The law only allows us to use your personal information in certain limited circumstances. We have listed these below and what information we are allowed to process.
The GDPR specifically states that a church may use legitimate interests to process personal information relating to its members to administer membership of the church. We consider that this is the most appropriate condition for us to administer your membership of our church as you would reasonable expect. Moreover, we may process your personal data to keep you informed about news, events activities and services of the church.
Examples of how we may use your information for administration purposes:
We may also use legitimate interests to send out our publicity/promotional materials but only where such materials relate directly to the church and you have not told us not to send you such information.
We have put safeguards in place to ensure that your personal information is protected and that your fundamental rights and freedoms are not overridden.
Examples of how we may use your information with consent
Examples of how we may use your information in order to comply with a contract that we have entered into with you:
Examples of how we may use your information to fulfil a legal obligation
“Special categories” of particularly sensitive personal information require higher levels of protection. We need to have further justification for collecting, storing and using this type of personal information. We may process special categories of personal information in the following circumstances:
Less commonly, we may process this type of information where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.
We may use your sensitive personal information in the following ways:
Whilst information relating to children is not considered to be special category information, it is information that is given specific protection. Where the child is under the age of 13 we will always ask for the consent of parents before allowing the child to set up an account on church website and ensure that the parents are able to access and administer the account.
Where a child is 13 or over we will permit the child to have their own church account, but we may (if we deem it appropriate in the circumstances) inform the parents. We will tell the child at the time of signing up that we may inform their parents and we will only do this where it is appropriate and lawful to do so.
We may share your information with certain third parties including:
We may also disclose your personal information to third parties:
Our website may contain links to websites owned by other organizations. If you follow a link to another website, the website will have its own privacy policies. We suggest that you check the policies of any other websites before giving them your personal information as we cannot accept responsibility for any other website.
The security of your personal information is important to us.
We use appropriate technical and organizational measures to safeguard personal information and encryption technology where appropriate to enhance privacy and help prevent information security breaches.
Any personal information that you provide to us will be held within the EEA.
All third parties who provide services to us or our software provider are required to sign a contract requiring them to have appropriate technical, administrative and physical procedures in place to ensure that your information is protected against loss or misuse.
All information you provide to us is stored on our secure servers or on secure servers operated by a third party. Information on our third-party providers can be found above.
We only hold your personal information for as long as necessary for the purposes for which we collected your information.
We have a retention policy which lays down timescales for the retention of information. The retention policy can be found here www.dclmuk.org
We have set these timescales in accordance with any applicable legislation and where none exists then we will keep your information for the duration of any contract that you have entered into with us and then for a period of 6 years after which time it will be deleted.
If you chose to send us information via email, we cannot guarantee the security of this information until it is delivered to us and on the condition that what we received is a true reflection of the original unedited information sent.