Data Privacy Notice – The General Conference of the New Church

Our contact details
Name: Data Protection Officer
Address: Purley Chase Centre, Purley Chase Lane, CV9 2RQ
Website: www.generalconference.org.uk/
Phone: 01827 712 370
E-mail: dataaccess@generalconference.org.uk

The type of personal information we collect
We currently collect and process the following information:
• Image Data includes photographs taken of you where it is possible to identify you and images of you caught by any security cameras at Church premises.
• Contact Data includes your home address, email address and telephone numbers.
• Employment Data includes employment history, training records, pension information, details about next of kin and other details relating to your employment by the Church.
• Financial Data includes your bank account details.
• Marketing and Communications Data includes your preferences in receiving information from us.
• Member and Group Data includes details of your membership of the Church and any offices held.
• Parental Contact Data includes details of parents (e.g. on parent contact forms).
• Tax Data includes national insurance numbers and other information that may be required by HMRC relating to gift aid donations and other tax related payments and receipts.
• Transaction Data includes details about payments to and from you and other details of your room hire, licence agreement or rental agreements that you enter into with us relating to our premises

How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• To operate the General Conference of the New Church web sites and deliver the services requested.
• To inform you of news, events, activities or services.
• To fundraise and further the objectives of the Church.
• To administer Church membership records.
• To manage our employees and volunteers.
• To maintain our financial accounts.

We use the information that you have given us in order to:
• Pay employees.
• Reimburse volunteers.
• Process gift aid
• Provide services such as accommodation and meals.
• Carry out Disclosures and Barring Service (DBS) checks.
We may share this information with government bodies (e.g. HMRC) and payroll companies.

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting the data protection officer (details above)
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a legitimate interest.

How we store your personal information
Your information is securely stored.
We keep members’ name and contact details for 10 years after membership has ended.
We keep data for employees for 6 years after employment has ended.
We will then dispose of your information by deleting it from the computer on which is was stored or securely destroying paper copies.

Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information that you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact the data protection officer (details above) if you wish to make a request.

How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at (details above).
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk