GDPR

What is GDPR?

The General Data Protection Regulation is the European Union privacy law that protects personal data and gives individuals clear rights over how their information is collected, used, corrected, moved, restricted, or deleted.

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to avoid automated decision-making

Why GDPR matters

Churches and ministry organizations often steward sensitive personal information about members, households, volunteers, donors, teams, and guests. GDPR-aligned practices help teams keep that information understandable, governed, and easier to respond to when someone makes a privacy request.

Controller and processor responsibilities

Most organizations using Cendance remain responsible for deciding what personal data they collect and how they use it. Cendance supports those responsibilities with organization-scoped records, permission-aware workflows, and operational controls that help teams manage access to personal data.

• Organization-owned people and household records
• Role and group-based access patterns
• Admin workflows for reviewing and managing operational data
• Support routing for access, deletion, correction, and export requests

Data location and transfers

If your organization needs details about data residency, subprocessors, transfer safeguards, or vendor review materials, contact the Cendance team so we can provide the latest approved information for procurement and compliance review.

Protecting personal data

Cendance treats privacy and security as connected product responsibilities. The platform is built around authenticated access, organization boundaries, and least-privilege workflows that reduce unnecessary exposure of personal data.

• Authenticated workspace access
• Organization-level data boundaries
• Permission-aware product surfaces
• Security review of sensitive workflows as the product evolves

GDPR resources and questionnaires

For data processing questions, privacy questionnaires, or access to current compliance materials, contact [email protected].