Privacy Statement for IMI
Privacy statement for IMI includes the units IMI Church, Impulse, Goodness, IMI International, Agenda 1, IMI Open Kindergarten, IMI Holding, Bergelandsgården and IMI Studio
Your privacy is important to us at IMI. Our goal is to keep you as a person well informed about our processing of your personal information and that all information about this should be clear and easily accessible. If you have any questions related to this statement, or to our processing of your personal information, you are most welcome to contact us. Contact information can be found at the bottom of this statement.
IMI is a congregation affiliated with Normisjon. We have services, small group work, guidance service, online store, an active child and youth work in addition to a number of courses, gatherings and conferences.
Generally
This privacy statement describes what information we collect about our members / employees and others who are affiliated with us, why we collect and use information, and how we safeguard your rights and the rules of privacy law. If you are under 15 years of age, your guardians own your personal information. If you are over 15 years old, you own your personal information.
All IMI companies are subject to Norwegian law. The processing of personal data in IMI is regulated by the Personal Data Act, the Marketing Act, the Tax Act and the Accounting Act.
Information that we need to offer you an agreed service, we will take care of as long as you use the relevant service. We do not use the information you provide to us for purposes for which you have not actively given us your consent, or for which we have reason to believe that both you and IMI have a legitimate interest. According to Norwegian law, we are required to take care of some information even after an active relationship with us has ended.
We will never sell your personal information to others, and we delete information we by law do not have the opportunity to store anymore.
Collection, storage, disclosure and other processing of personal data is regulated in the Personal Data Act. The law stipulates i.a. strict requirements for confidentiality and security when processing personal data. The Data Inspectorate supervises the law.
The Data Inspectorate defines:
Personal information as information or assessment that can be linked to you as an individual, such as name, address, telephone number, e-mail address, IP address, car number, photos, fingerprints, iris pattern, head shape (for face recognition) and birth number (both date of birth and social security number).
Sensitive personal information such as information about racial or ethnic background, or political, philosophical or religious beliefs, that a person has been suspected, charged, indicted or convicted of a criminal act, health, sexual or union membership.
Responsible for processing
IMI is responsible for processing the company's processing of personal data. By "data controller" is meant, in the law, the person who determines the purpose of processing personal data and which aids can be used. It is the data controller who is responsible for ensuring that the processing of personal data takes place in accordance with the law.
How is the information retrieved?
IMI collects information directly from the registered person / the registered parent's / relatives, internally in the congregation and through cookies on the website.
Authority for the processing of the information
IMI processes personal information based on the following authorizations:
- Consent from the individual GDPR art 6.1 a and art 9.2 a
- Fulfillment of an agreement with the registered GDPR art 6.1 b
- Legal obligations under other laws GDPR art 6.1 c
What types of personal data are processed?
- When you are a member or active in IMI, we store your contact information (incl. Name, date of birth, residential address, telephone number, e-mail address), gender, marital status / family members and possibly when you became a member. We also store written communication from us to you and possibly your family.
- In the case of employees, in addition to contact information, we also process information about current and previous services, and information in connection with the administration of your employees.
Volunteers who have tasks among children and young people or the disabled are asked to submit a police certificate. These are returned to the person after presentation or shredded. We only keep the date of certificate / presentation. Information about positions of trust and board positions is considered historically important information and is not deleted. - By participating in house churches / cell groups and child / youth work, we collect information about attendance.
- When participating in our child and youth work, information about the child / youth's guardian and their contact information is processed in addition to any illness / allergy and / or other necessary information to ensure the child's needs and safety.
- For guidance, contact with the healing room and / or for prayer needs, we also process submitted information about this.
- When performing church acts (baptism, communion, confirmation and funeral) with us, we store and report all relevant / necessary information as we are required by law.
· For donor service, we store your name and contact information plus account number and social security number, amount and withdrawal date.
The purpose of the processing - what the information is used for
- The contact information is used to reach you with communication from IMI.
- Statutory updating of church books
- When participating in a house church / cell group, courses and child / youth work, attendance, name, year of birth and address are reported to K-stud and ACTA Normisjon / Frifond in connection with an application for support.
- In anonymized form to statistics
- Administration of your staff and membership.
- Personal information and account numbers are used to administer donor services, and for reporting gifts to the tax authorities.
- To take care of different needs in connection with events
How long the information is stored
- Member: Your personal information is stored in the congregation database as long as you are a member. When unsubscribing, you are registered as unsubscribed in the database. If you want your personal information to be deleted upon withdrawal, you can contact us.
- Persons who have had church acts performed under the auspices of IMI: We store the date and place of the act
and information of persons involved. This data is stored forever and reported in accordance with relevant laws. - Employees: As long as you have an active staff, we store your contact information and information about the service. Upon termination of employment, we will delete the information about the service.
- Not a member: All information is deleted when you send us a written request for this, or when we see by audit that the need and / or authority for storage of your information is no longer present.
- Child & youth work: All information is deleted when the guardian sends us a written request for this, or when we see by audit that the need and / or legal basis for storing your information is no longer present.
- Event registration: the information remains in a remote archive.
- Account information is deleted upon termination of donor service, but we store statutory information related to the tax deduction scheme in accordance with current rules / the Accounting Act.
- Information provided by guidance: as long as you go to guidance with us. Information provided by contact with the healing room and / or prayer needs: maximum one week and somewhat anonymised for statistics. All supervisors and employees in the prayer / intercession service and the healing room have a duty of confidentiality.
Who do we share information with?
System Vendors:
- Elvanto (our parish database provider). Congregation staff and volunteer leaders can have access to your contact information, congregation affiliation, and place of service. Elvanto stores its data in Ireland. Your data is secured and regulated by an approved data processor agreement that is in accordance with the GDPR.
- Checkin (event registration system). Staff, volunteer leaders and team leaders working on the event in question have access to your information. Your data is secured and regulated by an approved data processor agreement that is in accordance with the GDPR. You can find an overview of your registered personal information by logging on: https://www.checkin.no/mypage .
- If you have a donor service to the church and / or have given gifts for which you want a tax deduction, your data related to this is processed in our donor handling system Profundo and reported to the Tax Administration. Your data is secured and regulated by an approved data processor agreement that is in accordance with the GDPR. List washing : We maintain the database Profundo and our personal information there with i.a. regular checks against the population register's death register and other registers. Our data processor for this is Bisnode Norway, with which we have a data processor agreement. When paying by credit card, the donor's credit card information must be stated in the payment solution to Nets. Complete credit card information is not available for IMI. When establishing a Direct Debit, Nets also processes the information provided. Storage and processing of this is done by Nets in accordance with Nets' privacy statement
- For gifts given on Vipps, we have access to information about name, mobile number, date, time and amount. This is stored at Vipps in accordance with their privacy statement. IMI collects reports from Vipps as appendices / documentation to the accounts where this is required.
- MailChimp (email service provider) is used to send news mail. Relevant contact information is stored in accordance with MailChimp's privacy statement. You can easily unsubscribe from these emails, by using the link at the bottom of the email.
Grants:
- K-Stud. Lists with name, address, year of birth and attendance protocol are retrieved from Elvanto and registered by us in K-stud's course portal.
- For members of child and youth work up to the age of 26: Name, year of birth and address are registered with ACTA Normisjon / Frifond via a secured registration portal to apply for state support
How we protect the information
We work planned and systematically to ensure information security. All users of Elvanto, Checkin and Profundo receive training and clear guidelines for what they can use the available information for. We have different access levels in the systems that specify what information different users can view or edit. We review users and access levels in Elvanto twice a year. Access is removed / changed if employees / employees leave or take on new tasks. Access to databases is only granted to employees who have a direct service need for the information.
Administration of, and changes in stored information
It is important that the contact information we have registered about you is correct and up to date. Contact us to update your information in case of changes.
Rights
As registered with us, you have the right to demand access to the personal data we process about you and how it is processed. You can demand deletion, change or restrictions in the processing of personal data in accordance with the Personal Data Act. If you wish to exercise this right, contact your team leader or contact us at hei@imikirken.no . Claims from the registered person must be answered free of charge and no later than within 30 days. It can be complained to the Data Inspectorate about processing that is believed to be in violation of the rules.
Contact information
If you have any questions or for other reasons wish to contact us in connection with this privacy statement, you can use the following contact information;
IMI Church
Gunnar Warebergsgate 15
4021 Stavanger
Tel: 51 84 21 60
Mail: hei@imikirken.no
Websites and social media
Our websites use cookies. Such a capsule is a small text file that contains a series of characters that are sent to your computer / mobile when you visit a website. When you visit the website again, the cookie helps the website to recognize your browser. You can set your browser to reject all capsules, or notify you when a capsule is sent. However, some website features or services may not work optimally without capsules. We recommend that you use cookies on our website.
The church uses cookies to generate statistics, and we can thus track your use of the website - but this is done anonymously.
The following cookies are used on the website:
- The analysis tool Google Analytics that stores statistics when using the website used for analysis and improvement points.
- Our publishing solution also places cookies on your computer. These are mainly used in connection with the submission of forms.
- Our translation service Weglot uses cookies to remember which language you use on our pages.
- Adform, and Facebook collects information used for marketing, and is stored anonymously.
- Google Tag Manager keeps track of all our publishing scripts
Storage of information and processing of this information is not permitted unless the user has both been informed of and has given his consent to the processing. The user shall be informed of and approve which information is processed, what the purpose of the processing is and who processes the information, cf. Electronic Communications Act § 2-7b.
Here you will find more information about what cookies are and how to manage their use:
https://nettvett.no/slik-administrer-du-informasjonskapsler/
https://cookiesandyou.com/
Webflow
If you fill out a contact form on our website, this will be stored in Webflow in line with their privacy statements, with the information you have provided.
Personal information for which we do not take responsibility
Social media such as Facebook, Instagram, Twitter, Snapchat and the like will collect information about you in line with their privacy statements if you enter into a relationship with IMI on their pages. It happens when you visit pages and profiles belonging to IMI and our groups on their pages, click on links on these pages, like, follow, comment, share, etc. Processing of this personal information we consider the owner of the social media's area of responsibility and we relate us to these as users (not owners). We will not actively go in and retrieve and store personal information from here, but will be able to retrieve anonymous user information.
