DATA PRIVACY NOTICE
The Parochial Church Council (PCC) of Christ Church, Pennington (covering Sports Village Church)
- Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or alongside any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”) and the Data Protection Act 2018.
- Who are we?
Christ Church Pennington (CCP) and Sports Village Church (SVC) work in partnership as churches serving the people of Leigh. For the remainder of this document “We” refers to both CCP and SVC. The PCC of Christ Church, Pennington is the data controller (contact details below). This means it decides how your personal data is processed and for what purposes.
- How do we process your personal data?
We comply with the obligations under data protection law by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes: –
- To enable us to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our constitution;
- To administer membership records;
- To fundraise and promote the interests of the charity;
- To manage our employees and volunteers;
- To maintain our own accounts and records (including the processing of gift aid applications);
- To inform you of news, events, activities and services running at Christ Church/Sports Village Church;
- By law we are required to keep some data for safeguarding purposes indefinitely
- What is the legal basis for processing your personal data?
- We require your consent to keep you informed about news, events, activities and services, to process your gift aid donations, and to keep you informed about diocesan events;
- If you only sign up for an event or group, we will only use your information to contact you about that group or event, or to invite you to sign up for a MyChurchSuite account;
- It is necessary for us to process certain information in order to fulfil our obligations under employment, social security or social protection law, or a collective agreement;
- We are, under law, a not for profit religious organisation;
- We only process personal information relating to current or former members of either church or those we have regular contact with;
- We will not disclose your personal information to anyone else unless the law states we should.
- Sharing your personal data
Your personal information will be stored securely meeting all data protection regulations in a third party online/cloud-based software system with protected user permissions access. Personal details will only be able to be viewed by those with certain permissions (admin rights) within the software. Admin rights are given by a group of people made up from both churches who carefully consider whether the person in question has reason to need them. Your information will be available to people who run groups or events that you sign up to. Apart from this your information will be treated as strictly confidential and, with the exception of those with admin rights, you will have control over what information people in church are able to see about you. We may be required by law to share your personal data for safeguarding reasons. This will be done according to our safeguarding policy (adopted from the Manchester Diocese).
- How long do we keep your personal data?
Paper records: We keep information in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website (https://www.churchofengland.org/more/libraries-and-archives/records-management-guides)
In particular we keep electoral roll data while it is still current; gift aid declarations and associated paperwork for up to 6 years after the relevant calendar year; and parish registers (baptisms, marriages, funerals) or registers required for safeguarding purposes permanently.
Electronic records: Where you have given consent for your information to be held, we will keep it for as long as we need it to carry out the reasons explained in section 3 above. You can update, amend or delete any of your personal information at any time using MyChurchSuite or contacting the data controller.
- Your rights and your personal data
Unless an exemption applies under the GDPR, you have the following rights with respect to your personal data (* indicates things you can do yourself in MyChurchSuite if you want to):
- To request a copy of the personal information we hold about you *
- To request that we correct any personal information if it is inaccurate or out of date *
- To request your personal information is deleted where it is no longer necessary for us to keep it *
- To withdraw your consent to us using your information at any time
- To request that we provide you with your personal information and where possible, to send that information directly to another data controller, (known as the right to data portability). This will usually be another church;
- Where there is a question over whether your information is correct or is being used properly, to request a restriction is placed on further usage;
- The right to object to the usage of personal information, (where applicable). This applies to information being used for certain purposes such as marketing.
- The right to lodge a complaint with the Information Commissioners Office.
- Further processing
If we wish to use your personal information in another way, not covered by this Data Protection Notice, then we will provide you with a new notice explaining how we intend to use it before going ahead with it, setting out the relevant purposes and processing conditions. Where and whenever necessary, we will ask for your consent before using your information in a new way.
- Contact Details
To exercise your rights, or make a query or complaint, please contact us first using the details for the relevant church below:
Christ Church Pennington:
PCC Secretary at Christ Church, Schofield St, Pennington, Leigh, Lancs, WN7 4HT.
Sports Village Church:
Contact the SVC data manager on firstname.lastname@example.org
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
This document was last updated June 2020