Our Lady Queen of Africa Catholic Church (OLAQA), based in Oshuiman, Ghana, is committed to protecting the personal data of its members, clergy, staff, and volunteers in compliance with both civil and ecclesiastical laws. This policy outlines our approach to data collection, storage, processing, and sharing in a way that respects privacy and the dignity of the human person, in accordance with the teachings of the Catholic Church.
The purpose of this policy is to:
This policy applies to:
This policy aligns with:
We collect the following categories:
We collect data based on:
All data must be:
All individuals have the right to:
We enforce:
The appointed DPO is responsible for:
In the event of a breach:
All personnel accessing personal data (secretaries, youth leaders, finance officers, etc.) must sign a Confidentiality Agreement and may only access data required for their roles.
Information shared in spiritual or personal counseling must be kept private and stored securely. Notes must be encrypted or physically locked.
No personal stories or examples may be shared in sermons, publications, or testimonies without written permission or proper anonymization.
All sensitive data must be encrypted or stored in locked cabinets. Only authorized individuals may access such data.
Former staff and clergy are still bound by confidentiality. They must return or delete any personal data they held during their service.
The Church utilizes secure digital platforms for collecting, storing, and managing member data. These platforms operate under written agreements as third-party data processors and are selected based on their compliance with applicable data protection laws and international standards.
All data stored or transmitted through these platforms is:
The Church does not disclose the specific service providers publicly to maintain security integrity, but ensures that all processors adhere to relevant provisions of the Ghana Data Protection Act (Act 843) and, where applicable, the General Data Protection Regulation (GDPR).
Complaints may be lodged to the:
Steps:
This agreement is made between:
Our Lady Queen of Africa Catholic Church ("Data Controller")
and ("Data Processor")
1. PURPOSE: The Processor shall handle personal data solely for the purpose of .
2. DATA HANDLED: [Specify types – e.g., names, contact details, images]
3. SECURITY: The Processor shall implement appropriate security measures.
4. CONFIDENTIALITY: All data is confidential and may not be shared.
5. DATA BREACH: The Processor shall notify the Controller within 24 hours of any suspected breach.
6. TERMINATION: Upon end of service, all data must be deleted or returned securely.
Signed:
Data Controller (OLAQA): Date:
Data Processor: Date:
Date of Incident:
Time of Discovery:
Reported by:
Contact Info:
DESCRIPTION OF INCIDENT
- What happened?
- What data was affected?
- Number of individuals affected:
IMMEDIATE ACTIONS TAKEN
Date of report to Commission (if applicable):
Name of Investigator:
Signature: Date:
I, , acknowledge that in my role as a staff member or volunteer with Our Lady Queen of Africa Catholic Church, I may have access to personal and sensitive data.
I agree that:
This agreement remains valid even after my role ends.
Name:
Role:
Signature:
Date: