The Parochial Church Council (PCC) of
St Augustine’s Endcliffe, Sheffield
1. Your personal data – what is it?
Personal
data relates to a living individual who can be identified from that data. Identification can be by the information
alone or in conjunction with any other information in the data controller’s
possession or likely to come into such possession. The processing of personal data is governed by
the General Data Protection Regulation (the “GDPR”).
2. Who are we?
The PCC of St
Augustine’s, Endcliffe, Sheffield is the data controller (contact details
below). This means it decides how your
personal data is processed and for what purposes.
3. How do we process your personal data?
The PCC of St Augustine’s, Endcliffe, Sheffield complies with its legal obligations to keep personal data up to
date; to store and destroy it securely; to not collect or retain excessive
amounts of data; to keep personal data secure, and to protect personal data
from loss, misuse, unauthorised access and disclosure and to ensure that
appropriate technical measures are in place to protect personal data.
We use your personal data
for some or all of the following purposes:
·
To enable us to meet all legal and statutory obligations (which
include maintaining and publishing our electoral roll in accordance with the
Church Representation Rules);
·
To carry out comprehensive safeguarding procedures (including due
diligence and complaints handling) in accordance with best safeguarding
practice from time to time with the aim of ensuring that all children and
adults-at-risk are provided with safe environments;
·
To minister to you and provide you with pastoral and spiritual
care (such as visiting you when you are gravely ill or bereaved) and to organise and perform ecclesiastical
services for you, such as baptisms, confirmations, weddings and funerals;
·
To deliver the Church’s mission to our community, and to carry out
any other voluntary or charitable activities for the benefit of the public as
provided for in the constitution and statutory framework;
·
To administer the parish, deanery, archdeaconry and diocesan
membership records;
·
To fundraise and promote the interests of the Church and charity;
·
To maintain our own accounts and records;
·
To process a donation that you have made (including Gift Aid
information);
·
To seek your views or comments;
·
To notify you of changes to our services, events and role holders;
·
To send you communications which you have requested and that may
be of interest to you. These may include
information about campaigns, appeals, other fundraising activities;
·
To process a grant or application for a role;
·
To enable us to provide a voluntary service for the benefit of the
public in a particular geographical area as specified in our constitution;
4. What is the legal basis for processing your personal data?
·
Explicit consent of the data subject so that we
can keep you informed about news, events, activities and services and keep you
informed about diocesan events.
·
Processing is necessary for carrying out legal obligations
in relation to Gift Aid or under employment, social security or social
protection law, or a collective agreement;
·
Processing is carried out by a not-for-profit
body with a political, philosophical, religious or trade union aim provided: -
o
the processing relates only to members or
former members (or those who have regular contact with it in connection with
those purposes); and
o
there is no disclosure to a third party without
consent.
5. Sharing
your personal data
Your personal data will be
treated as strictly confidential. It
will only be shared with third parties where it is necessary for the
performance of our tasks or where you first give us your prior consent. It is likely that we will need to share your
data with some or all of the following (but only where necessary):
·
The appropriate bodies of the Church of England including other
data controllers;
·
Other clergy or lay persons nominated or licensed by the bishops
of the Diocese of Sheffield to support the mission of the Church in our
parish. For example, our clergy are
supported by our area dean and archdeacon, who may provide confidential
mentoring and pastoral support.
Assistant or temporary ministers, including curates, deacons, licensed
lay ministers, commissioned lay ministers or persons with Bishop’s Permissions
may participate in our mission in support of our regular clergy;
·
Other persons or organisations operating within the Diocese of
Sheffield including, where relevant, the Sheffield Diocesan Board of Education
and Subsidiary Bodies;
·
On occasion, other churches with which we are carrying out joint
events or activities such as the Central Mission Partnership(St Augustine’s, St
Andrew’s, St Mary’s and St Peter & St Oswald’s).
6. How long do we keep your personal data[1]?
We keep
data in accordance with the guidance set out in the guide “Keep or Bin: Care of
Your Parish Records” which is available from the Church of England website [see
footnote for link].
Specifically,
we retain electoral roll data while it is still current; gift aid declarations
and associated paperwork for up to 6 years after the calendar year to which
they relate; and parish registers (baptisms, marriages, funerals) permanently.
7. Your rights and your personal data
Unless
subject to an exemption under the GDPR, you have the following rights with
respect to your personal data: -
·
The right to request a copy of your
personal data which the PCC of St Augustine’s, Endcliffe, Sheffield holds about
you;
·
The right to request that the PCC
of St Augustine’s, Endcliffe, Sheffield corrects any personal data if it is
found to be inaccurate or out of date;
·
The right to request your personal
data is erased where it is no longer necessary for the PCC of St Augustine’s,
Endcliffe, Sheffield to retain such data;
·
The right to withdraw your consent
to the processing at any time
·
The right to request that the data
controller provide the data subject with his/her personal data and where
possible, to transmit that data directly to another data controller, (known as
the right to data portability), (where applicable).
·
The right, where there is a dispute
in relation to the accuracy or processing of your personal data, to request a
restriction is placed on further processing;
·
The right to object to the
processing of personal data, (where applicable)
·
The right to lodge a complaint with
the Information Commissioners Office.
8. Further processing
If
we wish to use your personal data for a new purpose, not covered by this Data
Protection Notice, then we will provide you with a new notice explaining this
new use prior to commencing the processing and setting out the relevant purposes
and processing conditions. Where and
whenever necessary, we will seek your prior consent to the new processing.
We
keep this Privacy Notice under regular review and we will place any updates on
http://staugustinessheffield.org/wp1/. This Notice was last updated in May 2018.
9. Contact Details
To exercise all relevant rights, queries of complaints please in
the first instance contact
The
Data Protection Compliance Officer, Catherine Rooker-Brown, Mission Partnership
Development Worker,
St Mary’s Church, Bramall Lane, Sheffield, S2 4QZ.
Telephone:
07392087529
Email:
centralmissionpartnership@sheffield.anglican.org
You can contact the Information Commissioners Office on 0303 123
1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water
Lane, Wilmslow, Cheshire. SK9 5AF.
[1] Details about retention periods can currently be found in the Record Management Guides located on the Church of England website at: - https://www.churchofengland.org/more/libraries-and-archives/records-management-guides