Privacy Policy
Updated: 5 September 2026 · Version 1.0
Contacts and hosting
Thomasianum is the house of studies of the Order of the Good Shepherd. Dr theol. Philippus Tropf OPB and Ashley Deutschmann manage this website’s data. For privacy enquiries contact Dr Tropf, Blumenstraße 3, 63857 Waldaschaff, Germany; email: p.philippus@vom-guten-hirten.de. Ashley Deutschmann provides technical administration of the website and email through Katolikos. The server is in Poland (EU).
Visits and enquiries
You may visit the information pages without an account. Technical connection data such as IP address, time, requested page and browser information are processed to deliver and secure the website. When you email us, we process your contact details and message to respond to your enquiry. Please do not email passwords or unnecessary sensitive documents.
Accounts and future study provision
Accounts are created only by the administrator. Data include name, email address, username and assigned access rights. Login and administration events also support security and accountability. Payment takes place outside the portal; it does not collect card payments. Information about attendance, learning and assessment records will be added before teaching starts.
Purpose and sensitive information
Data should be used only for their stated purpose and to the extent necessary. Technical operation and security, responding to enquiries and delivering agreed services are distinct purposes. Information about religion and pastoral matters needs particular care. Please do not include it in general support requests.
Your privacy rights
Subject to the GDPR, you may request access, correction, deletion or restriction. Depending on the legal basis, objection and data portability may also apply. You may withdraw consent for future processing and complain to a data protection supervisory authority. Contact Dr Tropf to exercise your rights; where necessary, we will verify your identity appropriately.
Status of this notice
This initial version describes the confirmed setup. Formal controller responsibilities, the legal basis for each processing activity, recipients and any access from outside the EU, and specific deletion and backup arrangements remain under final review. This version is therefore not yet a complete privacy notice under Article 13 GDPR.