This page describes Oddingley Church’s policy regarding personal data held by the Church.
HADZOR with ODDINGLEY and TIBBERTON Parochial Church Council (“PCC”)
DATA PRIVACY NOTICE
1 Your personal data – what is it?
2 Our information
The PCC is the data controller (see contact details below) and owns and operates the websites and maintains various databases to fulfil its legal obligations, for the legitimate interests of yourself or the PCC and to disseminate information that you have requested. This means it decides how your personal data is processed and for what purposes.
3 How do we process your personal data?
The PCC complies with its obligations under GDPR by keeping personal data up to date, by storing and destroying it securely, by not collecting or retaining more data than it needs, by protecting that data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect that data.
4 What is your personal data used for?
We use your personal data for the following purposes:
- to administer the electoral roll and other membership records;
- to carry out the administrative functions required to run the parish;
- to maintain our accounts and records, including the recording and processing of freewill envelopes, standing orders and gift aid;
- to inform you of news relative to and events, activities and services being held in the parish;
- to compile our rotas of the various activities undertaken by volunteers;
- to fundraise and promote the interests of the churches;
- to share your contact details with the Deanery officers and Diocesan office so they may keep you informed about news, events, activities and services in which you may be interested.
5 What is the legal basis for processing your personal data?
- your explicit consent for the uses in 4 above;
- to enable us to carry out our responsibilities under employment, ecclesiastical or tax law;
- for your or the PCC’s legitimate interests.
6 Do we share your personal data?
Your personal data will be treated as strictly confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church. We will only share your data with third parties outside of the parish with your consent.
7 How long do we keep your personal data?
We keep data in accordance with the guidance set out in “Keep or Bin: Care of Your Parish Records” which is available on the Church of England website here.
Specifically, we retain electoral roll data whilst it is still current, gift aid declarations and associated records for up 6 years after the tax year to which they relate and Registers of Baptisms, Marriages and Funerals, minute books and statutory reports and accounts indefinitely. Other records are disposed of or erased 18 months after they cease to have relevance.
8 What if we want to use your personal data for a purpose not listed in 4 above?
If we wish to use your personal data for a purpose not listed above we will provide you with an updated copy of this notice explaining the new use prior to commencing the processing and where necessary seek your prior consent.
9 What are your rights regarding the personal data we hold about you?
By contacting the PCC Secretary (at firstname.lastname@example.org) you can at any time ask for a copy of the personal data we hold about you, instruct us to limit its use and ask for inaccuracies to be corrected. You can also ask for it to be erased where it is no longer necessary for us to retain such data. You also have the right to lodge a complaint with the Information Commissioner’s office.