Online Faculty System - Privacy Notice
This privacy notice is provided by the Cathedral and Church Buildings division of the Church of England to explain what to expect when the we collect and process your personal information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
The data controller is:
The Archbishops' Council;
Great Smith Street
For further information on the Archbishops' Council please go to:
- Why we collect and use your personal data
Personal information is collected for the following purpose/s:
- Promoting and supporting the mission and ministry of the Church of England
- Administering and supporting the governance of the Church of England
- Administering and supporting the parliamentary duties of the Church of England
- Maintaining our own accounts and records
- The categories of personal data we collect:
The information we process for these purposes is:
- Email address
- Telephone number
We also process “special categories” of information that may include:
- The lawful basis for using your information
We collect and use personal data under the following lawful bases:
- Legal obligation – we need to process your information to comply with the law.
- Public task – we need to process your information to undertake a duty or task in the public interest.
- Consent – we need your permission to use your information.
- Where we require consent to use your information, we will make it clear when we ask for consent and explain how to go about withdrawing your consent.
Special categories & criminal information
- Substantial public interest (protecting the public against dishonesty etc.) where it is necessary for the exercise of a “protective function”. We have an appropriate policy document in place.
- Legal claims – we may need to process your information where it necessary to do so for the establishment, exercise or defense of legal claims or in connection with judicial process.
- Archiving - we may process your information for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes including the organisation, preservation of, and controlled access to, segments of the Church’s history.
- Who we collect from or share your information with:
We collected your information through your registration to the system
We will not share your data with any other third parties except other registered users to assist in the processing of faculty applications. This will be to confirm individual user roles; contacting users relating to faculty applications; and managing users’ online accounts.
- How long do we keep your information?
We will keep your data for 25 years.
- Your rights
You have the following rights regarding your personal data:
- The right to be informed about any data we hold about you;
- The right to request a copy of your personal data which we hold about you;
- The right to request that we correct any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for us to retain such data;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to object to the processing of your personal data
- The right to obtain and reuse your personal data to move, copy or transfer it from one IT system to another.
To exercise these rights, please contact the Data Protection Team using the contact information provided below. The National Church Institutions (NCIs) wider data protection policy is available in the link below
The NCIs Individual Rights Policy is available on request.
- Complaints or concerns
If you have any queries regarding this processing activity, please contact, in the first instance, Dr James Miles – firstname.lastname@example.org
If you have any concerns or queries about how the Cathedral and Church Buildings division handle your personal data, please contact the Data Protection Officer at:
email@example.com or Data Protection Officer, Church of England Record Centre, 15 Galleywall Road, London, SE16 3PB, Tel: 020 7898 1030.
You have the right to make a complaint at any time to the Information Commissioner at https://ico.org.uk/concerns/ or Information Commissioner's Office, Wycliffe House, Water Lane Wilmslow Cheshire SK9 5AF, Tel: 0303 123 1113 (local rate).
The following data is automatically logged for each request:
- The name or network address of the computer making the request. Note that under some (but not all) circumstances it may be possible to infer from this the identity of the person making the request. Note also that the data recorded may be that of a web proxy rather than that of the originating client.
- The date and time of connection.
- The HTTP request, which contains the identification of the document requested.
- The status code of the request (success or failure etc.).
- The number of data bytes sent in response.
- The contents of the HTTP Referrer header supplied by the browser.
- The content of the HTTP User-Agent header supplied by the browser.