Last updated: 15 October 2026
Controller and applicable framework
This notice describes the public contact, pilgrimage and prayer-intention forms. The code sends these requests by email; it does not show a database write for these parish submissions.
Gabonese Law No. 025/2023 amends Law No. 001/2011 on personal data protection. It includes rules on individual rights, data relating to people under 18, sensitive data and international transfers. The legal entity responsible and the formalities for each activity must be confirmed by the administration; they cannot be established from code alone.
Data and request handling
Required fields are marked in each form. Optional fields may be left blank. A form cannot be submitted when required information or required acknowledgements are missing.
| Request | Data requested | Transmission | Retention |
|---|---|---|---|
| Contact | Name, email address and message are required; phone is optional | Email to the configured parish recipient via Resend; if the optional writing aid is used, the message text is sent to OpenAI | Time in the mailbox and with the provider is not determined in the project |
| Pilgrimage | Name, email address and message are required; phone, group, date and participant count are optional | Email to the configured parish recipient via Resend; if the optional writing aid is used, the message text is sent to OpenAI | Time in the mailbox and with the provider is not determined in the project |
| Prayer intention | Name and message are required; phone and email address are optional | The full text is emailed to the configured parish address via Resend; a receipt may be emailed to you | Time in the mailbox and with the provider is not determined in the project |
Prayer intentions and sensitive data
A prayer intention may reveal religious beliefs or contain information about health, bereavement, family life or another person. The form asks for a separate express acknowledgement before sending. That choice is included in the notification email delivered to the parish; the way the recipient and email provider retain the message must be confirmed.
The prayer-intention form does not offer the AI rewriting tool. The API rejects both the parish and prayer-specific contexts before any provider call, including in a direct request. The optional writing aid remains available in the contact and pilgrimage forms; using it sends the text entered in that field to OpenAI. Avoid including sensitive information in either field.
Avoid naming other people or including their sensitive details. For a person under 18, do not send identifying or sensitive information without the express authorization of the holder of parental authority. The parish form does not verify this authorization.
Legal grounds, recipients and transfers
A form submission is used to respond to the request you chose to send. OpenAI receives the message text only when the optional writing aid in the contact or pilgrimage form is used; the prayer-intention form does not send its text to AI. Resend delivers email; Cloudflare Turnstile may be loaded when configured to check forms; Vercel provides website deployment. The precise legal ground for each activity, the identity of its responsible entity and the authorized recipients still need administrative confirmation.
Providers may process data on infrastructure outside Gabon. The actual regions, contracts, safeguards and APDPVP formalities must be established from production configuration and contracts; no specific transfer safeguard is claimed here.
Rights and contact
Depending on applicable law and the type of processing, you may request access, correction, updating, erasure, restriction or object to certain processing. You may also contact the APDPVP. To help locate a request, identify the approximate date and form used without repeating sensitive information. The administration must confirm a verified contact for parish data requests.