Privacy Notice for Pioneer Learning Gathering Community
This is the privacy notice for Church of Scotland Pioneer Learning Gathering Community. Privacy Notices should be provided to data subjects (individuals) whenever the Church collects their data for specific purposes (whether this is directly from them or from a third party).
Church of Scotland Faith Nurture Forum is providing you with this information to comply with data protection laws and to ensure that you are fully informed and we are transparent in how we collect and use your personal data.
Who is collecting the information?
Church of Scotland is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan who can be contacted by emailing: Privacy@churchofscotland.org.uk
Why are we collecting it and what are we doing with it (Purpose)?
There is an event on Pioneer Ministry and the data is collected for organising the event including inviting and involving Assistant Ministers at the event.
What personal data do we collect?
Name, address, email address, phone number, dietary and accessibility requirements and next of kin details. Please note that Next of Kin individuals should be informed that we will hold this detail for this purpose.
Also due to the topic there is implication of religious beliefs which under data protection law is special category data.
How are we collecting this information? What is the source?
The event is organised by sending email invitation to the individuals. The source of the emails are the Church central database.
The lawful basis for the processing
Under UK GDPR Article 6(1)(b) "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract"
As special category data is also collected (dietary and accessibility requirements) the lawful basis for processing is UK GDPR Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects."
Who we share the information with:
The event is organised via email invitation which involves the use of Microsoft. We have an appropriate contract in place and any data held by Microsoft is held within the UK and European Economic Area (EEA).
The detail of the event is only shared within the Church of Scotland team, the trainer and those attending.
Details of data transfers to any third countries or international organisations
This does not apply for this processing activities.
How long do we hold the personal data?
We only hold event information for 3 months before destroying securely following Church procedures.
Do we use automated decision making processes, including profiling?
The Church does not process data in this way
Individuals' rights in relation to this processing
Individuals have a number of rights in data protection laws. This is detailed here on our website. For the purposes of this processing, all the rights apply except for the right to object. If you wish to exercise any of your rights, please email the DPO at Privacy@churchofscotland.org.uk