DATA PRIVACY NOTICE
MANCHESTER CHINESE CHRISTIAN CHURCH
Manchester Chinese Christian Church (MCCC) respects your privacy and is committed to protecting your personal data. This privacy statement aims to give you information on how MCCC collects and processes your personal data.
It is important that you read this privacy statement together with any other privacy notice we may provide on specific occasions when we are collecting or processing your personal data so that you are fully aware of how and why we are using your data. We encourage you to periodically review this statement to be informed of how we protect your information.
We will keep this privacy notice under regular review to ensure it represents an accurate reflection of the way we use your personal information. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
2. Who are we?
MCCC is the organisation responsible for the personal data that you share with us. MCCC is a charity registered in England and Wales with number 500562.
When we say “Manchester Chinese Christian Church”, “MCCC”, “us”, “our” or “we”, this is who we are referring to. MCCC is the data controller, meaning we decide how your personal data is processed and for what purposes. We have appointed a data protection lead to oversee all aspects of data protection – please see below for contact details.
3. How do we process your personal data?
MCCC might collect personal data from you when you interact with us, use our website, register for an event, donate to the church, apply for a role as a volunteer or staff member or join our social media groups, etc. Sometimes we may receive your personal data from your family member, next of kin, parents/guardians or other third parties.
We use your personal data for the following purposes:-
• To administer membership records;
• To manage our employees and volunteers;
• To provide pastoral care to you and/or members;
• To administer and communicate with you regarding courses, events, activities and services running at MCCC;
• To manage our social media accounts;
• To administer donations and other financial transactions;
• To enable us to provide a voluntary service for your benefit and/or for the benefit of the public;
• To fundraise and promote the interests of the charity;
• To make suggestions and recommendations to you about goods or services that may be of interest to you;
• To collect feedback from you to improve our service; and
• To comply with a legal or regulatory obligation.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal grounds that allow us to do so.
In general, we do not process nor store any special categories of personal data about you (this includes your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, your health data, as well as genetic and biometric data). However, on occasions, for example through a direct interaction or when you enroll in our activities or apply for our membership, voluntary and paid positions, we may be obliged to request special categories of personal data from you such as:
• Race or ethnic origin;
• Religious or philosophical beliefs;
• Sex life or sexual orientation;
Processing these types of special categories of personal data is permitted under the General Data Protection Regulations where data subjects have given explicit consent and, or, where it is carried out by a religious entity in the course of its legitimate activity. If you apply for certain positions in our church (e.g. Sunday School teachers working with children), we will be obliged to process data about your right to work and criminal convictions and offences.
In terms of data security, we have put in place appropriate measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those church workers, employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
4. What are the legal basis for processing your personal data?
- Your consent – This applies where you explicitly consent to us using your personal data to provide you with a specific service, for example, so that we can keep you informed about news, events, activities and services. Manchester Chinese Christian Church may rely on consent from a person holding parental responsibility (parent/guardian) in order to process children’s personal data. Usually, children are able to give their own consent at age 13.
- Our legitimate interests – This applies where we use your personal data in the running of our activities in ways that you would normally expect us to, for example, holding onto your dietary requirement details until the end of a retreat that you signed up to.
- Performance of a contract – This applies where we need to process your personal data in order to fulfill a contract with you or to take steps to enter into a contract with you.
- Legal obligation – This applies where processing is necessary for legal reasons, for example, employees’ personal data is held for social security or social protection law.
- Public task – This applies where we use your personal data to carry out a task in the public interest or in the exercise of official authority vested in the data controller, for example, taking your details in order to administer weddings or funerals.
5. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with church members that require it in order to provide a service to you, other church members or for purposes connected with the church.
We will only share your data with third parties outside of MCCC with your consent. Where we share your data with a third party, we require them to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
This website may include links to third-party websites and applications, such as links to external conferences, which may share or collect your data when you access them. We have no control over these third-party websites and are not responsible for their privacy statements. Please make sure to read the privacy notice or policy of any website you visit.
6. How long do we keep your personal data?
We will only keep data for as long as is necessary in order to fulfil the purposes we collected it for. To determine the retention period of your personal data, we consider various criteria to make sure that we do not keep your data for longer than reasonably necessary or appropriate. These criteria include the amount, nature and sensitivity of your data, the purpose for which we hold your personal data, our legitimate interests, our legal obligations, whether our relationship with you is ongoing and whether you are actively participating or engaging with us. You may request to see the details of retention periods for different aspects of your personal data by contacting our data protection lead (see below). Data no longer needed will be deleted or be anonymised so that you can no longer be identified from it.
7. Your rights
With respect to your personal data, the following rights are available to you. Not all rights are absolute rights, meaning that certain criteria must be met before they may be exercised. These criteria depend on the circumstances relating to the processing.
• The right to be informed of the collection and use of your data, to receive all relevant privacy information;
• The right to request a copy of the personal data held in relation to you;
• The right to request that Manchester Chinese Christian Church corrects any personal data if it is found to be inaccurate or out-of-date;
• The right to request your personal data be erased where it is no longer necessary for Manchester Chinese Christian Church to keep it;
• The right to withdraw your consent to the processing at any time;
• The right to request that Manchester Chinese Christian Church provide you with your personal data in a useful format and where possible, to transmit that data directly to another data controller;
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction be placed on further processing;
• The right to object to the processing of personal data; and
• The right to lodge a complaint with the Information Commissioners Office (www.ico.org.uk), the UK supervisory authority for data protection issues.
8. Contact Details
To exercise all relevant rights, queries or complaints, please contact the data protection officer by writing to Manchester Chinese Christian Church at 100, Yarburgh Street, Manchester, M16 7EH or via email at email@example.com. Note that we may require proof of your identity and full details of your request before we process any requests. We attempt to review and respond to all requests, queries and complaints as soon as reasonably possible and no later than 20 working days of receiving the request unless there is a good reason for the delay. If we cannot complete your request on time or at all we will explain the reasons for this to you to the extent that we lawfully can.
Last updated: 25/11/2021