The lawful basis for the processing
The Congregation processes special category (sensitive) data is processed under UK GDPR Article 9(2)(d): “processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing
relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects”.
For the other processing activities, the lawful basis are:
Who data is shared with
Your personal information will only be shared where this is necessary for the purposes set out above. Information will not be shared with any third party out with the Church of Scotland without your consent unless the Congregation is obliged or permitted to do so by law.
How long the personal data is held for
The Congregation will keep your personal information for as long as you are a member or adherent, or have regular contact with the Congregation, or for as long as the Congregation is obliged to keep it by law or may need to do so in order to respond to any questions or complaints, or to show that the Congregation treated you fairly. When the information is no longer needed it will be securely destroyed following church procedure.
Further information about our retention and disposal schedule is available from the Church website:-www.allanchurch.org
Individuals’ rights in relation to this processing
Under data protection laws, individuals have a number of rights in relation to the processing of their personal data. These rights are as follows:
Not all rights apply and it depends on the lawful basis as to what rights do apply. For the processing purposes of this privacy notice the right of erasure, right to data portability and the right to object do not apply. All other rights do apply. If you wish to exercise any of your rights please contact the Data Protection Coordinator for the Allan Church at allanchurch1@gmail.com
As some of the processing lawful basis is based on consent, it’s important to note that you can withdraw your consent at any time. To do this please contact allanchurch1@gmail.com
Complaints to the Church of Scotland
If you are concerned about how your personal data is being used by the Church of Scotland, please contact - in the first instance - the Data Protection Coordinator for the Allan Church, atallanchurch1@gmail.comOR the main contact for queries in relation to this processing perth@churchofscotland.org.uk and the Data Protection Officer for the Church of Scotland atPrivacy@churchofscotland.org.uk, if required.
Complaints to the Information Commissioner’s Office (ICO)
If you are not satisfied with the outcome of your complaint to the Church of Scotland, a referral can be made to the UK regulator of data protection, the Information Commissioner’s Office (ICO).
The ICO has guidance on their website:https://ico.org.uk/your-data-matters/raising-concerns/
The ICO can be contacted by emailcasework@ico.org.ukor by telephone on 0303 123 1113.
Alternatively, their postal address is:
Customer Contact
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Further information
If you would like further information in relation to this Privacy Notice please contact the Church of Scotland Data Protection Officer atPrivacy@churchofscotland.org.uk
This Privacy Notice may be updated from time to time to reflect changes in legal requirements or other operational reasons. The latest version will always be available from PERTH PRESBYTERY Scottish Charity Number SC0145528.
Janet Stevenson is the Data Protection Coordinator for the Congregation of the Allan Church and can be contacted atallanchurch1@gmail.com
Privacy Notice – The Congregation
ALLAN CHURCH, BANNOCKBURN
SCOTTISH CHARITY NUMBER SC002953
The Kirk Session of the Allan Church, Scottish Charity Number SC002953, is providing you with this Privacy Notice in order to comply with data protection law and to ensure transparency in the collection and use of your personal data.
Who is collecting the information
The Presbytery of Perth, Scottish Charity Number 014528, is the Data Controller for the Congregation and can be contacted by email:- perth@churchofscotlnad.org.uk
Janet Stevenson is the Data Protection Coordinator for the Congregation, and can be contacted by email:- allanchurch1@gmail.com
Why is this personal data collected and for what reason (Purpose)
This information is used to:
What personal data is collected
The Congregation also collects some special category personal data, which may include:
The information source
The information is collected directly from you. Some data is collected via the Presbytery or the National Offices.