2 Corinthians 4:16-18

EBLEY CHAPEL DATA PRIVACY NOTICE

Ebley Chapel is a member church of the Countess of Huntingdon’s Connexion [in this notice referred to as ‘the Connexion’] which is a Registered Charity under No. 232674.

Your personal data – what is it?

Personal data relates to identifying information about a living individual. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (EU) 2016/679 [in this notice referred to as ‘the GDPR’]

2.      Who are we?

Ebley Chapel [in this notice referred to as ‘the church’] stores personal data and is therefore considered to be a data controller. This means we decide how your personal data is processed and for what purposes.

3.      How do we process your personal data?

We use your personal data for the following purposes:

       maintaining a list of both regular and occasional attendees of the church.

       providing pastoral support.

       providing information and services to the community.

       safeguarding children, young people and adults at risk.

       recruiting, supporting and managing staff and volunteers.

       maintaining the church’s accounts and records including the processing of gift aid donations etc.

•     consolidating the church’s accounts and records with the accounts and records of the Connexion

•     promoting our own services and other activities and also those of the Connexion and other organisations in which the church has an interest.

       maintaining the security of the church’s property and premises and the property and premises belonging to the Connexion.

 

4.      What is the legal basis for processing your personal data?

       With the explicit consent of the data subject.

       Where processing is necessary for compliance with a legal obligation.

       Where processing is carried out by a not-for-profit body with religious purposes provided:

       the processing relates only to present or former regular or occasional attendees of the church (or those who have regular contact with it in connection with those purposes)

       there is no disclosure to a third party without consent.

Sharing your personal data

Your personal data will be treated as strictly confidential and will only be shared with other regular and occasional attendees of the church in accordance with this notice and the consent you have given. We will only share your data with other third parties with your explicit consent on each occasion.

How long do we keep your personal data?

We keep data for as long as you are a regular or occasional attendee of the church, or as is required by law or good practice. We will keep some records permanently and others for an extended period of time. For example, bank statements may be kept for a minimum of fifteen years and it is current best practice to keep Gift Aid records for a minimum period of seven years to support HMRC audits. In general, we will endeavour to keep data only for as long as we need it. This means that we may delete it when it is no longer needed.

7.      Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

       The right to request a copy of your personal data which the church holds about you.

       The right to request that the church corrects any personal data if it is found to be inaccurate or out of date.

       The right to request your personal data is erased where it is no longer necessary for the church to retain such data.

       The right to request that we stop processing your data. On receipt of such a request, you will be advised if we are able to comply with your request or if we have reasonable grounds to continue to process your data, for example, to comply with any legal or other obligation.

       The right to data portability. You have the right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller.

       The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.

       The right to object to the processing of personal data where applicable.

       The right to lodge a complaint with the Information Commissioners Office.

Further processing

If we wish to use your personal data for a new purpose, not covered by notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

 Contact Details

To exercise all relevant rights, queries or complaints please in the first instance email info@ebleychapel.co.uk or write to The Data Controller, Ebley Chapel, c/o 52 Orchard Road, Ebley, Stroud, Glos. GL5 4UA

 

February 2022