We are committed to handling your personal data with care. The document below summarises how the Parochial Church Council (PCC) of St John the Baptist, Great Gaddesden, holds and processes personal data in accordance with the General Data Protection Regulations and your associated rights.
Great Gaddesden Parish Church in the Diocese of St Alban’s Privacy Notice agreed by the PCC on 11th November 2019
Privacy Notice Statement
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2018 (the “GDPR”).
The PCC of Great Gaddesden Parish Church (the PCC) is the data controller (contact details below). This means it decides how personal data is processed and for what purposes.
Privacy Policy commitment
The PCC is committed to ensuring that the privacy of any person in contact with Great Gaddesden Parish Church is protected.
Any information collected will only be used in accordance with this Privacy Notice and in compliance with the directives from the St Alban’s Diocesan Office and the wider Archbishop’s Council.
This Privacy Notice sets out how the PCC and Church Officers uses and protects any information collected from Patrons, Trustees, PCC members, Church Officers, Electoral Roll Members, Church Members, Church Activity Members,School Partners, Friends of Church Partners, Volunteers, Contributors, Consultants and Members of the Public who approach the Church for Spiritual Guidance and Pastoral Church Services.
Personal information
Contact details and information about any person who is a member of Great Gaddesden Parish Church, or is associated or contributes to it, are held on confidential password protected databases, or paper lists and spreadsheets which are securely held and maintained through the normal charitable status processes of the PCC.
The PCC will only display personal information not already in the public domain for which relevant consent has been sought and given.
The PCC will only communicate with a recipient using the method chosen by the recipient i.e. by email, post or telephone including mobile ‘phones in compliance with the Data Protection Act 1998 and updated by the General Data Protection Regulations of 2018.
The PCC will not acquire, sell or lease personal information to third parties unless required to do so by law. The PCC will not distribute it to third parties unless it is with the consent of the donor.
The PCC will treat all personal data as strictly confidential and will only be shared with other members of the church in order to carry out a service to other church members or for purposes connected with the church.
The PCC will disclose details of personal information which is held about an individual upon a request in writing to the PCC Secretary at the Church Contact Address in compliance with the Data Protection Act 1998 and GDPR 2018. The PCC will act promptly upon any request to change or delete information held. In the event of a complaint pertaining to an alleged data breach, Great Gaddesden Church will respond within 72 hours of receiving a complaint.
Great Gaddesden Parish Church PCC collects the following:
Anonymised data for analytical records of Church Service numbers
Registers of Services, Weddings, Funerals, Baptisms. Churchyard grave maps and details of internments
Names and contact details of Patrons, Trustees, PCC Members, Electoral Roll Members, Church Members, those on Church Duty Rotas for Sidesmen, Chalice, Intercessions, Lesson Readers, Refreshments, Flower, or Cleaning, Church School Partners, Bell Tower Bell Ringers, Friends of Great Gaddesden Church, Office Holders, Deanery and Diocesan Consultants and Advisors, Church Building and Churchyard Maintenance Contractors and Volunteers, Newsletter Advertising Businesses, Community Members using the church building.
Names and chosen contact details of Parish Giving donors and contributors, in order to maintain financial accounts including gift aid applications.
Names and contact details of those whose details have been given in respect of Safeguarding Procedures and Disclosure and Barring Service checks.
Names, contact details, of visiting organists, members of the public requesting Church Services, for example Baptisms, Weddings, Blessings, Funerals and Confirmation, those contributing to the purchasing of flowers, those attending or having attended Church children’s activities and Walk and Talk activities
For more detailed information – Please see the attached GPDR Audit Sheet 2019
What we do with the information we gather
Great Gaddesden Parish Church PCC requires this information to correctly update and improve our communication, for internal record keeping, to publish events and results and outcomes of events especially where funding is given, raised and monitored
Great Gaddesden Parish Church PCC is committed to ensuring that all personal information is secure. In order to prevent unauthorised access or disclosure, the PCC has suitable physical, electronic and managerial procedures to safeguard and secure the information collected.
How long we keep personal data
We keep data in accordance with the guidance set out in the guide “Keep or Bin: Care of Your Parish Records” which is available from the Church of England website
Specifically, we retain electoral roll data while it is still current; gift aid declarations and associated paperwork for up to 6 years after the calendar year to which they relate; and parish registers (baptisms, marriages, funerals) permanently.
Your rights and your personal data
Unless subject to an exemption under the GDPR, an individual has the following rights with respect to personal data: –
- The right to request a copy of personal data which the PCC holds
- The right to request that the PCC corrects any personal data if it is found to be inaccurate or out of date;
- The right to request that personal data is erased where it is no longer necessary for the PCC to retain such data;
- The right to withdraw consent to the processing at any time
- The right to request that the PCC provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), [Only applies where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means].
- The right, where there is a dispute in relation to the accuracy or processing of personal data, to request a restriction is placed on the PCC for further processing;
- The right to object to the processing of personal data, [Only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics]
- The right to lodge a complaint with the Information Commissioners Office.
Further processing
If the PCC wish to use an individual’s personal data for a new purpose, not covered by this Data Protection Notice, then the PCC will provide them with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, the PCC will seek prior consent to the new processing.
Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact the PCC Secretary c/o St John’s Vicarage, Piper’s Hill, Great Gaddesden, Hemel Hempstead. HP13BY
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.
Who we are
Our website address is: https://greatgaddesdenchurch.com.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Who we share your data with
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.