The Church of Scotland Office of the General Assembly is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk

Your personal data will be collected to enable you to register to join the Chalmers Lectures 2024 which includes six online lectures (via Zoom video-conference) and one hybrid (in person and online via Zoom video-conference) event.

We will collect your name, email address and if attending the hybrid event in person, any information you wish to share about accessibility/support and/or dietary requirements. Your IP address will be processed when you join a lecture on Zoom.

Microsoft Forms, within the Church of Scotland account is used to allow people to register to attend the lectures either online via Zoom video-conference or in person at the hybrid (online and in person) event.

An automatic email will be sent to all individuals who provide their names and email addresses to confirm registration. A further email will be sent by the Church of Scotland Office of the General Assembly or by Sanctus Media containing Zoom video-conference links to attend the online lectures.

Under data protection law the lawful basis for processing attendee data is UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."

The Church uses Microsoft (MS) as a processor. We use Microsoft to email individuals who have indicated that they wish to attend the lectures. Data is collected in emails in Microsoft Outlook, Forms and Excel documents in terms of the names and email addresses of those who indicate they wish to attend. We use Zoom to deliver the online lectures (and online element of the hybrid event). Both of these providers are processors and have appropriate contractual agreements in place with the Church of Scotland to ensure the appropriate handling of data is done so, only on the Church's instruction to Microsoft and Zoom. Your personal data is also shared with Sanctus Media who will process your data according to instructions agreed by the Church of Scotland.

Information about who has registered to attend the lectures, in person and online, is also shared with Sanctus Media who are arranging the online lectures and the online element of the hybrid (in person and online) event for us and who will process your data according to instructions agreed by the Church of Scotland.

No attendee data will be shared with Aberdeen University where the in person lecture occurs.

The processors holds the data within the UK and the EU so adequate protection of personal data is in place.

We will hold the personal data for six weeks, following that the attendee data for each lecture will be destroyed securely following Church procedures

The Church does not process data in this way

Individuals have a number of rights under data protection laws. These are detailed here. Not all rights are absolute and some only apply in relation to the lawful basis for processing the data. For this purpose, the only right that does not apply is the Right to Object. All other rights apply. If you want to exercise any of your rights please contact the DPO at Privacy@churchofscotland.org.uk

As the lawful basis is consent, it's important to note that you can withdraw your consent at any time. To exercise this right please contact pcoffice@churchofscotland.org.uk to withdraw your consent and your request will be processed accordingly.