Church of Scotland is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice O'Sullivan, who can be contacted by emailing: Privacy@churchofscotland.org.uk

We are collecting the data to find out what engagement Church of Scotland congregations have in schools and who the key contact is. This will inform and improve the support and training we can offer for this area of ministry.

We are collecting name, email address, your church, presbytery; your church role. The survey will also collect the type of schools you are involved with, the nature of your role, the areas of involvement at school and any additional detail/opinions you have regarding the work and support needed.

As we are collecting your association with your church and presbytery we are collecting special category data, i.e. your religious beliefs. We therefore have additional safeguards in place to protect your data.

The information is collected directly from you when you have contacted the Church in relation to Schools Ministry, whether expressing an interest on the website, via a newsletter or contacting the team directly. We then issue the Schools Ministry Survey using Microsoft Forms to gather further detail and the contact information will be stored on the CIS Church of Scotland database.

The lawful basis for processing your personal data under data protection laws are UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes"

For the processing of special category data the lawful basis is Article 9(2)(d) "processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects."

The contact details will, if you consent, be entered on to the Church Information System (CIS). This is an in-house database, so no processors are involved and the data is securely held within Church servers with appropriate security safeguards in place.

The Church uses Microsoft as a processor and therefore the data collected in the survey is held on their servers. However, this is all held within Microsoft's UK servers and appropriate documentation is in place.

The data will be held for 12 months and renewal and updating consent will be sought after that period of time. If consent is not provided the data will be destroyed following secure Church procedures.

Under data protection legislation individuals have a number of rights. These rights are listed on our website here.

For the purposes of the Schools Ministry Survey and due to the lawful basis, only the right to object will not apply. All other rights do apply, if you want to exercise any of your rights please contact the Church, you can email the DPO at Privacy@churchofscotland.org.uk or make the request verbally. The Church will process your request accordingly and respond without undue delay and within one calendar month. It may be necessary prior to the request being processed that the Church will require proof of identity. This is required to ensure an individual's personal data is not disclosed to an unauthorised individual.

As the lawful basis is consent, it's important to note that you can withdraw your consent at any time. To exercise this right please contact childrenandyouth@churchofscotland.org.uk to withdraw your consent and your request will be processed accordingly.