Privacy Policy

CHRISTIAN SCIENCE SOCIETY, NORTHAMPTON

DATA PRIVACY POLICY

Personal data relates to a living individual who can be identified from it (the ‘data subject’.) The processing of personal data (including use) is governed by the General Data Protection Regulation (“GDPR”) which will shortly be incorporated in a new Data Protection Act. The Society has a lawful basis for keeping and using the personal data of its members, as they have shown their consent by the affirmative action of joining the Society and there is a contractual relationship. Holding the personal data of non-members on a mailing list serves the legitimate interests of the Society in publicising its activities and seeking new members. The Society will therefore continue to hold and use the personal data of all individuals on its mailing list, unless they indicate a wish to be removed from it. It will also hold the personal data of individuals who apply for membership or agree to be on the mailing list in future. Personal data of individuals is used –

to administer membership records;
to maintain financial records (including the processing of gift aid applications);
to inform people in the community of events and activities of the church/society and of related activities in the Christian Science movement and to respond to inquirers;
generally to promote the interests of the Society.

The Society complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure; and by ensuring that appropriate technical measures are in place to protect personal data. All personal data will be treated as strictly confidential and will only be shared with other members of the Society in order to carry out a service to other members or for purposes connected with its activities. It will not be shared with third parties except with the data subject’s consent; it will not be sold, and it will not be used for marketing. Membership and mailing list data will be retained while it is still current; gift aid declarations and associated paperwork will be retained for 7 years after the tax year to which they relate. Other financial records will be retained for 6 years after the transaction they relate to. If the Society wishes to use personal data for a purpose not covered by this Data Privacy Policy, a new notice will be issued explaining the use, setting out the purpose and processing conditions and seeking the data subject’s consent. Data subjects have the right –

to request a copy of any personal data which the Society holds about them;
to request the Society to correct any personal data that is inaccurate or out of date;
to request that personal data be erased if it is no longer necessary for the Society to retain it;
to withdraw consent to the processing at any time;
to request the data controller to provide them with their personal data and , if they wish, send it to another data controller;
if there is a dispute about the accuracy or processing of personal data, to request a restriction be placed on further processing;
to object to the processing of personal data;
to lodge a complaint with the Information Commissioner’s Office; see the website at www.ico.org.uk.

The Data Controller is the membership acting as the Board. This policy will be reviewed every 2 years. Adopted 14^th May 2018 John F Wilson, President Eleanor Winyard, Clerk

CHRISTIAN SCIENCE SOCIETY, NORTHAMPTON

PERSONAL DATA PRIVACY NOTICE

From 25th May 2018 the General Data Protection Regulation (GDPR) will govern the holding of personal information. We have a Data Privacy Policy that sets out how we handle your data and explains your rights under the law. This is published on our website at www.csnorthants.org, or is available on request. Please let us know if your contact details change.