The church is the controller of the personal data in its register; the seller is the processor acting on the church's instructions. The processor keeps the data in the European Union, grants access only to the church's own people according to their ranks, deletes the data when the church is deleted and purged, and supports the church in answering requests from the people in its register.