The Church of Scotland is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk

The information we are collecting is for the administration purposes of the Pre-Retirement Conference. The information will be used to provide the best experience at the event, and to provide information to you for the event.

We collect your name, dietary requirements and accessibility needs. We also collect your spouse details if they are attending. We also collect the next of kin contact details you provide voluntarily to us for the event.

The lawful basis for this purpose is UK GDPR 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes"

As we are processing special category data (i.e. health data), the lawful basis for this processing is UK GDPR Article 9(2)(a) "the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where domestic law provides that the prohibition referred to in paragraph 1 may not be lifted by the data subject"

We collect your information as provided at registration through the Eventbrite platform as a processor.
The use of the Eventbrite platform means that data may be stored on back-up servers in the USA. However, Eventbrite have provided assurances to the Church that they store the data in the UK only and an appropriate contract is in place.

We share information with the hotel venue for the Conference provision and to ensure appropriate dietary and accessibility needs are addressed. The data is also shared within the Church of Scotland Pensions Department and Housing and Loan Fund Department to provide information for those attending the conference.

We collect your information as provided at registration through the Eventbrite platform.
The use of the Eventbrite platform means that data may be stored on back-up servers in the USA. However, Eventbrite have provided assurances to the Church that they store the data in the UK only.

We hold the data for the timeframe of the event and the following three years after. After that the record of attendance will be destroyed following Church procedures.

Individuals have a number of rights under data protection laws. These are detailed in here. Not all rights are absolute and some only apply in relation to the lawful basis for processing. For this purpose, the only right that does not apply is the Right to Object. All other rights apply. If you want to exercise any of your rights please contact the DPO at Privacy@churchofscotland.org.uk

If you wish to withdraw your consent at any time, please contact pastoralsupport@churchofscotland.org.uk who will process your request accordingly and take your details from the list of attendees for the conference.