Privacy Policy — OESSH PL Mobile App

Last updated: May 21, 2026

1. Data Controller

The controller of your personal data is:

Equestrian Order of the Holy Sepulchre of Jerusalem — Lieutenancy in Poland
e-mail: kontakt@panel-oessh.pl
website: panel-oessh.pl

2. Data We Process

The OESSH PL app processes the following data:

• Login credentials: username and password (verified server-side only; not stored on the device).
• Profile data: first name, last name, title, e-mail address, phone number, home address, city.
• Order-related data: current degree, diocese, province, year and place of investiture, promotion dates and places, Gloria awards.
• Profile photo: voluntarily uploaded by the user.
• Participation history: event registrations and attendance.
• Payment history: membership dues and other contributions.
• Push notification token: device identifier used to deliver notifications (generated by the operating system).

3. Purpose and Legal Basis for Processing

• Order membership management — Art. 6(1)(b) GDPR (performance of a contract/membership relationship) and Art. 9(2)(d) GDPR (processing by a religious organisation in the course of its statutory activities).
• Member communication (announcements from the Lieutenant, event notifications) — Art. 6(1)(f) GDPR (legitimate interests of the controller).
• Organisation of Order events (participant registration) — Art. 6(1)(b) GDPR.
• Schematism (member directory) made available to other logged-in members — Art. 9(2)(d) GDPR.

4. Data Sharing

Personal data are not sold or transferred to third parties for commercial purposes. Data may be shared only with:

• Other logged-in members of the Order — limited to schematism fields (name, degree, city, diocese, province, investiture) and Council contact details (name, role, e-mail, phone).
• Hosting provider — opoka.org.pl (server hosting the CRM system).
• Expo (Expo Application Services) — solely for the purpose of delivering push notifications (device token).

Data are not transferred outside the European Economic Area.

5. Data Retention

Personal data are retained for the duration of membership in the Order and, after its termination, for the period required by applicable law (in particular accounting and archiving obligations) or until an objection or erasure request is granted.

Push notification tokens are deleted automatically upon uninstalling the app or changing the device.

6. Your Rights

You have the following rights regarding your personal data:

• Access — the right to obtain information about data being processed.
• Rectification — the right to correct inaccurate or incomplete data (partially available directly in the app under Profile).
• Erasure — the right to request deletion of data, unless legal obligations or legitimate interests apply.
• Restriction of processing — the right to request suspension of processing in certain circumstances.
• Objection — the right to object to processing based on legitimate interests.
• Data portability — the right to receive data in a structured format.

To exercise any of the above rights, please contact us at: kontakt@panel-oessh.pl.

You also have the right to lodge a complaint with a supervisory authority. In Poland: Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl).

7. Data Security

Data are stored on a secured server with an encrypted connection (HTTPS). Access to the CRM system is protected by individual API keys. User passwords are not stored in the mobile app.

8. Cookies and Tracking

The OESSH PL mobile app does not use cookies, analytics tools, or advertising. No user activity tracking is performed beyond the necessary session login.

9. Children

The app is intended solely for Order members and adults. We do not knowingly collect data from persons under 18 years of age.

10. Changes to This Policy

Users will be informed of any significant changes to this policy via push notifications or an in-app message.

11. Contact

For matters related to personal data protection, please contact us at:
kontakt@panel-oessh.pl

12. Child Safety Standards (CSAM)

The OESSH PL app is intended exclusively for adult members of the Equestrian Order of the Holy Sepulchre of Jerusalem. Access requires an account created by the system administrator.

The app does not allow users to publish or share content. All content displayed in the app is managed solely by the organisation's administrator.

The Equestrian Order of the Holy Sepulchre of Jerusalem (OESSH) has a zero-tolerance policy toward any content depicting the sexual exploitation of children (CSAM) or the violation of children's rights. Such content is strictly prohibited and has never been, nor will ever be, present in the app or the organisation's systems.

If you become aware of any violations, please contact us immediately at: kontakt@panel-oessh.pl