Journeying With New Scots: Preparing for Sanctuary Sunday
Church of Scotland Faith Action Department is providing you with this information to comply with data protection law and to ensure that you are fully informed and we are transparent in how we collect and use your personal data.
Who is collecting the information?
Church of Scotland Faith Action Department is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk
Why are we collecting it and what are we doing with it (Purpose)?
The Church of Scotland Faith Action Department is holding an online webinar follow up to the event on 25 March. The data is collected for administrative purposes for the organisation and running of the event.
Using some of the stories, images and reflections from 25 March, a worship resource for Sanctuary Sunday (25 June) has been created for churches to mark Sanctuary Sunday. The pack contains:
- Reflections and sermon ideas based on the story of Hagar from Genesis 21
- Creative prayer exercises inspired by the Journeying with New Scots conference
- Discussion starters based on the new Faithful Welcome videos
- Stories from the lives of refugees and people seeking asylum
- Activities that introduce children to issues facing those seeking sanctuary in an age- appropriate way
At the online launch we will be unpacking the resource, hearing more from churches involved in supporting New Scots, and exploring how we can engage our wider congregations in this work.
What personal data do we collect?
We will collect your name, email address, and your church connection (i.e. what church you attend and the presbytery).
As we are collecting your association with a faith, this means we are collecting special category data and will therefore have additional safeguards in place to protect your data.
How are we collecting this information? What is the source?
The information is collected directly from the individual and also through the event registration platform Eventbrite.
The lawful basis for the processing
The lawful basis for processing the personal and special category personal data under data protection laws are UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes" and for the special category data UK GDPR Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects."
Who we share the information with:
We use Eventbrite (processors) as the platform to register for the event. We use Zoom to deliver the webinar. Both of these providers are processors and have appropriate contractual agreements in place with the Church to ensure the appropriate handling of data is done so only on the Church's instruction to Eventbrite and Zoom.
We will not share your data with any other organisation
Details of data transfers to any third countries or international organisations
The use of Zoom and Eventbrite means that data is transferred outside the UK. However, the data is stored in Germany and Ireland where there is already a high standard of data protection laws are in place.
How long do we hold the personal data?
We will hold your data for six months following the event. We will be in touch, via the Eventbrite platform, to follow up within this six month period. This may include resources related to the event, as well as contact details for our staff, should you wish to contact us about any of the matters discussed at the event. After the six month period has passed, your data will be destroyed securely following Church procedures.
Do we use automated decision making processes, including profiling?
The Church does not process data in this way.
Individuals' rights in relation to this processing
Individuals have a number of rights under data protection laws. These are detailed here. Not all rights are absolute and some only apply in relation to the lawful basis for processing. For this purpose, the only right that does not apply is the Right to Object. All other rights apply. If you want to exercise any of your rights please contact the DPO at Privacy@churchofscotland.org.uk
Please note as the lawful basis for processing is consent, it's important to note that you can withdraw your consent at any time, without detriment to you, this is achieved by contacting FaithImpact@churchofscotland.org.uk who will process your request accordingly.