|
Colne Avenue Baptist Church |
|
Our Data Privacy Policy
This policy details the GDPR responsibilities and data privacy policy relating to the Colne Avenue Baptist Church website (colneavenue.com).
Colne Avenue Baptist Church collects a range of personal data relating to visitors to the website. This data is available to limited people within the church, on a need to know basis only. The individuals with access have individual passwords which are fully encrypted and not available to anybody else or visible to any of the tean, including the web team. Name of individuals are collected as required for use within the church. Upon somebody signing up to the website, other information is collected, as input by the people concerned only. This information includes:
- First name and last name
- Date of birth (if submitted in the log in process)
- Address, e-mail address and telephone number
- Membership status of Colne Avenue Baptist Church
This information is stored in a secure database.
Colne Avenue Baptist Church has an complete commitment to:
- Comply with both the law and good practice
- Respect individuals rights including:
- - The right of access
- - The right of rectification
- - The right to object
- - The right to suspend protest
- - The right of erasure
- Be open and honest with individuals whose data is held
- Notify the relevant data protection authorities voluntarily, even if this is not required
Overall responsibility for ensuring data protection and overall compliance with the relevant standards and legislation rests with the Pastor and Elders of Colne Avenue Baptist Church. The action of such responsibility may be divulged to other relevant people within the church.
Colne Avenue Baptist Church has a zero-tolerance policy towards inappropriate access to data stored. Any such access will result in the individual concerned being prohibited from having access for a minimum period of 10 years. Inappropriate access may involve alerting the police to such access.
Colne Avenue Baptist Church employs access monitoring systems to ensure that access is not being abused and can be tracked back to a specific individual.
Colne Avenue Baptist Church employs standard SSL encryption to safeguard data.
Passwords are stored by Colne Avenue Baptist Church in a fully encrypted state and are not accessible. Should password resets be required these may only be undertaken by specific people with the relevant website access rights.
The main specific risks to the security of data are:
- Phishing attacks to gain access to the database
- Access by means of trojan or keylogging programmes on users systems
Mitigation of these risks is by encouraging users to ensure they adhere to good security practices on their personal systems.
Anyone may request an update of their retained information by making a request in writing to [email protected]. Colne Avenue Baptist Church will not charge any fee for providing data for requests under the Right of Access.
Notwithstanding the Colne Avenue Baptist Church claim of legitimate interest, members may at their discretion object to this claim and/or request that the church ceases processing of a persons personal data. These two rights are known as the Right to Object, and the Right to Restrict Processing.
Members must be aware that if they choose to exercise either of these rights Colne Avenue Baptist Church is obliged to remove the data of the person in order to comply with their wishes and they will lose opportunity to be provided with information presented and produced via website use. Requests for deletion of personal data under the Right of Erasure are the responsibility of the pastor and elders of Colne Avenue Baptist Church and are usually acted upon by the Web Team. Such requests are required to be complied with within one calendar month of the request being received. Right of erasure requests must be in writing. People are requested to make their written request via [email protected]. Where the person managing the erasure procedure does not know the individual personally there should be provision for checking their identity before deleting any information. Colne Avenue Baptist Church will not charge any fee for deleting data under the Right of Erasure. Colne Avenue Baptist Church shall evaluate all requests for erasure. The church reserves the right to retain any data that it believes is in its legitimate interest to do so where law permits, or that is required to establish, exercise, or defend any legal claims.