Privacy Notice for Seeds for Growth in person Events
Church of Scotland Office of the Assembly Trustees is providing you with this information to comply with data protection law and to ensure that you are fully informed and we are transparent in how we collect and use your personal data.
Who is collecting the information?
Church of Scotland Office of the Assembly Trustees is the Data Controller. We have an appointed Data Protection Officer (DPO), Alice Wilson, who can be contacted by emailing: Privacy@churchofscotland.org.uk
Why are we collecting it and what are we doing with it (Purpose)?
Your personal data will be collected for the purpose of running in person event(s) or gathering(s) for information session on Seeds for Growth or working collaboratively with partners who can give further information on potential funding available and to enable you to join in person. An email will be issued to all individuals who provide their names and email addresses which will contain information on venue and timings, programme, any pre-reading etc. We will ask for dietary and access requirements to help ensure that we can cater for any needs that have been highlighted to us and provide a link to the privacy notice. We will also send out a feedback form after the event and circulate any slides or summary of the information shared by the Seeds for Growth Team or our partner(s) during the in-person event.
Please note that none of the partners involved will have access to your personal data. We will be the sole conduit of information from the partners to the attendees.
What personal data do we collect?
Your name, email address and position. We are also collecting special category data namely church (religious beliefs), dietary requirements, access needs and any special requirements (i.e. large print, BSL, hearing loop system etc) there will be additional safeguards in place to protect this data.
There will also be the opportunity to feedback your views/opinions as to how the session went, did we cover what you were looking for, what additional information could we have provided you with and what you are looking for from Seeds for Growth or our partners who we think might be able to offer you some further relevant information. We will email you a Microsoft Word document or a link to a form on Microsoft Forms to complete your feedback which we ask you to complete and email to us.
How are we collecting this information? What is the source?
We are asking all interested parties to provide their information through email grants@churchofscotland.org.uk or Microsoft Forms.
The lawful basis for the processing
Under data protection law the lawful basis for processing attendee data is UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."
As special category data is also collected the lawful basis for processing this data is UK GDPR Article 9(2)(a) "the data subject has given explicit consent to the processing of those personal data for one or more specified purposes"
Who we share the information with:
The Church uses Microsoft (MS) as a processor. This provider is a processor and has appropriate contractual agreements in place with the Church to ensure the appropriate handling of data and that it is only processed on the Church's instruction.
Other than this processor no other third parties will have access to your data, it will not be shared. The venue providers will not have access to your data, the Church staff will manage attendee data including any access needs and dietary requirements, they will not disclose this to the venue providers.
Details of data transfers to any third countries or international organisations
The processor holds the data within the UK and the EU so adequate protection of personal data is in place.
How long do we hold the personal data?
We will hold the personal data from the point at which you provide it and then for four weeks beyond the date of the event to allow for follow-up questionnaires to be sent out. Following that, the information will be destroyed securely following Church procedures.
The completed feedback forms will be held for six weeks. Following that the information will be destroyed securely following Church procedures.
Do we use automated decision making processes, including profiling?
The Church does not process data in this way
Individuals' rights in relation to this processing
Individuals have a number of rights under data protection laws. These are detailed here. Not all rights are absolute and some only apply in relation to the lawful basis for processing the data. For this purpose, the only right that does not apply is the Right to Object. All other rights apply. If you want to exercise any of your rights please contact the DPO at Privacy@churchofscotland.org.uk
As the lawful basis is consent, it's important to note that you can withdraw your consent at any time. To exercise this right please contact grants@churchofscotland.org.uk to withdraw your consent and your request will be processed accordingly.