COVID-19 Privacy Notice for Visitors to St Bride's Church Building
COVID-19 Privacy Notice, Online List of Clergy, Staff and Visitors to St Bride's Church Building
This notice explains how information about you will be used temporarily by the Parochial Church Council of St Bride’s during the Covid-19 pandemic crisis so we can take your booking and at the same time put in place a list of clergy, staff and visitors to the church building/s, as requested by the Government in support of NHS Test and Trace.
1. Who we are
St. Bride's Church are the data controller (contact details in section 7. below). This means we decide how your personal data is used and why.
2. The information we collect about you and why we need it
We collect your data in order to process your booking of a visit to St Bride’s as we need to limit numbers within the building.
However, we are also collecting your data on entrance for the purpose of supporting NHS Test and Trace, as requested by the Government, unless you have and use the NHS COVID-19 App meaning we are not the collectors of your data and you should therefore check their privacy notice for use of your data.
Although we may have your contact details already the Covid-19 pandemic has created a unique situation and additional reasons for us to collect the name and contact telephone number of all clergy, staff and visitors who use/visit our church building/s in order to support NHS Test and Trace.
This is specifically in relation to contact tracing, which is the process of identifying, assessing, and managing people who have been exposed to a disease to prevent onward transmission and the investigation of local outbreaks.
In summary, Test and Trace:
- provides testing for anyone who has symptoms of coronavirus to find out if they have the virus;
- gets in touch with anyone who has had a positive test result to help them share information about any close recent contacts they have had; and
- alerts those contacts, where necessary, and notifies them they need to self-isolate to help stop the spread of the virus.
This is voluntary, and you can opt out of letting us share your details with NHS Test and Trace. We will still accept your booking.
3. Lawful basis
We will use your information lawfully, as explained below:
Consent – <span style="font-size: 0.875rem;">We need your consent in order to collect your name and contact details to process your booking. You will give us your consent by providing your details by completing the on-line booking.</span>
You will be giving consent on allowing the taking of your details at entrance to the building for filling in our Test and Trace form.
Explicit consent – We need your explicit consent to collect your data on the basis that you may have revealed a religious belief by using/visiting our church building/s. You will give us your explicit consent by completing the on-line booking and opting in/indicating “Yes” where requested, or “No” if you do not want us to share you data with Test and Trace.
You can withdraw your consent at any time after giving your details by letting us know you no longer want us to keep or share your personal data for the purpose of Test and Trace, however, once we have given your details to Test and Trace we will no longer be able to prevent processing. To contact us, please see our contact details at 7. below. We will continue to process your booking data, unless told otherwise.
4. Sharing your data
Personal data that is collected for bookings will be used only for organising for that coming Sunday’s service.. It will not be used for other purposes outside of those specified in this Privacy Notice.
Personal data that is collected for NHS Test and Trace will not be used for other purposes outside of those specified in this Privacy Notice.
5. Data Retention
We will keep your name and contact details until the week after the Sunday you booked for and will dispose of it after this period.
We will keep your name and contact details for 21 days for NHS Test and Trace and will dispose of it after this period.
6. Your Legal Rights
Unless subject to an exemption under the GDPR or DPA 2018, you have the following rights with respect to your personal data: -
- The right to be informed about any data we hold about you;
- The right to request a copy of your personal data which we hold about you;
- The right to withdraw your consent at any time, while the church body still has your data;
- The right to request that we correct any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for us to retain such data;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to obtain and reuse your personal data to move, copy or transfer it from one IT system to another if data is held online.
7. Complaints and queries
If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details set out below.
Phone 07434870934 or emailing [email protected]
If you do not feel that your complaint has been dealt with appropriately, please contact Rev’d Peter Matthews on 07590698333 or email [email protected]
You also have the right to lodge a complaint with the Information Commissioners Office. You can contact the Information Commissioners Office on 0303 123 1113 or online: https://ico.org.uk/make-a-complaint/your-personal-information-concerns/ or https://ico.org.uk/global/contact-us/