policies and useful information

Website Privacy Notice

This Privacy Notice is relevant for anyone visiting the website of Kilsyth and District Parish Church of Scotland. Scottish Charity Number SC009866. We are providing you with this information to comply with data protection laws and to ensure that you are fully informed and we are transparent in how we collect and use your personal data.

Who is collecting the information

The Church of Scotland Kilsyth and District Parish is the Controller. We have an appointed Data Protection Officer (DPO), XXX, who can be contacted by emailing: XXX 

Why is this personal data collected and for what reason (Purpose) 

We process data for the following purposes:

• To provide you with information about our services
• Marketing and promotion of our services and activities
• To respond to your enquiries and queries

What personal data is collected

Name, email address and phone number

Information source

The information is collected directly from individuals when they interact with the website by

• Submitting or requesting information
• Providing feedback on the website

The lawful basis for the processing

The lawful basis for processing your data when using this website is UK GDPR Article 6(1)(a) "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."

Who we share the information with

We use and may disclose information within the Church of Scotland in order to best serve our users’ needs. For example, if you use the website’s contact form to send us a query, we will provide your personal data to the department, minister, or presbytery who will be able to assist and advise you.

Details of data transfers to any third countries or international organisations

n/a. The data on this site is hosted in the UK.

How long do we hold the personal data

Web enquiries are automatically deleted after a period of XX months. They are destroyed securely following Church procedures.

Do we use automated decision making processes, including profiling

The Church does not process data in this way.

Individuals' rights in relation to this processing

The Church of Scotland respects your right to privacy. It is important that you are able to control your personal data. The following statement provides you with details about your rights under data protection laws.

Individuals have a number of rights under data protection laws, these are as follows:

• The right to be informed – a privacy notice in relation to the purpose of processing will address this
• The right of access, commonly known as subject access request (SAR) – this  means you have the right to access and receive copies of personal data held about you
• The right to rectification – this means you have the right for incorrect or  incomplete data held about you to be corrected
• The right to erasure, commonly known as the right to be forgotten (RTBF) – this means you can request all data held about you to be deleted
• The right to restrict – this links with some of the other rights and means you can request that the organisation restricts processing your data while the issue is resolved, for example if the data is incorrect and the  rectification right is exercised.
• The right to data portability – this means you have the right to request an organisation provide your data in a machine-readable format, e.g. a .csv file and transfer it to another organisation
• The right to object – this means you can object to the processing and the  controller has to stop unless it can prove a legitimate lawful purpose for the processing. The right to object is absolute in relation to marketing.
• Automated individual decision-making, including profiling – the Church does not process data in this way.

It is important to note that not all rights are absolute and it depends on the lawful basis for processing as to what rights apply. You can exercise any of your rights with the Church of Scotland either verbally or in writing to Kilsyth & District Parish Church, Kingston Road, Kilsyth, G65

Complain to The Church of Scotland

You have the right to make a complaint about our processing of your personal data. You can make a complaint directly to The Church of Scotland:

• By emailing: Privacy@churchofscotland.org.uk

You also have the right to lodge a complaint with the Information Commissioner's Office, who can be contacted by post at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. By phone on 0303 123 1113 (local rate). Visit their website for more information at  www.ico.org.uk/concerns.

The ICO has a complaints process and guidance on what you can expect.