Order of Saint Lazarus 1. Data controller
The controller of your personal data is the Military and Hospitaller Order of Saint Lazarus of Jerusalem — Spanish Priory, based in Madrid, Spain. For any matter relating to privacy, you may write to info@stlazarus.es or, alternatively, to office@stlazarus.es.
2. Data we collect
We collect only the data you provide to us voluntarily through the forms on this website:
- Membership form (/membership page): name, email address, country or jurisdiction (optional), and a short message (optional).
- Contact form (/contact page): name, email address, organisation (optional), subject, and message.
- Lázaro assistant (site chat): the questions and answers of the conversation may be retained in order to improve the quality of the service. We do not request personal data; please do not enter sensitive information into the chat.
In addition, this site uses anonymous web analytics through Vercel Web Analytics and Vercel Speed Insights, which collect no identifiable personal data and use no third-party tracking cookies. See the Cookie Policy.
3. Purpose of processing
Your data is processed exclusively for the following purposes:
- To attend to your membership or information request, and to put the relevant jurisdiction in contact with you.
- To answer your enquiries submitted through the contact form.
- Where applicable, to maintain subsequent communication with you concerning the mission of the Order.
4. Legal basis
The legal basis for processing is your express consent, given when you submit the relevant form, pursuant to Article 6(1)(a) GDPR.
5. Retention period
Your data will be retained for as long as necessary to attend to your request and to maintain the relationship with the Order. Should you at any point request the deletion of your data, we will erase it within a maximum of thirty days.
6. Recipients
Your data is not transferred to third parties. It may be communicated internally to the relevant national jurisdiction within the Order, solely in order to attend to your request. The technical infrastructure of the site is hosted with Vercel Inc., acting as data processor under the GDPR.
7. Your rights
You have the right to access your personal data, to rectify it where inaccurate, to erase it, to object to its processing, to request the restriction of its processing, and to data portability. To exercise these rights, send an email to info@stlazarus.es.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with applicable legislation.
8. Security
The Order adopts reasonable technical and organisational measures to protect your data against unauthorised access, alteration, loss or destruction.
9. Amendments
This policy may be amended to reflect legislative or case-law developments. Amendments take effect from the moment they are published on the website.
Last updated: May 2026. This is a translation of the Spanish Política de Privacidad, which prevails in case of divergence.
