Privacy and Cookies

Privacy and Cookies

Your personal data – what is it?

“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address).  Identification can be by the information alone or in conjunction with any other information.  The processing of personal data is governed by [the Data Protection Bill/Act 2018 the General Data Protection Regulation 2016/679 (the “GDPR” and other legislation relating to personal data and rights such as the Human Rights Act 1998].

 Who are we?

The Church (St. Marys Indian Orthodox Church, Bristol) is the data controller (contact details below) and are registered with the Information Commissioners Office (ICO).  This means the church decides how your personal data is processed and for what purposes.

How do we process your personal data?

  • To enable those who undertake pastoral care duties as appropriate (e.g. visiting the bereaved);
  • To carry out comprehensive safeguarding procedures (including due diligence and complaints handling) in accordance with best safeguarding practice from time to time with the aim of ensuring that all children and adults-at-risk are provided with safe environments;
  • To deliver the Church’s mission to our community, and to carry out any other voluntary or charitable activities for the benefit of the public as provided for in the constitution and statutory framework of each data controller;
  • To enable us to provide a voluntary service for the benefit of the public in a particular geographical area as specified in our constitution;
  • To enable us to meet all legal and statutory obligations (which include maintaining and publishing our electoral roll in accordance with the Church Representation Rules);
  • Our processing also includes the use of CCTV systems for the prevention and prosecution of crime.

What is the legal basis for processing your personal data?

Most of our data is processed because it is necessary for our legitimate interests or the legitimate interests of a third party (such as another organisation in the Malankara Orthodox Church).  An example of this would be our safeguarding work to protect children and adults at risk.  We will always take into account your interests, rights and freedoms.

Some of our processing is necessary for compliance with a legal obligation.  For example, we are required by the Church Representation Rules to administer and publish the electoral roll of eligible members who attend the General Bodies, and under Canon Law to announce forthcoming weddings by means of the publication of banns.

We may also process data if it is necessary for the performance of a contract with you, or to take steps to enter into a contract.  An example of this would be processing your data in connection with the hire of church facilities.

Religious organisations are also permitted to process information about your religious beliefs to administer membership or contact details.  Processing is necessary for carrying out legal obligations in relation to Gift Aid or social security or social protection law, or a collective agreement;

Where your information is used other than in accordance with one of these legal bases, we will first obtain your consent to that use. 

Sharing of your personal data 

Your personal data will be treated with strict confidentiality.  It will only be shared with third parties where it is necessary for the performance of our tasks or where you first give us your prior consent.  It is likely that we will need to share your data with some or all of the following (but only where necessary):

  • The appropriate bodies of the Malankara Orthodox Church including other churches within the UK Europe Africa Diocese;
  • Our agents, servants and contractors. For example, we may ask a commercial provider to maintain our database software;
  • Other clergy or lay persons nominated or licensed by the UK Europe Africa Diocese to support the mission of the Church in our parish.  For example, our clergy are supported by our Diocese, who may provide confidential mentoring and pastoral support.  Assistant or temporary ministers or persons with Bishop’s Permissions may on time to time participate in our church in support of our regular clergy;
  • Other persons (for example- Sunday School Director) or organisations operating within the Diocese of UK Europe Africa including, where relevant;
  • On occasion, with other churches where we carry out joint events or activities. 

How long do we keep your personal data?

We will keep some records permanently if we are legally required to do so.  We may keep some other records for an extended period of time. For example, it is current best practice to keep financial records for a minimum period of 7 years to support HMRC audits.  In general, we will endeavour to keep data only for as long as we need it.  This means that we may delete it when it is no longer needed.

Your rights and your personal data 

You have the following rights with respect to your personal data:

When exercising any of the rights listed below, in order to process your request, we may need to verify your identity for your security.  In such cases, we will need you to respond with proof of your identity before you can exercise these rights.

  1. The right to access the information we hold on you
    • At any point, you can contact us to request the information we hold on you as well as why we have that information, who has access to the information and where we obtained the information from.  Once we have received your request we will respond within one month.
    • There are no fees or charges for the first request but additional requests for the same data may be subject to an administrative fee.
  1. The right to correct and update the information we hold on you
    • If the data we hold on you is out of date, incomplete or incorrect, you can inform us and your data will be updated.
  1. The right to have your information erased
    • If you feel that we should no longer be using your data or that we are illegally using your data, you can request that we erase the data we hold.
    • When we receive your request we will confirm whether the data has been deleted or the reason why it cannot be deleted (for example because we need it for our legitimate interests or regulatory purpose(s)).
  1. The right to object to the processing of your data
    • You have the right to request that we stop processing your data. Upon receiving the request we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data.  Even after you exercise your right to object, we may continue to hold your data to comply with your other rights or to bring or defend legal claims.
  1. The right to data portability
    • You have the right to request that we transfer some of your data to another controller. We will comply with your request, where it is feasible to do so, within one month of receiving your request.
  1. The right to withdraw your consent to the processing at any time for any processing of data to which consent was sought.
    • You can withdraw your consent easily by telephone, email, or by post (see Contact Details below).
  1. The right to object to the processing of personal data where applicable.
  1. The right to lodge a complaint with the Information Commissioner’s Office.

Transfer of Data Abroad

Any electronic personal data transferred to countries or territories outside the EU will only be placed on systems complying with measures giving equivalent protection of personal rights either through international agreements or contracts approved by the European Union.  Our website is also accessible from overseas so on occasion some personal data (for example a newsletter/ photograph) may be accessed from overseas.

Further processing

If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.  Where and whenever necessary, we will seek your prior consent to the new processing.

Cookies

Cookies are small pieces of information, stored in simple text files, placed on your computer by a website. Some cookies can be read by the website on your subsequent visits. The information stored in a cookie may relate to your browsing habits on the webpage, or a unique identification number so that the website can ‘remember’ you on your return visit. Other cookies are deleted when you close your browser and only relate to the working of the website. Generally speaking, cookies do not contain personal information from which you can be identified, unless you have furnished such information to the website. Cookies are placed in a number of places on this website.

When you first visit this website, you will see a message informing you about cookies. If you click the ‘Close’ button, a cookie will be set which records your preference.

This website uses Google Custom Search to provide the site’s search functionality. Google may set cookies when you use the search function. You can find Google’s privacy policy here: www.google.com/policies/privacy/.

Cookies from Google may also be set when Google Maps are displayed on this website.

Most browsers allow you to turn off cookies or to customise your settings for cookies. To find out how to do this, see the ‘Help’ menu on your browser. Please note that if you turn off cookies or change your settings, some features of may not work correctly.

Links to other websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law.

If you are concerned about how personal data is processed via this website, please do not hesitate to bring such concerns to our attention.

Glossary of technical terms used

Web Browser

The piece of software you use to read web pages. Examples are Safari, Google Chrome, Microsoft Internet Explorer, Mozilla Firefox and Opera.

IP Address

The identifying details for your computer (or your internet company’s computer), expressed in internet protocol code (for example 192.168.72.34). Every computer connected to the web has a unique IP address, although the address may not be the same every time a connection is made.

Changes to this notice

We keep this Privacy Notice under regular review and we will place any updates on this web page.http://www.stmarysindianorthodoxchurchbristol.com/privacy-and-cookies/ . This Notice was last updated in May 2018.

Contact Details

Please contact us if you have any questions about this Privacy Notice or the information we hold about you or to exercise all relevant rights, queries or complaints at:

The Vicar, St. Marys Indian Orthodox Church, Bank Road, Pilning, Bristol BS35 4JG.

Email: info@stmarysindianorthodoxchurchbristol.com

You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Comments are closed.