DATA PRIVACY NOTICE

The Parochial Church Council (PCC) of St Mary's, Ferndown

What is our Data Privacy Notice for?

This Data Privacy Notice explains what you can expect when St Mary’s Church, Ferndown collects and uses your personal information. We recognise the importance of your privacy and personal information and this notice outlines how your data is used and protected.

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who are we?

The PCC and incumbent of St Mary's, Ferndown have overall responsibility for data protection at St Mary's and authorise the delegation of data processing to members of staff and ministry leaders as appropriate for the effective running of the church. The PCC and the incumbent are the people who decide why, when, and how your data is processed and who by.

How do we process your personal data?

We make sure that personal information is:

Up to date; protected properly and destroyed securely.

Not collected or retained in excessive amounts.

Protected from loss, misuse, unauthorised access and disclosure.

Protected by ensuring that appropriate technical measures are in place to protect personal data.

What do we use your information for?

To inform individuals of news, events, activities or services at St Mary’s;

To provide the services of a parish church to the local community.

To enable us to serve our community through voluntary activities.

To administer membership records.

To manage our employees and volunteers.

To provide pastoral care.

To maintain our own accounts and records; including the processing of gift aid applications.

To further our charitable aims, for example through fundraising and promoting the interests of St Mary’s.

To manage customers booking the Church or Beacon Complex.

To operate the St Mary’s web site and deliver the services that individuals have requested.

To contact individuals via surveys to conduct research about their opinions of current services or of potential new services that may be offered.

To operate our database to deliver the services.

To fulfil contractual and other legal obligations.

What is the legal basis for processing your personal data?

Legal or regulatory obligations: we will process your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Legitimate Interest: in the course of our legitimate activities, we process your information as a not-for-profit body with a religious aim provided: the processing relates only to members or former members or those who have regular contact with us in connection with those purposes; and that this information is not disclosed to a third party without your consent.

Consent: we will ask for your specific consent to collect and hold your personal information so that we can keep you informed about news, events, activities and services and process your gift aid donations (if applicable).

Contract: the processing is necessary for a contract we have, or because of specific steps we have been asked to take before entering into a contract.

Sharing your personal data

Your personal data will be treated as strictly confidential and will only be shared with church ministry leaders for purposes connected with the church and in your best interests. Your data will not be shared with any other third parties without your consent.

How long do we keep your personal data?
We will keep personal information only for as long as we need it to maintain our relationship with you, provide you with the services or information you requested and to comply with the law.

We also keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website or on request from St Mary's Ferndown Church Office.

What are your personal information rights in relation to the data we hold on you?

Access: You can request that we provide you with details of the personal data we hold about you. (We may ask you to verify your identity.)

Correction: You can ask us to correct our records if you believe they contain incorrect or incomplete information about you.

Erasure: You have the right to request your data is erased when it is no longer relevant to the original purposes for which it was collected. This is not a general right to erasure as there may be legal or other reasons why we need to keep or use your data.

Processing Restrictions: You can temporarily restrict our processing of your data:

If you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Data Portability: You can ask us to provide personal information about you, which you have previously provided in a commonly used and machine-readable format, to transmit it directly to another controller if this is technically feasible.

Withdrawing Consent: If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time.

Data Security and Data Breach: In the extremely unlikely circumstances of a data breach occurring that results in a risk to your rights and freedoms as an individual, we will inform you within 72 hours of our first becoming aware of any such breach which affects your personal details.

Further Processing

If we wish to use your personal data for a new purpose, not covered by this data protection notice, we will provide you with a new notice in advance, setting out the relevant purposes and processing conditions. If necessary, we will seek your prior consent to the new processing.

Contact details

If you have any queries or concerns, or wish to exercise your rights, please contact

Karen Scarfe, Data Protection Co-ordinator,

The Church Office, St Mary’s Church, Church Road, Ferndown, BH22 9EU

Email: office@stmarys-ferndown.org.uk or

Telephone: 01202 897087

For full details see the Information Commissioners Office website ico.org.uk or call

0303 123 1113.

September 2022