How we use and store your data
St Mary's Church, Tadcaster
St Mary's Church, Church Fenton
St John the Baptist, Kirkby Wharfe & Ulleskelf
St Andrew's Church, Newton Kyme
Data Privacy Notice
1. Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with other information in the data controller’s possession or likely to come into such possession. With effect from 25 May 2018 the processing of personal data will be governed by the General Data Protection Regulation (the ‘GDPR’).
2. Who are we?
The Tadcaster Benefice is comprised of the parish churches of Church Fenton, Kirkby Wharfe, Newton Kyme and Tadcaster. The Benefice Administrator is the data controller (contact details below). This means that we decide how your personal data is processed and for what purposes.
3. How do we process your personal data?
The Tadcaster Benefice complies with its obligations under the GDPR by keeping personal data up to date; by storing it and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We will use your personal data only for the following purposes:-
for the purposes of a specific event booked with the church (e.g. wedding, baptism)
to invite you to any follow-up event or service linked with the above specific event
to keep you informed about other events or services which we believe may be of interest to you
to process Gift Aid donations and payments for services and products
4. What is the legal basis for our processing of your personal data?
Explicit consent of the data subject so that we can keep you informed about events and services and process any gift aid donations and payments for services and products.
Processing is carried out by a not-for-profit body with a religious aim provided:-
i) the processing relates only to members, former members, or those who have regular contact with it in connection with these purposes; and
ii) there is no disclosure to a third party without consent.
5. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with authorised persons of the Tadcaster Benefice in order for us to carry out our ministry. We will only ever share your data with third parties outside of the Tadcaster Benefice with your explicit consent.
6. How long do we keep your personal data?
We will not keep personal data longer than is necessary for the purposes for which they were collected. We will take all reasonable steps to destroy, or erase from our systems, all data which is no longer required.
Specifically, we retain financial information (i.e. gift aid declarations, donations, payments and associated paperwork for up to 7 years after the calendar year to which they relate.
7. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:-
The right to request a copy of your personal data which the Tadcaster Benefice holds about you;
The right to request that the Tadcaster Benefice corrects any personal data if it is found to be inaccurate or out of date;
The right to request your personal data is erased where it is no longer necessary for the Tadcaster Benefice to retain such data;
Where the lawful basis of our processing of your personal data is consent, the right to withdraw that consent at any time
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to lodge a complaint with the Information Commissioners Office
8. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing before it takes place.
9. Contact details
To exercise all relevant rights, queries or complaints please, in the first instance, contact the Benefice Administrator at firstname.lastname@example.org
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.