Log in Register
Church website & Kreo

Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how Krikščionių bažnyčia „Atsinaujinimas“ (“we”, “us”, “the Church”) processes personal data when you use https://atsinaujinimas.lt, https://kreo.atsinaujinimas.lt (Kreo), and related sign-in options (email/password, Google, Apple, Facebook).

A separate notice for the Renewal Stage Android app is available at https://atsinaujinimas.lt/privacy-stage.php.

If you do not agree with this policy, please do not create an account or use the signed-in parts of the site.

1. Who is responsible

The data controller is:

  • Name: Krikščionių bažnyčia „Atsinaujinimas“
  • Company code: 303529353
  • Address: Gabijos g. 30, Pašilaičiai, 01118 Vilnius, Lithuania
  • Email: info@atsinaujinimas.lt
  • Phone: +370 604 03976

2. What the website and Kreo do

The public website shares church information (services, ministries, café, home groups, calendar, contact details).

Kreo is our ministry tool for church members and volunteers: profiles, events, teams, songs, schedules, and related notifications. Access to some Kreo features depends on the role assigned by church administrators.

3. Personal data we process

Depending on how you use the site, we may process:

  • Account data: first and last name, email address, password (stored as a one-way hash), optional phone number, optional address and date of birth, interface language, church status, team membership, and access level.
  • Sign-in provider identifiers: a Google, Apple, or Facebook account id when you choose to sign in with those services, plus the name, email, and profile picture those providers share with your consent. Apple may provide a private relay email instead of your real address if you choose Hide My Email.
  • Ministry activity in Kreo: events and songs you are assigned to, availability, assignment responses, and optional notes.
  • Notifications: email preference; Telegram identifiers if you link Telegram; Android push tokens if you use Renewal Stage with notifications enabled.
  • Technical and security data: session cookies, optional “remember me” cookie, language cookie, Google reCAPTCHA on login/registration, IP address, device/browser type, and standard server logs.
  • Messages you send via contact forms or email to the church.

4. Why we use the data

We process personal data to:

  • Operate the church website and Kreo ministry tools.
  • Create and authenticate your account (including Google, Apple, or Facebook sign-in).
  • Show schedules, songs, events, and assignments relevant to you.
  • Send ministry emails or Telegram messages if you enable those channels.
  • Protect the service against abuse (reCAPTCHA and security logs).
  • Comply with legal obligations when required.

Under the GDPR, the legal bases are typically performance of a service / our legitimate interest in running church ministry, your consent for optional channels and social sign-in, and legal obligation where the law requires it.

5. Cookies

We set first-party cookies on atsinaujinimas.lt and kreo.atsinaujinimas.lt:

  • A session cookie, required to stay signed in.
  • renewal_remember — only if you choose persistent sign-in (for example after Google or Facebook login).
  • renewal_lang — to remember the interface language (up to 1 year).

We do not use advertising cookies or third-party ad trackers on the church website.

6. Who else receives data

We do not sell personal data. We share it only as needed to run the service:

  • Our website hosting provider (Interneto vizija / serveriai.lt, servers in Lithuania).
  • Google LLC — Sign-In / One Tap (if you use Google), reCAPTCHA, fonts, and Firebase for Stage push notifications.
  • Apple Inc. — only if you choose Sign in with Apple; Apple authenticates you and may share your name and email (or a private relay email).
  • Meta Platforms (Facebook) — only if you choose Facebook Login; Meta receives the fact that you signed in to our site and shares your Facebook profile fields that you approve.
  • Telegram — only if you link Telegram for notifications.
  • jsDelivr — delivery of public CSS and JavaScript libraries.
  • Church staff and volunteers with Kreo access, according to their role.

Google, Meta, Telegram, and similar providers process data under their own privacy policies when you use those services.

7. Transfers outside the EEA

Some processors (including Google, Meta, and Telegram) may process data outside the European Economic Area. Where they do, they rely on safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

8. How long we keep data

Account and ministry records are kept while your account is active and as long as needed for church administration. Session data lasts until you sign out or the session expires. Security logs are kept for a limited period needed to investigate abuse or incidents.

You may ask us to delete your account. We will erase or anonymize personal data unless we must keep it for a legal reason.

9. How to delete your data (including Facebook Login)

To delete your church account and related personal data, email info@atsinaujinimas.lt from the address linked to your account and ask for deletion. We will confirm and remove or anonymize the data we hold, subject to any legal retention duty.

If you signed in with Facebook, you can also remove the app’s access in your Facebook settings (Settings → Apps and websites). That stops future Facebook Login; to erase data already stored with us, still contact info@atsinaujinimas.lt.

10. Security

We use HTTPS, hashed passwords, role-based access, and CSRF protection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

If you are in the EEA or the UK, you may request access, correction, deletion, restriction, objection, and data portability. Where processing is based on consent, you may withdraw consent at any time (this does not affect processing already carried out).

You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, https://vdai.lrv.lt) or with your local supervisory authority.

To exercise your rights, email info@atsinaujinimas.lt.

12. Children

Account registration and Kreo are intended for church members and ministry volunteers. They are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, contact us and we will delete it.

13. Changes

We may update this policy. The “Last updated” date at the top will change. The current version is always published at https://atsinaujinimas.lt/privacy.php.

14. Contact

Krikščionių bažnyčia „Atsinaujinimas“

Gabijos g. 30, 01118 Vilnius, Lithuania

Email: info@atsinaujinimas.lt

Phone: +370 604 03976