This statement explains how Elvington Church processes personal data in relation to the email list. This privacy statement is provided in fulfilment of the obligations of the GDPR for the collection and processing of personal information by Elvington Church PCC.
The purpose of the processing is to keep the members of the church updated with events in the church. The lawful basis for the processing is the legitimate interest of the controller, which is to serving the congregation and keeping them informed. The retention period for the data is 5 years, or until you remove yourself from the list.
The types of personal data that we may hold and process in this context is: your email address. (The church may hold other information about you, for example in parish records, which are covered by other policies and various exemptions and is not in the scope of this privacy information.)
We will not share your personal information with anyone. We will not transfer it outside of the EU.You are under no statutory or contractual obligation to provide the personal data. There is no automated decision-making or profiling based on the data.
You have various rights provided by the GDPR, including the right to be informed that we are processing your personal data (this statement), the right to access the data, the right to correct it, erase it (in certain circumstances), to restrict further processing and to make a complaint to a supervising authority.
You can contact the PCC through the contact form on this website, or by writing to the rector at The Rectory, Church Lane, Wheldrake, York, YO19 6AW
Version 1 - 2018-05-23 - IB