Privacy Notice for Love in Fellowship and Trust (LIFT) – Guild branch for young people
The Church of Scotland Guild is providing you with this information to comply with data protection laws and to ensure that you are fully informed and we are transparent in how we collect and use your personal data.
Who is collecting the information?
The Church of Scotland Guild is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk
Why are we collecting it and what are we doing with it (Purpose)?
We are collecting your personal data to provide you with information about the Love in Fellowship and Trust (LIFT), the Guild branch for young people (aged 18-30). The data will be used by the Guild, Faith Action and CrossReach parts of the Church of Scotland to provide information that you have identified, through completion of this form, that you would be interested in receiving.
What personal data do we collect?
We are collecting name, email address, presbytery, and if you choose to provide it, age. As we are collecting your association with a faith tradition, this means we are collecting special category data and will therefore have additional safeguards in place to protect your data.
How are we collecting this information? What is the source?
The information is collected directly from the individual through MS Forms.
The lawful basis for the processing
The lawful basis for processing the personal data under data protection laws are UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."
For processing the special category data (religious beliefs) the lawful basis is UK GDPR Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects."
Who we share the information with
The information will be processed by Microsoft. They are a data processor and only act on our instructions and there is an appropriate contract in place.
Your data will only be used by the Guild, Faith Action and CrossReach parts of the Church of Scotland.
How long do we hold the personal data?
The data will be held for as long as you wish to remain receiving information about LIFT (the Young Adult Guild). All participants are free to unsubscribe at any time by contacting YAG@churchofscotland.org.uk and, if that request is made, their data will be removed from the database within seven working days. We will review your consent to subscribe every two years to ensure you continue consent to be part of this group.
Individuals' rights in relation to this processing
Under data protection laws individuals have a number of rights, these are detailed here.
All rights apply except for the right to object. If you want to exercise any of your rights please contact the Church. You can email the DPO at Privacy@churchofscotland.org.uk or make the request verbally. The Church will process your request accordingly and respond without undue delay and within one calendar month. It may be necessary prior to the request being processed that the Church will require proof of identity. This is required to ensure an individual's personal data is not disclosed to an unauthorised individual.
As the lawful basis is consent, it's important to note that you can withdraw your consent at any time. To exercise this right please contact YAG@churchofscotland.org.uk to withdraw your consent and your request will be processed accordingly.