Privacy Policy & Privacy Notice

General Statements

This is the privacy statement and data protection policy for St Mary’s, Woodchester. It covers what data we collect, how we collect it, how will we store and use it. It also covers marketing, your rights, the collection of cookies and how we use them and how to manage cookies. It also includes other issues including privacy policies for other web sites, changes to our privacy policy, transfer of data, further processing and how to contact us.

This policy covers our use of Personal data, which is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address). Identification can be by the information alone or in conjunction with any other information.

Our processing of personal data is governed by the Data Protection Bill/Act 2017-2019 and the General Data Protection Regulation 2016/679 (the “GDPR” and other legislation relating to personal data and rights such as the Human Rights Act 1998].

Who are we?

This Privacy Notice is provided to you by The Parochial Church Council of the parish of St. Mary, Woodchester which is the Data Controller for your data. For clarity, the term Data Controller covers all employed staff members, office holders and trustees for St. Mary’s, Woodchester.

How do we process your personal data?

The PCC of St.Mary’s Parish complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We use your personal data for the following purposes: -

• To enable us to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our constitution;

• To administer membership records;

• To fundraise and promote the interests of the parish;

• To manage our employees and volunteers;

• To maintain our own accounts and records (including the processing of gift aid applications);

• To inform you of news, events, activities and services running in our parish;

• To share your contact details with the Diocesan office so they can keep you informed about news in the diocese and events.
  

What is the legal basis for processing your personal data?

• Explicit consent of the data subject so that we can keep you informed about news, events, activities and services and keep you informed about diocesan events.

• Processing is necessary for carrying out legal obligations in relation to Gift Aid or under employment, social security or social protection law, or a collective agreement;

• Processing is carried out by a not-for-profit body with a political, philosophical, religious or trade union aim provided:

• the processing relates only to members or former members (or those who have regular contact with it in connection with those purposes); and

• there is no disclosure to a third party without consent.
  

Sharing your personal data

Your personal data will be treated as strictly confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church.

We will only share your data with third parties outside of the parish with your consent, except where there is a safeguarding or similar concern, and the law or diocesan guidance requires us to do so.

How long do we keep your data?

We keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records”, which is available from the Church of England website.

See also parishresources.org.uk/news/reviewing-keep-or-bin-guidelines.

Specifically, we retain electoral roll data while it is still current; gift aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate; and parish registers (baptisms, marriages, funerals) permanently.

Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: -

• The right to request a copy of your personal data which the PCC of St.Mary’s Parish holds about you;

• The right to request that the PCC of St.Mary’s Parish corrects any personal data if it is found to be inaccurate or out of date;

• The right to request your personal data is erased where it is no longer necessary for the PCC of St.Mary’s Parish to retain such data;

• The right to withdraw your consent to the processing at any time

• The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable) [Only applies where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means].

• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;

• The right to object to the processing of personal data, (where applicable) [Only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics]

• The right to lodge a complaint with the Information Commissioners Office.
  

Further Processing

If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

Our Web site

What data do we collect?

For the purposes of administering our website (westchelt.org.uk), we collect the following data:

• Anonymous information about your use of our website, including which pages are visited, and basic information about your computer and browser.

• Should you supply it in a form submission, personal identification information (Name, email address, phone number, address, marital status etc.).
  

How do we collect your data?

You directly provide us with most of the data we collect. We collect data and process data online when you:

• Register online or request any of our services.

• Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.

• Use or view our website via your browser’s cookies.
  

How do we use your data?

We collect your data so that we can:

• Respond to queries you may have and requests about our services and activities.

• Update you on key news and opportunities related to St.Mary’s and the Church of England.
  

How will we store your data?

Our website, and any information you submit via this route is handled via Squarespace, and passed to us via email.

Our email is hosted via Microsoft Office 365 ??, and we store online information in a password protected file storage area.

We keep your data in line with our privacy policy.

What are your data protection rights?

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request we complete the information you believe is incomplete.

• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology

For further information, visit allaboutcookies.org.

How do we use cookies?

Our Company uses cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in

• Understanding how you use our website
  

What types of cookies do we use?

We use cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in

• Understanding how you use our website
  

There are a number of different types of cookies, however, our website uses cookies for these items:

Functionality

We use these cookies so that we recognise you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used. They are also used to retain your ‘logged in’ status for sections of the website that require you to be identified.

Continuous improvement

We use these cookies to anonymously track how you interact with our website, including which pages you visit, how long you spend using the website, how you found our website and what you were looking for, so that we can improve the information we provide and make it more relevant to you. We also collect basic information on your device and where you accessed us from so we can optimise our website for our users.

Advertising

we these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. We don’t proactively advertise to you, but the nature of some cookies means that sometimes we will share some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.

How to manage cookies?

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

Our website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

We cannot guarantee the accuracy or relevance of information we link to, so you should review this information and make a decision on its relevance to you.

Changes to our privacy policy

Our Company keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 9 January 2019.

How to contact us

To exercise all relevant rights, queries of complaints please in the first instance contact the Elizabeth Macdougall PCC Secretary, Church Road, N. Woodchester Glos GL5 5PD or via email macdougallelizabeth@hotmail.com.

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office on 0303 123 1113 or via email, or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

ico.org.uk/make-a-complaint