Website privacy notice
Your privacy matters to us and central to our workings is our commitment that we are transparent about the personal data that we collect about you, how it is used and with whom it is shared. This privacy notice applies when you use our website or any of our web services.
1. Who we are
We are the Church of Ireland Bishops’ Appeal, the Church’s Aid and Development Programme. We are located in Church of Ireland House, Church Avenue, Rathmines, Dublin 6, D06 CF67. You can contact us at this address by post or by email at firstname.lastname@example.org
Within the Representative Church Body (RCB), which is where we are based, the Data Protection Officer is Rebekah Fozzard, who can be contacted by email at: email@example.com
2. Why we process your data, the lawful basis for processing your data, and who we share it with
A. For people who view and interact with our website, we process data:
- to respond to your query when sent through our ‘Contact Us’ form
- to manage donations
The legal basis for processing your personal data is the legitimate interest in the administration and operation of our day-to-day operations.
We will retain this personal data in accordance with legislative requirements and in line with our data retention policy.
B. For people whom we liaise with on a regular basis, we process personal data:
- in order to communicate with you about your interests and wider church-related matters
- in order to receive payment from you
The legal basis for the processing of this data is processing necessary for the purposes of the legitimate interests pursued by the Bishops’ Appeal in working with and supporting you.
We share some of the personal data that you provide with our customer management system, in order to store your contact information. We may also send you emails through our email service provider.
We will retain this personal data in accordance with legislative requirements and in line with the RCB’s data retention policy.
3. Transfers of data outside the European Economic Area & United Kingdom
We do not transfer any personal data outside the European Economic Area or the United Kingdom.
4. Your rights relating to your personal data
You have the following rights under the General Data Protection Regulation, in certain circumstances, subject to certain exemptions, in relation to your personal data:
- Right to access the data: You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that data.
- Right to rectification: You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information, you may request that we update the information such that it is complete.
- Right to erasure: You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
- Right to restriction of processing or to object to processing: You have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for other purposes.
- Right to data portability: You have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.
In order to raise any of the rights set out above, please contact us at the contact details at the start of this privacy notice. If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to any withdrawal.
5. Requirement to process personal data
You may browse our website without providing us with any personal data and this will not affect your ability to view our website.
If you do not provide us with your personal data, as necessary for the purposes outlined at 2.A above, we cannot respond to your queries sent through our ‘Contact Us’ form or liaise with you via our website on any matters.
We do not use any personal data for the purpose of automated decision-making or profiling.
6. Google Analytics
Google Analytics is in use on our website to track website usage statistics. We are informed that no personal data is collected by Google Analytics, which uses first-party cookies to collect data about visitors
We implement security safeguards designed to protect your personal data. We monitor for and try to prevent security breaches. There is no guarantee that your data may not be accessed, disclosed, altered or destroyed through breach of any of our physical, technical or managerial safeguards.
8. Contact information
If you are unhappy with how we process your personal data, we ask you to contact us so that we can assess the situation. You can contact us at the details provided at the beginning of this notice. You may also lodge a complaint with a supervisory authority. The Irish supervisory authority is the Data Protection Commission, which may be contacted as follows:
21 Fitzwilliam Square South
Tel: 00 353(0) 1 765 0100