Privacy Policy
Privacy Notice
When you are asked to provide your personal data on this website you are giving your personal data to The Church of Scotland as the Data Controller.
Your Personal Data
You are being asked to supply your name, and email address to register on the website. Your IP address will also be recorded, together with your voting choices. Your contact information will be retained for the duration of the project and will not be used for any other purpose without your prior consent. Your personal data will be deleted within six weeks of the end of the project.
Purpose
The purpose of processing the personal data we ask for is to administer the Participatory Budgeting Voting project and to send you email communication service messages about the project outcomes and for no other purpose.
The legal bases for processing are that it is in the Public Interest and within the Legitimate Activities of the Church as a not for profit organisation. Your personal data will not be used for any other purpose without your permission.
If you do not wish to provide the personal data requested, we cannot administer your votes on this website. However, you may be able to cast your vote offline. Please see your local PB information for details.
Data Subjects
Personal data processing is carried out for those who wish to take part in the Participatory Budgeting process.
Sharing Your Personal Data
Your personal data will only be shared with our contracted data processors – Consul, which is maintained by COSLA as a data processor to The Church of Scotland and Twillio who will only be provided with the telephone numbers of those casting votes via telephone (including votes cast by SMS). Consul and Twillio will only process your data according to written instructions agreed by The Church of Scotland.
The purpose of the sharing is processing necessary to help us administer the voting system and for no other purpose.
It may be necessary to otherwise share your personal data in order to comply with a legal obligation or in order to protect your vital interests or those of another data subject.
Data Transfers
Your personal data will not be transferred outside the EEA.
Your Rights
You have rights under the Data Protection Act 2018 (DPA18) and the Privacy and Electronic Communication Regulations (PECR), including the right of access to your personal data. You also have the right to complain about any aspect of our processing of your personal data to the Information Commissioner’s Office (ICO). You can find full information about these rights, together with contact details for the Church of Scotland and our data Protection Officer on the Church of Scotland website at https://www.churchofscotland.org.uk/using-our-site/privacy-centre.