Dunblane Cathedral Privacy Policy
Privacy Notice
Dunblane Cathedral Church of Scotland,
Registered Scottish Charity: Number SC004454
(the “Congregation”)
Purpose of this Notice
This Privacy Notice outlines the way in which the Congregation will use personal information provided to us. Personal information includes any information that identifies you personally, such as your name, address, email address or telephone number.
The Congregation recognises the importance of your privacy and personal information and we have therefore outlined below how we use, disclose and protect this information. The Congregation, jointly with the Presbytery of Perth, is the data controller, because we decide how your data are processed and for what purpose. We have appointed a Data Protection Officer who can be contacted by email at DPO@dunblanecathedral.org.uk or via our website HERE.
Why are we collecting it and what are we doing with it (Purpose)?
We use the information you give to us:
- to administer membership records, including a Communion Roll and Supplementary Roll;
- for pastoral care purposes;
- in relation to participation in Congregational activities ;
- to provide you with information about news, events, and activities within the Congregation or the wider Church of Scotland;
- to provide the services of a parish church to the local community;
- to fulfill contractual or other legal obligations;
- to manage our employees;
- to further our charitable aims, for example through fundraising activities;
- to maintain our accounts and records (including the processing of Gift Aid applications);
- Livestreaming of Cathedral services and events - there will be signage when this occurs and opportunity to not be filmed during livestreaming. (Please note: it is not possible to remove an image in live streaming once the video starts, or once it is online in the internet.)
What personal data is collected?
We capture the following data:
- Contact details: name, address, email, home telephone number and/or mobile telephone number
- Relationships (where known) eg parent, child, partner
- Your image if seated in a recording area of the Cathedral during live streaming (NB Your image on live streaming MAY infer a religious or philisophical belief to the viewer.)
Lawful basis for processing personal information
The Congregation processes your information in the course of its legitimate activities, with appropriate safeguards in place, as a not-for-profit body with a religious aim and on the basis that our processing relates solely to members, former members or people who have regular contact with us, and that this information is not disclosed to any third party without your consent.
The lawful basis for the main processing is Article 9(2)(d) “processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects.”
The lawful basis for Livestreaming or other voluntary purposes is Article 6(1)(a) “the data subject has given consent to the processing of his or her personal data for one or more specific purposes” and for employment purposes is Article 6(1)(b) “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”
We also process information where this is necessary for compliance with our legal obligations. Article 6(1)(c) “processing is necessary for compliance with a legal obligation to which the controller is subject”. Also where processing is necessary for the purposes of our legitimate interests and such interests are not overridden by your interests or fundamental rights and freedoms, Article 6(1)(f) “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
Who we share data with
The Congregation will only share your personal information where this is necessary for the purposes set out above. Information will not be shared with any third party outwith the Church of Scotland without your consent unless we are obliged or permitted to do so by law for example health and safety purposes when an accident has occurred and it’s necessary to report this to the Health and Safety Executive (HSE)
How long do we hold the personal data?
The Congregation will strive to ensure that personal information is accurate and held in a secure and confidential environment. We will keep your personal information for as long as you are a member or adherent or have regular contact with us or so long as we are obliged to keep it by law or may need it in order to respond to any questions or complaints or to show that we treated you fairly. We may also keep it for statistical purposes but if so we will only use it for that purpose. When the information is no longer needed it will be securely destroyed or permanently rendered anonymous. [Further information about our data retention policy is available on the Dunblane Cathedral website at www.dunblanecathedral.org.uk.]
Individuals’ rights in relation to this processing
Individuals have a number of rights under data protection law. These are listed HERE and HERE on the Church of Scotland website. For the purposes of processing your data, all the rights apply except for the right to object. If you want to exercise any of your rights, please contact the Congregation DPO at DPO@dunblanecathedral.org.uk.
Contact us
You can contact us by getting in touch with the Dunblane Cathedral Data Protection Officer at DPO@dunblanecathedral.org.uk.
How to complain
You have the right to complain to the Information Commissioner’s Office about anything relating to the processing of your personal information by the Congregation. You can contact the ICO via its website at www.ico.org.uk or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
May 2023 V2
