The Church of Scotland Public Life and Social Justice Department is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk

We are collecting data from you in order to run a webinar about racial justice and the role of the Church. The webinar will be recorded and its content may also be used for future training purposes within the Church of Scotland.

We will be collecting your name and contact details to keep in contact with you about the event and your participation as an invited speaker. We will also collect some details from you to compile a brief biography to let our participants know who you are and why you have been asked to speak at the webinar. This may include special category data relating to your racial/ethnic origin and religious or philosophical beliefs.

As we are inviting you to speak on topics related to race, racism and religion, we will collect some special category data relating to your religion or philosophical beliefs and racial/ethnic origin through the content of your presentation. We are not asking you to disclose this information as a pre-condition of your involvement in the webinar. Any special category data you choose to disclose during your presentation is entirely voluntary and at your own discretion.

We are collecting personal data from you as part of your agreement to be involved in the webinar as an invited speaker, and from the recorded content of your presentations.

Under data protection laws, the lawful basis for processing your data is UK GDPR Article 6(1)(b) "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."

For the special category data that will be processed the lawful basis is UK GDPR Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects"

Your name and contact details will be shared with the participants attending the webinar. This is a publicly available webinar, and can be accessed by people outside of the Church of Scotland. The webinar recordings, which will include your personal data, including any special category data, that you have disclosed during your recorded presentation may also be shared with future participants within the Church of Scotland for training purposes, including Church of Scotland Ministers and Elders

We use Eventbrite (processors) as the platform to register for the event. We use Zoom to deliver the webinar. Both of these providers are processors and have appropriate contractual agreements in place with the Church to ensure the appropriate handling of data is done so only on the Church's instruction to Eventbrite and Zoom.

The use of Zoom and Eventbrite means that data is transferred outside the UK. However, the data is stored in Germany and Ireland where there is already a high standard of data protection laws are in place.

Registration information (Emails and names) will be stored for 5 months, after that it will be destroyed securely following Church procedures.

Recordings of your presentations, and any data associated with these recordings may be kept by the Church of Scotland for future internal training purposes. We will keep these recordings for up to 25 years for this purpose, with a review after 10 years. When this period has passed, the recordings will be destroyed securely following Church prodedures.

The Church does not process data in this way.

Individuals have a number of rights under data protection laws. These are detailed here. Not all rights are absolute and some only apply in relation to the lawful basis for processing speakers data. For this purpose, the only right that does not apply is the Right to Object. All other rights apply. If you want to exercise any of your rights please contact the DPO at Privacy@churchofscotland.org.uk