The Five Parishes (the United Parish of Broxted with Chickney, Tilty, Great Easton and Little Easton) hold “personal data”, that is to say information which relates to a living individual who can be identified from that information (including where identification is from any other information in our possession). It’s your information, it’s personal and we respect that.
We use that data to communicate with our members and we are therefore a “data controller”. That is to say, we decide how the personal data we hold is processed and for what purposes. The processing of personal data is governed by the General Data Protection Regulation (GDPR) and the Five Parishes are committed to complying with the GDPR in relation to the personal data we hold. In this statement we explain how we will use your data, provide an overview of your rights and indicate where you obtain further information.
How do we process your personal data?
The Five Parishes collect data about its members in the course of its activities. Generally you will have given us the data in the first place. We comply with our obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the sole purpose of maintaining a register of members and for communicating with members about the activities of the Five Parishes, including fundraising and to promote the interests of our charitable activities; maintaining our own accounts and records (including the processing of gift aid applications); and informing members of news, events, activities and services relating to the churches of The Five Parishes.
What is the legal basis for processing your personal data?
We rely on the following bases, which are permissible under the GDPR:
“Where processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects”
“Where the data subject has given consent to the processing of his or her personal data for one or more specific purposes”
“Where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with other members of The Five Parishes.
How long do we keep your personal data?
We keep data relating to members for so long as they remain a member. Within our records we will also have references to former members.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: –
The right to request a copy of your personal data which we hold about you;
The right to request that we correct any personal data if it is found to be inaccurate or out of date;
The right to request that your personal data be erased where it is no longer necessary for The Five Parishes to retain such data;
Where you have given consent to the processing, the right to withdraw that consent at any time;
The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable);
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request that a restriction is placed on further processing;
The right to object to the processing of personal data, (where applicable);
The right to lodge a complaint with the Information Commissioner’s Office.
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
To exercise all relevant rights, queries of complaints please in the first instance contact the PCC Secretary from time to time, currently Patricia O’Gorman who can be contacted on 01371 852148 or by email at email@example.com. You can also write to her at The New House, The Endway, Great Easton, Great Dunmow CM6 2HQ.
For more information about the GDPR or to lodge a complaint, you should contact the Information Commissioner’s Office. You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.