The information below sets out how The Parochial Church Council of the Parish of Rowledge, in the Diocese of Guildford (“the PCC”) and St James’ Church (“the Church”) will store and process information that we hold about you so that we comply with the General Data Protection Regulation 2016/679 which came into force on 25 May 2018 (“GDPR”)
1. Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. The processing of personal data is governed by the GDPR.
2. The Data Controller
The PCC is the data controller for the purposes of the GDPR.
3. How do we process your personal data?
The PCC complies with the GDPR by not collecting unnecessary data, storing it securely, keeping it up to date, preventing misuse, not retaining it too long and destroying it properly.
4. What do we use your personal data for?
Maintaining the Electoral Roll and contact lists, informing you of activities and Services at the Church, serving the public, raising funds, keeping accounts (including Gift Aid) and managing employees and volunteers. We may share your contact details with the Diocese of Guildford.
5. What is the legal basis for processing your personal data?
The PCC is a not-for-profit religious body processing data of its members with no disclosure to any third party without consent. Alternatively, processing is necessary to fulfil legal requirements. If neither of these apply your explicit consent will be obtained.
6. Sharing of personal data
It will be treated as strictly confidential and only shared with other members of the Church to provide a service to other Church members (for example prayer, Bible reading, Church cleaning and refreshment rotas) or other purposes connected with the Church. We will obtain your consent to share your personal data with third parties outside of the Parish.
7. How long will we keep your personal data?
We keep Electoral Roll data whilst it is current, gift aid declarations for six years and Parish registers of baptisms, marriages and funerals permanently.
8. Your rights and personal data
Unless subject to an exemption under GDPR you have a right to request a copy of your personal data, require correction, request erasure when redundant, withdraw consent at any time, restrict further processing and lodge a complaint with the Information Commissioner’s Office
9. Further Processing
For any new purpose we will issue a new notice explaining it and seek your prior consent.
Please contact the Parish Office in the first instance to exercise your rights, raise any queries or make a complaint.