Privacy Notice

This privacy notice is provided by the Data Services department to explain what to expect when we collect and process your personal information in accordance with the UK GDPR when you use the Online Parish Returns System (OPRS)..

The Online Parish Returns System is an online tool allowing churches and parishes to submit their annual statistical returns online. Furthermore, it allows parishes, churches and dioceses to extract and access data and reports relating to their own church, parish and/or diocese.

Data controller(s)

The data controller is:

Church of England Central Services

Church House
Great Smith Street
London
SW1P 3AZ

For further information on the Church of England Central Services please go to:

[https://www.churchofengland.org/about/leadership-and-governance/national-church-institutions]

1. Why we collect and use your personal data

Personal information is collected for the following purpose/s:

  • To create accounts to manage security on the Church of England’s Online Parish Returns System

  • Manage levels of access to maintain security of the system

  • Contact users to manage support

  • To provide email addresses of users to diocesan offices so they can support church and parish level users.

  • To enable diocesan admin users to manage user accounts and statistical returns

  • Link user to a specific church, parish or diocese to xxxx?

2. The categories of personal data we collect:

The information we process for these purposes is:

  • Name

  • Email address (personal or work)

  • Church or parish name

3. The lawful basis for using your information

We collect and use personal data in accordance with Article 6 of the GDPR, under the following lawful bases:

Legitimate interests: The processing is necessary for the legitimate interests of the data controller, data subject and third parties (e.g. diocesan office)

[Legitimate Interests Assessment

Because we consider that we have a legitimate interest in processing your personal data, we have undertaken a Legitimate Interests Assessment which sets out why we consider such processing is justified.

We have a specific purpose with a defined benefit
The processing is necessary to achieve the defined benefit.
The processing legitimately overrides the interests of the data subject and any risks to their rights or freedoms.

For a copy of the full Legitimate Interests Assessment, please contact xxxxx whose contact details are set out in section xx below.]

4. Who we collect from:

  • You, when you create an account on the OPRS

Dioceses, when they set up accounts for users

5. Who do we share your information with?

  • We share individual user account information with diocesan admin users

  • We share data with Z/Yen which hosts the data on behalf of the Church of England Central Services

6. How long do we keep your information?

We will keep your data for as long as users need access to the Church of England's Online Parish Returns System. Users will be reviewed every 6 months and inactive users (those who have not accessed the system for more than two years) will be deleted.

7. Your rights

You have the following rights regarding your personal data:

  • The right to be informed about any data we hold about you;

  • The right to request a copy of your personal data which we hold about you;

  • The right to withdraw your consent at any time (if applicable)

  • The right to request that we correct any personal data if it is found to be inaccurate or out of date;

  • The right to request your personal data is erased where it is no longer necessary for us to retain such data;

  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;

  • The right to object to the processing of your personal data (if applicable)

  • The right to obtain and reuse your personal data to move, copy or transfer it from one IT system to another (if applicable).

To exercise these rights, please contact the Data Protection Team using the contact information provided below.

8. Complaints or concerns

If you have any queries regarding this processing activity, please contact, in the first instance, Simeon Christian (simeon.christian@churchofengland.org)

If you have any concerns or queries about how Data Services handle your personal data, please contact the Data Protection Officer at:gdpr@churchofengland.org

or online at: National Church Institutions data protection | The Church of England or Tel: 020 7898 1114.

You have the right to make a complaint at any time to the Information Commissioner’s Office online at: Data protection and personal information complaints tool | ICO, or by phone on 0303 123 1113 (local rate).