Church of Scotland is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk

We are collecting the data to administrate the Acorn Autumn Roadshow for the purpose of anticipating numbers for attendance.

We are collecting name, email address and association with a faith tradition. As we are collecting your association with a faith tradition, this means we are collecting special category data and will therefore have additional safeguards in place to protect your data.

The information is collected directly from the individual using Microsoft Forms.

The lawful basis for processing your personal data under data protection laws are UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes"

For the processing of special category data the lawful basis is Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects."

As we are using Microsoft (processors) we have appropriate documentation and safeguards in place with this company.

The data will be held for 6 months and will be destroyed securely following Church procedures after that period of time.

Under data protection legislation individuals have a number of rights. These rights are listed on our website here.

For the purposes of the Acorn Autumn Roadshow and due to the lawful basis, only the right to object will not apply. All other rights do apply, if you want to exercise any of your rights please contact the Church, you can email the DPO at Privacy@churchofscotland.org.uk or make the request verbally. The Church will process your request accordingly and respond without undue delay and within one calendar month. It may be necessary prior to the request being processed that the Church will require proof of identity. This is required to ensure an individual's personal data is not disclosed to an unauthorised individual.

As the lawful basis is consent, it's important to note that you can withdraw your consent at any time. To exercise this right please contact Rob Rawson at rrawson@churchofscotland.org.uk to withdraw your consent and your request will be processed accordingly.