DATA PRIVACY NOTICE
MANCHESTER CHINESE CHRISTIAN CHURCH
Manchester Chinese Christian Church (MCCC) respects your privacy and is committed to protecting your personal data. This privacy statement aims to give you information on how MCCC collects and processes your personal data.
It is important that you read this privacy statement together with any other privacy notice we may provide on specific occasions when we are collecting or processing your personal data so that you are fully aware of how and why we are using your data. We encourage you to periodically review this statement to be informed of how we protect your information.
We will keep this privacy notice under regular review to ensure it represents an accurate reflection of the way we use your personal information. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
2. Who are we?
MCCC is the organisation responsible for the personal data that you share with us. MCCC is a charity registered in England and Wales with number 500562.
When we say “Manchester Chinese Christian Church”, “MCCC”, “us”, “our” or “we”, this is who we are referring to. MCCC is the data controller, meaning we decide how your personal data is processed and for what purposes. We have appointed a data protection lead to oversee all aspects of data protection – please see below for contact details.
3. How do we process your personal data?
MCCC might collect personal data from you when you interact with us, use our website, register for an event, donate to the church, apply for a role as a volunteer or staff member or join our social media groups, etc. Sometimes we may receive your personal data from your family member, next of kin, parents/guardians or other third parties.
We use your personal data for the following purposes:-
- To administer membership records;
- To manage our employees and volunteers;
- To provide pastoral care to you and/or members;
- To communicate with you and/or our members;
- To administer and communicate with you regarding courses, events, activities and services running at MCCC;
- To manage our social media accounts;
- To administer donations and other financial transactions;
- To enable us to provide a voluntary service for your benefit and/or for the benefit of the public;
- To fundraise and promote the interests of the charity; and
- To comply with a legal or regulatory obligation.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal grounds that allow us to do so.
In terms of data security, we have put in place appropriate measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
4. What are the legal basis for processing your personal data?
- Your consent – This applies where you explicitly consent to us using your personal data to provide you with a specific service, for example, so that we can keep you informed about news, events, activities and services. Manchester Chinese Christian Church may rely on consent from a person holding parental responsibility (parent/guardian) in order to process children’s personal data. Usually, children are able to give their own consent at age 13.
- Our legitimate interests – This applies where we use your personal data in the running of our activities in ways that you would normally expect us to, for example, holding onto your dietary requirement details until the end of a retreat that you signed up to.
- Performance of a contract – This applies where we need to process your personal data in order to fulfill a contract with you or to take steps to enter into a contract with you.
- Legal obligation – This applies where processing is necessary for legal reasons, for example, employees’ personal data is held for social security or social protection law.
- Protect vital interests of individual – Processing is necessary to protect the vital interests of a data subject or another individual where the data subject is physically or legally incapable of giving consent.
- Public task – This applies where we use your personal data to carry out a task in the public interest or in the exercise of official authority vested in the data controller, for example, taking your details in order to administer weddings or funerals.
5. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with church members that require it in order to provide a service to you, other church members or for purposes connected with the church.
We will notify you if we need to share your data with third parties outside of MCCC. Where we share your data with a third party, we require them to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
6. How long do we keep your personal data?
We will only keep data for as long as is necessary in order to fulfill the purposes we collected it for. To determine the retention period of your personal data, we consider various criteria to make sure that we do not keep your data for longer than reasonably necessary or appropriate. These criteria include the amount, nature and sensitivity of your data, the purpose for which we hold your personal data, our legitimate interests, our legal obligations, whether our relationship with you is ongoing and whether you are actively participating or engaging with us. You may request to see the details of retention periods for different aspects of your personal data by contacting our data protection lead (see below). Data no longer needed will be deleted or be anonymised so that you can no longer be identified from it.
7. Your rights
With respect to your personal data, the following rights are available to you. Not all rights are absolute rights, meaning that some require certain criteria to be met before they may be exercised. These criteria depend on the circumstances relating to the processing.
- The right to be informed of the collection and use of your data, to receive all relevant privacy information;
- The right to request a copy of the personal data held in relation to you;
- The right to request that Manchester Chinese Christian Church corrects any personal data if it is found to be inaccurate or out-of-date;
- The right to request your personal data be erased where it is no longer necessary for Manchester Chinese Christian Church to keep it;
- The right to withdraw your consent to the processing at any time;
- The right to request that Manchester Chinese Christian Church provide you with your personal data in a useful format and where possible, to transmit that data directly to another data controller;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction be placed on further processing;
- The right to object to the processing of personal data; and
- The right to lodge a complaint with the Information Commissioners Office (www.ico.org.uk), the UK supervisory authority for data protection issues
8. Contact Details
To exercise all relevant rights, queries or complaints, please contact the data protection officer by writing to Manchester Chinese Christian Church at 100, Yarburgh Street, Manchester, M16 7EH or via email at firstname.lastname@example.org. Note that we may require proof of your identity and full details of your request before we process any requests. We attempt to review and respond to all requests, queries and complaints as soon as reasonably possible and no later than 30 days of receiving the request unless there is a good reason for the delay. If we cannot complete your request on time or at all we will explain the reasons for this to you to the extent that we lawfully can.
Last updated 8 April 2019