ABOUT St Paul's
ABOUT St Paul's
ABOUT St Paul's
ABOUT St Paul's
ABOUT St Paul's
Data Privacy Notice
St. Paul's Church PCC
Your personal data – what is it?
Personal data related to a living individual who can be identified from that data. Identification can be by this information alone or in conjunction with other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (hereafter the “GDPR”)
Who are we?
The Parochial Church Council (the “PCC”) of St Paul’s, Great Baddow is the ‘Data Controller’ and contact details are available on the Church notice board. The data controller maintains data on all church parishioners and the PCC decides how your personal data is processed and for what purpose
How is your personal data processed?
The data controller ensures compliance with the GDPR by keeping records of personal data up-to-date, by ensuring it is stored and disposed of securely, by protecting personal data from loss, misuse or unauthorized access and disclosure and by ensuring all technical measures are in place to protect the data.
Data is used for the following reasons:
To provide agendas, minutes and documents in relation to the governance of this church to members of its incumbent committee.
To administer membership records
To inform parishioners of news, events, activities and services relating to the Church
To share with others on the electoral role of this church in relation to any church business.
To inform individuals who participate in any of the church mission activities and who may not be on the electoral role of the church (e.g. Messy Church, Mind the Gap, Loftineers, Prayer Group, Parents and Toddlers etc) of events relating only to that activity.
What is the legal basis for processing personal data?
Explicit consent of the data subject so that you can be kept informed about Church events
Processing is carried out by a not-for-profit body with a political, philosophical, religious or trade union aim provided:
* The process relates ONLY to members or former members
(or those who have regular contact with it in connection with those purposes) and
* There is no disclosure to any third party without first obtaining the data subject's consent.
Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with other members of the Church for the purposes connected with the Church. Your data will only be shared with third parties outside the Church with your consent
How long is your data kept for?
Your data is kept in accordance with the guidance set out in the ‘Keep or Bin: Care of Your Parish Records’ which can be viewed on the Church of England website1
Specifically, we retain electoral roll data while it is still current2; gift aid declarations and associated financial paperwork for up to 6 years after the accounting period to which they relate in accordance with HMRC rules; and parish registers (baptisms, marriages, funerals) permanently. Minutes and documentation for PCC meetings are also kept permanently under current church representation rules.3
Your rights with regards to personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of the data held in relation to you and the reasons for which it is kept.
The right to request that said data can be corrected or updated according to changes.
The right to request that data is removed where there is no longer justifiable cause under the rules of GDPR to retain it.
The right to withdraw consent to the processing of your data at any time.
The right to request that the data controller transfer your data to another data controller. This applies only where the processing is based on consent or is necessary for the performance of a contract with the data subject, and in either case the data controllers process the data by automated means.
The right, where there is a dispute over the accuracy or processing of the data, to request a restriction is placed on further processing.
The right to object to the processing of personal data [applies only where based on legitimate interests (or the performance of a task in the public interest/exercise of official authority) direct marketing and processing for the purposes of scientific/historical research and statistics]
The right to lodge a complaint with the Information Commissioner’s Office.
Further Processing
If the PCC wishes to use your personal data for a new purpose, not covered by this data protection notice, then they will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary they will seek your prior consent to the new processing.
Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact the incumbent PCC secretary, details of which are displayed on the Church notice board.
You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF
References
1 https://www.churchofengland.org/more/libraries-and-archives/records-management-guides
2 http://www.legislation.gov.uk/ukcm/1969/2 Synodical Government Measure 1969. Sch. 3., Section 4