The Bear Church

General Data Protection Regulation Policy

GDPR covers personal data relating to individuals. It gives individuals the right to know what information is held about them and provides a framework to ensure that personal information is handled properly. GDPR states that personal data should be ‘processed fairly and lawfully’ and ‘collected for specified, explicit and legitimate purposes’. It comes into effect on Friday 25 May 2018.

GDPR includes seven rights for individuals as follows:

·      The right to be informed – Bear Essentials, children’s work, financial reports, events.

·      The right of access – an individual can make a request relating to their data, and The Bear Church need to provide a response.

·      The right to erasure – an individual has the right to request the deletion of their data. However, The Bear Church has a right and legal obligation to keep certain data, for a set time period, relating to finance, accident and injury and safeguarding matters.

·      The right to restrict processing – so records can be stored, but not used in any way.

·      The right to data portability – if data is required to be transferred from one IT system to another in the future.

·      The right to object – individuals can object to their data being used for particular activities such as marketing or research – neither of which the Bear will use your data for.

·      The right not to be subject to automated decision-making, including profiling.

Storage and use of personal information

Financial and personal information on Gift Aid is stored in paper format in a locked office, or on a password-protected office computer.

Safeguarding information is stored in a firesafe, locked filing cabinet.

Children’s medical records are held in paper format in a locked filing cabinet and on The Bear computer, and in some cases the computers of Children’s Work Leader and Youth Leader, all of which are password protected.

The Bear does not store personal data held visually (photograph or video recording) unless written consent has been obtained. No names are stored with images on display, on the website, Facebook or Twitter.