1. Your personal data
What is your personal data? Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The
processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
2. Data Controller
LCCC is the data controller. This means LCCC decides how your personal data is processed and for what purposes.
3. How does LCCC process your personal data?
LCCC complies with our obligations under the “GDPR”. LCCC will be responsible for ensuring that any personal data we collect or store is handled:
i. Securely with appropriate technical and organisational measures for protection;
ii. Sensitively, collecting only what is necessary for the particular job;
iii. Only hold personal data for as long as necessary. Once data is no longer needed we deleted/destroyed/erased it.
iv. Protect it from unauthorised or unlawful access, damage and disclosure
v. And in a manner which reflects the lawful basis for storing the personal data.
LCCC use your personal data for the following purposes: –
- To enable LCCC to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our Memorandum and Articles of Association;
- To administer membership records;
- To fundraise and promote the interests of the charity;
- To manage our employees and volunteers;
- To maintain our own accounts and records (including the processing of gift aid applications);
- To prevent crime by using CCTV systems;
- To inform you of news, events, activities and services running at LCCC
4. LCCC legal basis for processing your personal data
- Explicit consent of the data subject so that we can keep you informed about news, events, activities and services and keep you informed about LCCC events. See Consent Form at the end of this notice.
- Processing is necessary for carrying out legal obligations in relation to Gift Aid or under employment, social security or social protection law, or a collective agreement;
- Legitimate interest, (e.g. general administration of church fellowships groups – rota, sign-up sheet, booking forms.)
- Legitimate activity where the processing relates to LCCC members whom there is regular contact but is not disclosed to any third parties outside of LCCC.
5. Sharing your personal data
Your personal data will be treated as strictly confidential. It will only be shared with other LCCC members in order to carry out a service to other LCCC members or for purposes connected with LCCC. We will only share your data with third parties outside of LCCC with your consent.
6. The duration we keep your personal data
LCCC keep data in accordance with the guidance set out in the LCCC Record Management Guides which is available on request from the church secretary. Specifically, we retain membership listing while it is still current; gift aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate; and LCCC baptisms registers permanently.
7. Rights for Individuals
Unless subject to an exemption under the GDPR, you have the following rights with respect to
your personal data: –
- The right to request a copy of your personal data which LCCC holds about you (free of charge);
- The right to request that the LCCC corrects any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for LCCC to retain such data;
- The right to withdraw your consent to the processing at any time
The right to request that the data controller (LCCC) provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable) [Only applies
where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means].
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to object to the processing of personal data, (where applicable) [Only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the
purposes of scientific/historical research and statistics]
- The right to lodge a complaint with the Information Commissioners Office.
8. Further processing
If LCCC wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
Where and whenever necessary, we will seek your prior consent to the new processing.
9. Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact the LCCC Secretary at 64 Clarendon Park Road, Leicester, LE2 3AD or via email firstname.lastname@example.org.
You can contact the Information Commissioners Office (ICO) on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.