Church of Scotland Faith Action Programme Leadership Team is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice Wilson, who can be contacted by emailing: Privacy@churchofscotland.org.uk

The purpose behind gathering this information is to better understand how the training provision provided through Church of Scotland Learning is working towards supporting and equipping adherents. From the information gathered FAPLT is expecting to be able to:
1.Understand which aspects of its training provision is working well.
2.Understand which aspects of its training provision is not working so well, so that it can make improvements.
3.Better understand the training needs identified by those engaging with current provision, in order to develop or make available training provision that is not currently available.

The questionnaire will collect Congregation name and Presbytery, and role of the person completing the questionnaire. As we collect the special category data relating to your religion or philosophical beliefs and your links to your Congregation and Presbytery we are therefore processing special category data and there are additional safeguarding in place to protect that data.

Those completing a course on Church of Scotland Learning (which can only be done if they accept an invitation by us to do so) will be provided with a link to a Microsoft Forms questionnaire which will collect the data.

Under data protection law, the lawful basis for processing the data is UK GDPR Article 6(1)(f) "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child."

As identification of an individual's religion is involved, it means that special category data is processed and therefore the lawful basis for this is UK GDPR Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects."

The data collected is for internal use to enable FAPLT to deliver the best training possible on Church of Scotland Learning. Any information shared will be carried out securely and where possible and necessary the detail will be anonymised.

The Church uses Microsoft as a processor and therefore the data collected in the survey is held on their servers. However, this is all held within Microsoft's UK servers and appropriate documentation is in place.

Not applicable for this processing activity

Questionnaires will be completed at any time throughout the year, however, the data will be gathered for reporting purposes on an annual basis and then responses will be destroyed securely at the end of the year following Church procedures.

The Church does not process data in this way

Individuals have a number of rights under data protection laws. These are detailed here. Not all rights are absolute and some only apply in relation to the lawful basis for processing the data. For this purpose, the only right that does not apply is the Right to Data Portability. All other rights apply. If you want to exercise any of your rights please contact the DPO at Privacy@churchofscotland.org.uk