Buckland Church Devon Privacy Notice

The Parochial Church Council (PCC) of St Andrew’s Church, Buckland Monachorum and the Church of the Holy Spirit, Milton Combe.

This privacy notice explains the Churches’ arrangements around the processing of data that can identify people; referred to as Personal Data. The processing of personal data is governed by the Data Protection Act 2018.

The PCC of St Andrew’s Church, Buckland Monachorum and the Church of the Holy Spirit, Milton Combe is the data controller. This means it decides how personal data is processed and for what purposes.

Personal data
This is data that relates to a living individual who can be identified from that data. Identification can be by the information alone or together with any other information held by the church.

This includes data provided when you register for an event, take part in activities, donate to the church, apply for a role as a volunteer or staff member or sign up to our notice sheet. It is important that you read this general privacy notice together with any other specific privacy notices we provide when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.

How do we process your personal data?
The PCC is committed to comply with its obligations under Data Protection Legislation and will:

  • Keep a record of all the types of personal data it processes
  • Ensure it is up to date
  • Store and destroy it securely
  • Not collect or retain excessive amounts of data
  • Protect personal data from loss, misuse, unauthorised access and disclosure
  • Ensure that appropriate measures are in place to protect personal data

The purposes for using personal data include to:

  • Manage, administer and promote the life of the church
  • Maintain our accounts and administer financial transactions and donations (including the processing of gift aid)
  • Administer our groups and events
  • Manage our website
  • Manage our volunteers and employees
  • Comply with legal or regulatory obligations

What is the legal basis for processing your personal data?
The legal basis will depend on the purpose for processing your data and includes:

  • Your consent; to be part of email distribution lists to be informed about church services, events and to keep you informed about diocesan events.
  • Legitimate Interest; processing is carried out in the course of our legitimate activities as an organisation with religious aims on the condition that the processing relates to members and former members of the church or to persons who have regular contact in connection with our purpose of conducting and managing our activities to enable us to provide church and community events and services.
  • Performance of a Contract; processing your data where it is necessary for the performance of a contract
  • Comply with a legal or regulatory obligation; such as processing necessary for carrying out legal obligations in relation to Gift Aid, employment and the prevention and detection of crime.

Sharing your personal data
Your personal data will be treated as confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church. We will only share your data with third parties with your consent unless there is an overriding legal basis.

How long do we keep your personal data?
We keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website

Your rights and your personal data
You have various rights (depending on the legal basis) with respect to your personal data: –

  • The right to request a copy of your personal data which the PCC holds about you
  • The right to request that the PCC corrects any personal data if it is found to be inaccurate or out of date
  • The right to request your personal data is erased where it is no longer necessary for the PCC to retain such data
  • The right to withdraw your consent where consent has been the legal basis
  • The right to object to the processing of personal data
  • The right to lodge a complaint with the Information Commissioners Office.

Further processing
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

Contact Details
For further information, queries or complaints please in the first instance contact the PCC Secretary. Please note that whilst the PCC have controls over who accesses this email account, communicating to this email address is over the standard Internet and is therefore not secure.

The Information Commissioners Office (ICO) regulates Data Protection Law. If you would like further information or have concerns about how we handle information then the ICO can be contacted on 0303 123 1113 or via email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.