DATA PRIVACY NOTICE
This notice explains how and why we (The Parochial Church Council (PCC) of Wroughton & Wichelstowe) collect and use your personal data, so you can feel confident that we are handling your personal data in compliance with the General Data Protection Regulation (the “GDPR”).
1. Your personal data – what is it?
Your personal data is information which identifies you or which, either on its own or together with other data we hold, can be identified as relating to you personally. This may include your name, address, phone number or email address, financial details where required. The processing of personal data is governed by the GDPR.
2. Who are we?
In this notice ‘we’ refers to the PCC of Wroughton & Wichelstowe. We are the data controller under the GDPR, which means we decide how your personal data is processed (used) and for what purpose. If you have any questions about how we use your personal data, please in the first instance contact the Parish Administrator, Janet Burchell at firstname.lastname@example.org
3. How do we use your personal data?
Your privacy is very important to us and we comply with our obligations under the GDPR by ensuring that we keep your personal data up to date, by collecting only the data we need, by protecting it, by storing and destroying it securely and by only retaining it for as long as we need it.
We will use your personal data for the following purposes: –
• To administer membership records;
• To inform you about news, events, activities and services provided by Wroughton & Wichelstowe PCC;
• To maintain our accounts and records (including the processing of gift aid applications);
• To enable us to provide a service for the benefit of the public in the parish of Wroughton & Wichelstowe;
• To fundraise and promote the interests of the charity;
• To operate the Wroughton & Wichelstowe Parish web site (www.wroughton.com) and deliver the services that individuals have requested;• To provide aggregated statistical data (not identifiable by individual) to the Church of England about our congregation;
• To keep in touch with those linked to our church through baptisms, weddings, funerals or burials;
• To manage our employees and volunteers;
• To share contact details of our employees and volunteers with the Diocesan office so they can keep them informed about news in the diocese and events, activities and services that will be occurring in the diocese and which are relevant to the role they are undertaking.
4. What is the legal basis for processing your personal data
We will only use your personal data for lawful purposes as set out in the GDPR.
• We will ask you for explicit consent to use your personal data to keep you informed about news, events, activities and services and to keep you informed about diocesan events.
• To meet our legal obligations in relation to Gift Aid or under employment social security or social protection law.
• Where we believe it is in the legitimate interests of the person concerned;
• To administer Wroughton and Wichelstowe PCC as a not-for-profit body with a philosophical or religious aim. This means that we will only use data relating to members or former members or those who have regular contact with us and we will not disclose it to a third party without consent.
5. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with our employees and volunteers in order to carry out a service or for purposes connected with the church. We will only share your data with third parties outside of the parish with your consent.
6. How long do we keep your personal data?
We keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website https://www.churchofengland.org/about-us/structure/churchcommissioners/administration/librariesandarchives/recordsmanagementguides.aspx
We will retain contact details for next of kin of those buried in the churchyard and contact details of those who have obtained permission to place memorials in the churchyard indefinitely.
7. Your rights and your personal data
Subject to some exemptions you have rights under the GDPR over your personal data that we hold. In particular you have the right to: –
• request a copy of your personal data that we hold about you;
• to request that we correct your personal data if it is inaccurate or out of date
• to request that your personal data is erased where it is no longer necessary for us to retain it;
• to withdraw your consent to processing at any time
• to request that we provide you with the personal data we hold and, where possible to transmit the data direct to another data controller where applicable. This only applies where processing is based on consent or necessary to fulfil a contract
• where there is a dispute about the accuracy or processing of your personal data, to request a restriction on its further use;
• to object to the processing of personal data in some circumstances
• to lodge a complaint with the Information Commissioners Office (the UK Regulator for the GDPR).
8. Further processing
If we wish to use your personal data for a new purpose, not covered by this notice, then we will provide you with a new notice explaining this new use prior to commencing the processing, setting out the relevant purposes. Whenever necessary, we will seek your prior consent to the new processing.
9. Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact the Parish Administrator, Janet Burchell at email@example.com.
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
Document first published 25/05/2018, Updated 26/11/2018