14. Data subjects’ rights
14.1 We will process personal data in line with data subjects’ rights, including their right to:
a) request access to any of their personal data held by us (known as a Subject Access Request);
b) ask to have inaccurate personal data changed;
c) restrict processing, in certain circumstances;
d) object to processing, in certain circumstances, including preventing the use of their data for direct marketing;
e) data portability, which means to receive their data, or some of their data, in a format that can be easily used by another person (including the data subject themselves) or organisation;
f) not be subject to automated decisions, in certain circumstances; and
g) withdraw consent when we are relying on consent to process their data.
14.2 If a colleague receives any request from a data subject that relates or could relate to their data protection rights, this will be forwarded to our Church Secretary immediately.
14.3 We will act on all valid requests as soon as possible, and at the latest within one calendar month, unless we have reason to, and can lawfully extend the timescale. This can be extended by up to two months in some circumstances.
14.4 All data subjects’ rights are provided free of charge.
14.5 Any information provided to data subjects will be concise and transparent, using clear and plain language.
15. Direct marketing
15.1 We will comply with the rules set out in the GDPR, the Privacy and Electronic Communications Regulations (PECR) and any laws which may amend or replace the regulations around direct marketing. This includes, but is not limited to, when we make contact with data subjects by post, email, text message, social media messaging, telephone (both live and recorded calls) and fax.
Direct marketing means the communication (by any means) of any advertising or marketing material which is directed, or addressed, to individuals. “Marketing” does not need to be selling anything, or be advertising a commercial product. It includes contact made by organisations to individuals for the purposes of promoting the organisation’s aims.
15.2 Any direct marketing material that we send will identify Spurgeon Baptist Church as the sender and will describe how people can object to receiving similar communications in the future. If a data subject exercises their right to object to direct marketing we will stop the direct marketing as soon as possible.