Privacy Policy

This Privacy Policy sets out how St. Anthony’s R.C. Parish uses and protects Your Personal Data, Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

Parish (referred to as either “the Parish”, “We”, “Us” or “Our” in this Agreement) refers to St. Anthony’s R.C. Parish, Oudstrijderslaan 23-25, 1950 Kraainem, Belgium.
Personal Data is any information that relates to an identified or identifiable natural person.
Program means the “Step In faith exploration program” offered by the Parish.
Service refers jointly to the Website and the Program.
Service Provider means any natural or legal person who processes the data on behalf of the Parish to facilitate the Service, to provide the Service on behalf of the Parish, or to perform services related to the Service.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
Website refers to the Stepin2faith website accessible at https://stepin2faith.com/
You means the individual accessing or using the Service.

Collecting and Using Your Personal Data

The Parish is the controller and responsible for Your Personal Data.

Types of Data Collected

Personal Data

While participating in the Program, using Our Website (including the online form to join the Program) or by corresponding with us by post, phone, email or otherwise, You may provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Email address – to send updates, schedules and information regarding the Program
First name and last name – to identify you and communicate with you personally
Phone number – for urgent communications regarding the Program
Age – to verify You meet the minimum age requirement of 15 for participation in the Program
Technical Data – to administer and protect our Website

Cookies

Our Website uses cookies to distinguish You from other users of Our Website. This helps Us provide You with a good experience when You browse Our Website and also allows Us to improve Our Website.

A cookie is a small file of letters and numbers that We store on Your browser or the hard drive of Your device if You agree. Cookies contain information that is transferred to Your computer’s hard drive. We may use the following cookies:

Strictly necessary cookies: These are cookies that are required for the operation of Our Website. These essential cookies are always enabled because Our Website cannot work properly without them. You can switch off these cookies in Your browser settings but You may then not be able to access all or parts of Our website.
Analytical or performance cookies: These allow Us to recognize and count the number of visitors and to see how visitors move around Our website when they are using it. This helps Us to improve the way Our Website works.

Legal Basis and Use of Your Personal Data

The law requires us to have a legal basis for collecting and using Your Personal Data. We rely on one or more of the following legal bases:

Legitimate interests: We may use Your Personal Data where it is necessary to run the Program and pursue our legitimate interests, for example to prevent fraud and enable Us to give you the best and most secure experience. We make sure we consider and balance any potential impact on You and Your rights (both positive and negative) before we process Your Personal Data for our legitimate interests. We do not use Your Personal Data for activities where our interests are overridden by the impact on You (unless we have Your consent or are otherwise required or permitted to by law).
Legal obligation: We may use Your Personal Data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
Consent: We rely on consent only where we have obtained Your active agreement to use Your Personal Data for a specified purpose, for example if you submit the online form on Our Website to join the Program.

We have set out below, in a table format, a description of all the ways we plan to use the various categories of Personal Data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interest are where appropriate:

Purpose / Use	Type of Data	Legal Basis and Retention Period
To provide the Program (including contacting you by email, telephone calls, SMS, or other equivalent forms of electronic communication, regarding updates or informative communications related to the Program or Website)	Identity, age and contact data	Consent: You give Your active consent to the processing of this Personal Data when you sign up to the program through the form on Our Website by ticking the appropriate box. If You participate in the Program, we will retain Your Personal Data for 2 years. If you register in the Program but do not participate, we will delete Your Personal Data after 1 year.
To manage our relationship with You which will include: Notifying you about changes to our Privacy PolicyDealing with Your requests, complaints and queries	Identity and contact data	Performance of a contract with youNecessary to comply with a legal obligationNecessary for our legitimate interests (to keep records updated and manage our relationship with you) We will retain this data for 2 years (or as long as required by applicable law, if longer)
To administer and protect our Website	Identity, contact and technical data	Necessary for our legitimate interests (for running our Parish activities, provide administration and IT services, security / to prevent fraud)Necessary to comply with a legal obligation We will retain this data for 2 years (or as long as required by applicable law, if longer)

Disclosures of Your Personal Data

We may share Your Personal Data where necessary in the following situations:

With Program facilitators and pastoral staff who need access to provide appropriate spiritual guidance and run the Program
With Technical service providers who help Us maintain the Website.
With Your consent: We may disclose Your personal information for any other purpose with Your active consent.
With law enforcement where the Parish is legally required to disclose Your Personal Data by law or in response to valid requests by public authorities (e.g., a court of a government agency)

We require all recipients of Personal Data to respect the security of Your Personal Data and to treat it in accordance with the law. We do not allow recipients of Your Personal Data to use Your Personal Data for their own purposes and only permit them to process Your Personal Data for specified purposes and in accordance with our instructions.

Retention of Your Personal Data

The Parish will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy (see table above). To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential harm from unauthorized use or disclosure of Your Personal Data, the purposes for which we process Your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory or other requirements.

Transfer of Your Personal Data

Your information, including Personal Data, is processed by the Parish within Belgium (the European Union). If we ever need to transfer data outside the European Union (e.g., to service provides that may carry out certain functions in relation to the Website), we will ensure a similar degree of protection is afforded to it by ensuring:

Your Personal Data is only transferred to countries that have been deemed by the European Commission to provide an adequate level of protection for Personal Data; or
Specific standard contractual terms approved by the European Commission for use which give the transferred Personal Data the same protection as it has in the EU are in place.

The Parish will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country outside the European Union unless there are adequate controls in place including the security of Your data and other personal information.

Data Security

We have put in place appropriate security measures to prevent Your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to Your Personal Data to those natural and legal persons who have a need to know. They will only process Your Personal Data on our instructions and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify You and any applicable regulator of a breach where we are legally required to do so.

Your Legal Rights

You have a number of rights under data protection laws in relation to Your Personal Data, including the rights to:

Request access to Your Personal Data (commonly known as a “subject access request”). This enables You to receive a copy of the Personal Data We hold about You and to check that We are lawfully processing it.
Request correction of the Personal Data that We hold about You. This enables You to have any incomplete or inaccurate data We hold about You corrected, though We may need to verify the accuracy of the new data You provide to Us.
Request erasure of Your Personal Data in certain circumstances. This enables You to ask Us to delete or remove Personal Data where there is no good reason for Us continuing to process it. You also have the right to ask Us to delete or remove Your Personal Data where You have successfully exercised Your right to object to processing (see below), where We may have processed Your information unlawfully or where we are required to erase Your Personal Data to comply with local law. Note, however, that we may not always be able to comply with Your request of erasure for specific legal reasons which will be notified to You, if applicable, at the time of Your request.
Object to processing of Your Personal Data where we are relying on a legitimate interest as the legal basis for that particular use of Your Personal Data. In some cases, we may demonstrate that we have compelling legitimate grounds to process Your information which override Your right to object.
You also have the absolute right to object any time to the processing of Your Personal Data for direct marketing purposes.
Request the transfer of Your Personal Data to You or to a third party. We will provide to You, or a third party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which You initially provided consent for Us to use.
Withdraw consent at any time where we are relying on consent to process Your Personal Data (see table above for details of when we rely on Your consent as the legal basis for using Your data). However, this will not affect the lawfulness of any processing carried out before You withdraw Your consent. If You withdraw Your consent, we may not be able to provide you with certain parts of the Program. We will advise You if this is the case at the time You withdraw Your consent.
Request restriction of processing of Your Personal Data. This enables You to ask us to suspend the processing of Your Personal Data in one of the following scenarios:
- If you want us to establish the data’s accuracy;
- Where our use of the data is unlawful but You do not want us to erase it;
- Where You need us to hold the data even if we no longer require it as You need it to establish, exercise or defend legal claims; or
- You have objected to Our use of Your Personal Data but we need to verify whether we have overriding legitimate grounds to use it.

If You wish to exercise any of the rights set out above, please contact Us by email ([email protected]) or by post (St. Anthony’s R.C. Parish, Oudstrijderslaan 23-25, 1950 Kraainem, Belgium).

You will not have to pay a fee to access Your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if Your request if clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with Your request in these circumstances.

We may need to request specific information from You to help Us confirm Your identity and ensure Your rights to access Your Personal Data (or to exercise any of Your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact You to ask for further information in relation to Your request to speed up Our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if Your request is particularly complex or You have made a number of requests. In this case, we will notify You and keep You updated.

Children’s Privacy

Our Service does not address anyone under the age of 15. We do not knowingly collect personally identifiable information from anyone under the age of 15. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 15 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.

Links to Other Websites

Our Website and communications provided to you as part of the Program may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We keep Our Privacy Policy under regular review. This version was last updated on September 3^rd, 2025. We will notify You of any changes by posting the new Privacy Policy on this page and update the “Last updated” date in this section. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Details

If you have any questions about this Privacy Policy or about the use of Your Personal Data, please contact us by email ([email protected]) or by post (St. Anthony’s R.C. Parish, Oudstrijderslaan 23-25, 1950 Kraainem, Belgium).

Complaints

You have the right to make a complaint to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), the Belgian regulator of data protection issues (https://www.gegevensbeschermingsautoriteit.be/). However, before doing so, please make sure You have first made Your complaint to Us or asked Us for clarification if there is something You do not understand. You can direct Your complaints and questions to us by email ([email protected]) or by post (St. Anthony’s R.C. Parish, Oudstrijderslaan 23-25, 1950 Kraainem, Belgium).