates the GospelMeedia website and is the controller for the personal data processing described here.

Our contact for privacy and personal data matters is Vaido Palmik. Email vpalmik@gmail.com. You may also use this contact to exercise your data protection rights.

2. Information we use

This website introduces GospelMeedia’s activities, the Christian content platform we are developing and our media production capabilities. It does not offer account registration, newsletter sign-up, payments or an enquiry form. We do not build a reading or viewing history for visitors or use analytics or advertising trackers.

Information may come from a message you send us, a representative of your organisation or an event organiser. Technical request information reaches the hosting infrastructure when you use the website. If you choose, your language and display preferences remain in your browser. The gallery contains photographs of productions and events in which people may be identifiable.

3. Correspondence and partnership enquiries

When you email us, we process the sender’s name, email address, message, attachments and any contact, organisation or event information you include. We use this information to reply, discuss cooperation and organise agreed activities. A contact button opens your email application; clicking it alone does not send a message or submit form data.

General enquiries and communication with organisation representatives are handled on the basis of our legitimate interest in communicating with interested people and partners (Article 6(1)(f) of the General Data Protection Regulation). Where you personally request a contract or are a party to it, we use necessary information for pre-contractual steps or performance of that contract (point (b)). Processing needed to meet a legal obligation relies on point (c).

Providing information is voluntary. Without contact details needed to reply, we may be unable to resolve your enquiry. Please send only relevant information. An ordinary partnership enquiry does not require details about your health, religious beliefs or other sensitive personal circumstances.

4. Website delivery and technical information

Your browser sends a technical request to the hosting server to display the page. It may include an IP address, request time, requested page or file address and technical browser or device information. Technical information is used to deliver the website, resolve faults and address misuse or security incidents. The basis is our legitimate interest in keeping the website available and secure (Article 6(1)(f)).

The photographs, logo, styles and scripts are loaded from the same website. There are no external video players, advertising pixels or third-party font requests. Opening the gallery does not activate an external tracking service.

5. Language and display preferences

Language, text size, colours, motion and reading layout work without persistent storage. If you allow remembering in Cookie settings, the website stores these choices only in your browser’s local storage. The website script does not send the preferences to a server. Optional remembering is based on your consent (Article 6(1)(a)).

Remembering is optional and off by default. You can withdraw permission at any time by choosing Continue without saving in Cookie settings. This removes saved preferences without preventing you from using the website. See Cookies and local storage for the information stored and its lifetime.

6. Photographs, personal stories and materials

The gallery illustrates our media work and event coverage. Photographs may be supplied by our team or a contributing partner. Publication must have a basis appropriate to the circumstances: consent or a balanced legitimate interest in presenting our activities, taking account of the person’s expectations, privacy and children’s need for particular protection. Attending an event is not, by itself, consent to every type of publication.

If material reveals special categories of personal data, such as religious beliefs or health information, an Article 9 condition, such as explicit consent, is required in addition to an ordinary legal basis. Legitimate interest alone is not sufficient to publish such material.

Sending a personal story, photo or interview proposal does not automatically give us permission to publish it. The scope of publication and any necessary permission are agreed separately. To ask about or request removal of a photograph showing you, contact us and identify the relevant photograph or page.

7. Who may access information

Information is available to people acting for the Foundation who need it to handle your enquiry, cooperation or data protection request. Hosting, IT support and email service providers may be involved in operating the website and communications. Competent authorities or legal advisers may receive information where legally justified. We do not sell your contact details or add you to a marketing list because you contacted us.

Our contact address uses Gmail. Messages therefore pass through Google’s email service and the sender’s own email service. Google explains its processing in the Google Privacy Policy, which identifies Google Ireland Limited as controller for users of Google services in the European Economic Area. We remain responsible for the purposes and use of our correspondence.

8. Processing outside the European Economic Area

Using Gmail may involve processing correspondence outside the European Economic Area, including in the United States. Google’s data transfer frameworks describe adequacy decisions, the EU–US Data Privacy Framework and standard contractual clauses where needed. You can obtain more information about applicable safeguards through that page or our contact person.

Photographs and text published on the website are publicly available on the internet. Publication is different from private correspondence: people outside Europe may also view public material.

9. How long information is kept

Browser preferences: up to 180 days from permission. An expired record is no longer applied and is removed on your next visit; you can delete it sooner yourself.

Correspondence: until the enquiry and justified related follow-up have been completed. Information documenting cooperation agreements or claims is kept for as long as needed to perform the agreement, meet a legal obligation or deal with a specific legal claim. Unnecessary background information does not need to be kept for the same period.

Technical information: for the period needed to deliver the page. If information is retained in a security or error log, retention is determined by the need to detect, investigate and resolve the relevant fault or threat; it is not used to profile visitors indefinitely.

Published photographs and other material: while the material serves its information purpose and publication has a legal basis. When consent is withdrawn or an objection or erasure request is received, we assess the basis for continuing publication and retention separately.

10. Your rights

You may ask what personal data we process about you, receive a copy and ask us to correct inaccurate information. Where the legal conditions are met, you may request erasure or restriction and receive data processed automatically on the basis of consent or a contract in a portable format.

You may object to processing based on legitimate interests on grounds relating to your situation. You can withdraw consent at any time; withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn. Not every right applies in the same way in every situation. This website does not make decisions about you with legal or similarly significant effects based solely on automated processing, or create profiles for that purpose.

11. Requests and complaints

Send a request to Vaido Palmik at vpalmik@gmail.com, identifying the relevant information or material. Where necessary, we ask only for additional information needed to verify your identity.

We respond without undue delay, normally within one month of receiving a request. For complex or numerous requests, the law permits an extension of up to two further months; we will explain any extension within the first month. Requests are normally free of charge.

If you believe your data protection rights have been infringed, you may complain to the Estonian Data Protection Inspectorate or seek a judicial remedy. You may also be entitled to contact the supervisory authority where you live or work.

12. Updates to this information

We update this information when website features or our use of data change. Changes and the current date are published here. Where a new use requires consent, we ask for it separately; continuing to use the website does not replace consent.

Further information is available in the General Data Protection Regulation and the European Data Protection Board’s guide to individual rights.