In accordance with the General Data Protection Regulation (GDPR), this privacy statement has been issued to inform you, as a member of The Society of The Friends of St Magnus Cathedral (SCIO), of the types of personal information we process about you, the reasons for processing that information, the lawful basis that permits us to process it and how long we keep it. It also sets out your rights regarding your personal information.
Under the GDPR, we are not required to have a Data Protection Officer. The Friends’ Council is collectively responsible for ensuring that we discharge our obligations under the GDPR but has delegated to a member of the council the day-to-day responsibility for ensuring that we comply with our legal obligations.
Name of data controller
The Council of The Society of The Friends of St Magnus Cathedral
Honorary Secretary: Les Donaldson
Categories of personal data
We collect the following data:
- Full name
- Email address
- Postal address
- Contact numbers (including mobile)
- Membership Type (annual/ life)
- Date of subscription/ expiry
- Payment type (standing order/ direct debit/ manual)
- Gift aid declaration in favour of The Friends
- Whether subscribed to any newsletter
Sources of personal data
- Information provided on application form
- Information provided via website (www.stmagnus.org)
Purposes of processing
The Council of The Society of The Friends of St Magnus Cathedral (SCIO) will process your personal data for the purposes of:
- Establishing and maintaining a record of your membership
- Distribution of any communication, including newsletter, by post or email
- To remind you of membership renewal
- To take payment for any membership
- To advise Orkney Islands Council of eligibility for any tour attraction.
Who will we disclose your information to
Your information will not be disclosed to any third party.
Your information will be disclosed to:
- Royal Bank of Scotland, Head office 36 St Andrew Square, Edinburgh, EH2 2YB
- Orkney Islands Council, School Place, Kirkwall, Orkney KW15 1NY
- Any member of The Society of The Friends of St Magnus Cathedral, on request.
Legal Basis for processing your personal data
The legal basis for the collection and processing of your personal data is
- Administration: that it is necessary to fulfil the running of the charity in line with the constitution and regulations.
- Legislative: Provision of membership list to any member in accordance with GDPR requirements.
Your right to withdraw consent
- You have the right to withdraw consent to use your information at any time. If you do, it will not affect the lawfulness of any processing for which we had consent prior to your withdrawing it.
- We will remove your information stored on our database but note this may necessitate the cessation of your membership if your postal address is removed.
- You may remove your email address or simply unsubscribe from any communication.
Direct Marketing
Currently, we do not pass your information to 3rd parties for marketing. Should we wish to do so in future, we will seek your specific consent to do this.
Location of your personal data
- Membership details are stored on the Honorary Secretary/ Treasurer’s computer and are encrypted.
- Details of members wishing to use guided tours of St Magnus Cathedral will be stored on OIC systems.
- No information is stored outside the European Economic Area.
How long will we keep your personal data for
We will destroy information if you cease membership of The Friends.
Your rights in respect of your personal data
- You have the right of access to your personal data and, in some cases, to require us to restrict, erase or rectify it or to object to our processing it and the right of data portability.
- If you want to see the information we hold about you, you should contact the Honorary Secretary by letter or email (friends@stmagnus.org) with your request. We are required to provide this to you within one month.
Use of our website
We share the website www.StMagnus.org
- Our website uses cookies to track logged-in users and prevent unauthorised access to some sections. You can set your browser not to accept cookies; however, this may affect operation of the site.
- Our website may contain links to other websites or social media platforms and they have their own privacy policies and terms of conditions, which you should read.
- Our website uses Google Analytics to monitor which pages are viewed. No user-identifiable data is captured in this process.
Complaints
If you have any concerns or complaints about how we are handling your data, please do not hesitate to get in touch by emailing us at friends@stmagnus.org.