隱私權政策

The Hope Calendar（以下稱「本服務」）是 The Hope 教會內部使用的行事曆與場地預約系統，供STAFF與服事人員安排活動、登記場地並協調衝突。本政策說明我們蒐集哪些個人資料、如何使用，以及你可以行使哪些權利。

使用本服務即表示你同意本政策所述的資料處理方式。若不同意，請勿登入使用本服務。

• Google 帳號基本資料：你透過 Google 登入時，我們會取得你的姓名、電子郵件地址與大頭貼圖片網址。
• 帳號設定：你所屬的部門、系統角色（管理員／STAFF／志工）、權限設定，以及最後一次登入的時間。
• 你在系統中建立的內容：活動名稱、時間、地點與場地、負責部門與負責人、備註，以及活動的建立與修改紀錄。
• 登入工作階段（session）：為維持登入狀態所必要的 cookie 與工作階段紀錄。
• Google 行事曆授權：若你的帳號啟用與 Google 行事曆同步的功能，我們會保存必要的授權憑證，用於讀取或寫入教會指定的行事曆。

本服務不會蒐集奉獻紀錄、身分證字號、金融帳戶等敏感個人資料，也不會追蹤你在其他網站上的行為。

• 驗證你的身分並維持登入狀態。
• 在行事曆上顯示活動，並標示建立者與負責部門，讓STAFF彼此協調。
• 偵測場地與時間的重複預約，並以電子郵件寄送每日衝突摘要給相關負責人。
• 依你的部門與角色，決定你可以檢視或編輯哪些內容。
• 維護系統運作、排除故障與確保資訊安全。

我們不會將你的個人資料用於廣告或行銷，也不會販售給任何第三方。

本服務僅在下列情形分享你的資料：

• 其他使用者：你的姓名、電子郵件與所屬部門，會顯示給同一系統中的其他已登入使用者，以便辨識活動的建立者與聯絡窗口。
• 服務供應商：我們使用 Google（登入與行事曆）、資料庫與網站代管服務商，以及電子郵件寄送服務，來提供本服務所需的技術基礎。
• 法律要求：依法律規定或主管機關合法要求而必須揭露時。

活動資料會保留於系統中，作為教會的行事曆歷史紀錄。帳號資料則保留至你的帳號被停用或刪除為止。你可以隨時來信要求刪除帳號；帳號刪除後，你所建立的活動可能仍會保留，但將不再與你的個人資料連結。

本服務僅開放給教會核發的 Google 帳號登入，所有連線均透過加密傳輸，並依部門與角色限制存取範圍。惟任何網路傳輸與儲存方式皆無法保證絕對安全，我們會盡商業上合理的努力保護你的資料。

本服務僅使用維持登入狀態所必需的 cookie，不使用廣告或跨站追蹤 cookie。若你的瀏覽器封鎖這些 cookie，將無法正常登入。

依個人資料保護法，你可以要求查詢、閱覽、複製、補充或更正你的個人資料，也可以要求停止蒐集、處理、利用或刪除你的個人資料。部分資料（例如維持系統運作所必需的紀錄）在刪除後，你將無法繼續使用本服務。

本服務供教會STAFF與服事人員使用。未滿十八歲者，應於法定代理人同意後始得使用。

我們可能因應功能調整或法令變更而修訂本政策。修訂後將更新本頁上方的「最後更新」日期；重大變更會另行通知使用者。

對本政策或你的個人資料有任何疑問，請來信： info@thehope.co

The Hope Calendar (the “Service”) is an internal calendar and venue booking system for The Hope church, used by staff and volunteers to schedule events, reserve venues and resolve scheduling conflicts. This policy explains what personal data we collect, how we use it, and the rights available to you.

By using the Service you agree to the handling of data described here. If you do not agree, please do not sign in.

• Google account basics: when you sign in with Google we receive your name, email address and profile picture URL.
• Account settings: your department, your role in the system (admin / staff / volunteer), your permissions, and the time of your most recent sign-in.
• Content you create: event names, dates and times, locations and venues, responsible departments and owners, notes, and the record of who created or last modified each event.
• Session data: the cookies and session records required to keep you signed in.
• Google Calendar authorisation: if calendar sync is enabled for your account, we store the credentials needed to read from or write to the church calendars.

The Service does not collect giving records, national ID numbers, financial account details or other sensitive personal data, and it does not track your activity on other websites.

• To verify who you are and keep you signed in.
• To display events on the calendar, attributed to their creator and responsible department, so that teams can coordinate.
• To detect double bookings of venues and time slots, and to email a daily conflict digest to the people responsible.
• To determine what you may view or edit, based on your department and role.
• To operate, troubleshoot and secure the Service.

We do not use your personal data for advertising or marketing, and we do not sell it to anyone.

We share your data only in the following situations:

• Other users: your name, email address and department are visible to other signed-in users of the Service, so that event creators and contacts can be identified.
• Service providers: we rely on Google (sign-in and calendars), database and application hosting providers, and an email delivery provider to run the Service.
• Legal requirements: where disclosure is required by law or by a lawful request from a competent authority.

Event data is retained as the church’s calendar history. Account data is retained until your account is deactivated or deleted. You may request deletion of your account at any time by email; events you created may remain in the calendar afterwards, but will no longer be linked to your personal data.

Sign-in is limited to church-issued Google accounts, all traffic is encrypted in transit, and access is scoped by department and role. No method of transmission or storage is completely secure, but we take commercially reasonable measures to protect your data.

We use only the cookies strictly necessary to keep you signed in. We do not use advertising or cross-site tracking cookies. Blocking these cookies will prevent you from signing in.

Under Taiwan’s Personal Data Protection Act you may request access to, a copy of, or correction of your personal data, and you may ask us to stop collecting, processing or using it, or to delete it. Deleting data that the Service needs to operate will end your ability to use the Service.

The Service is intended for church staff and volunteers. Users under the age of eighteen must have the consent of a parent or legal guardian.

We may revise this policy as the Service changes or as the law requires. The “Last updated” date at the top of this page will change accordingly, and we will notify users separately of any significant change.

Questions about this policy or about your personal data can be sent to info@thehope.co.