St. George’s Madrid

​

1. Your Personal Data – What Is It?
   
   Personal data refers to any information relating to a living individual who can be identified directly or indirectly. Identification may occur through the data alone or in combination with other information in the possession of the data controller. The processing of personal data is governed by the General Data Protection Regulation (GDPR).
    

2. Who Are We?
   
   The Church Council of St. George’s Madrid is the data controller. This means it determines how your personal data is processed and the purposes for which it is used. Contact details can be found at the end of this notice.
    

3. How Do We Process Your Personal Data?
   
   St. George’s Madrid complies with GDPR by:
   
   • Keeping personal data up to date.
   • Storing and destroying it securely.
   • Protecting it from loss, misuse, unauthorized access, or disclosure.
   • Ensuring appropriate technical measures are in place to protect personal data.
   • We use your personal data for the following purposes:
   
          ○ Administering membership records.
          ○ Maintaining contact with visitors and newcomers upon request.
          ○ Managing our employees and volunteers.
          ○ Maintaining accounts and records.
          ○ Informing you of news, events, activities, and services at St. George’s Madrid via email or newsletter.
    

4. What Is the Legal Basis for Processing Your Personal Data?
   
   We require your explicit consent to inform you about news, events, and activities. Operational communication related to duty rosters, meetings, or schedules does not require consent.
    

5. Sharing Your Personal Data
   
   Your personal data will be treated as strictly confidential and will only be shared with other church members to carry out services or activities connected with the church. We will not share your data with third parties outside the church without your explicit consent.
    

6. How Long Do We Keep Your Personal Data?
   
   We retain your personal data only as long as necessary for legal, administrative, or operational purposes. For example:
   
   • Membership records are kept while current.
   • Significant records, such as baptisms, marriages, and funerals, may be retained permanently for archival purposes.
    

7. Your Rights and Your Personal Data
   
   Unless subject to an exemption under GDPR, you have the right to:
   
   •  Access your personal data.
   •  Request correction of inaccurate or outdated data.
   •  Request erasure of your personal data where no longer necessary.
   •  Withdraw consent for processing at any time.
   •  Request data portability, i.e., receive your data in a structured format for transfer.
   
   If you have questions or concerns, you can contact the Spanish Information Commissioners Office.
    

8. Further Processing
   
   If we wish to use your personal data for a new purpose not covered by this notice, we will inform you of this new use and seek your consent where necessary.
    

9. Contact Details
   
   If you have queries about how we handle your data at St. George’s Madrid, please contact us at:
   
   Email: info@stgeorgesmadrid.com 
   
   Tel: 915 76 51 09
   
   Alternatively, you may contact the Spanish Information Commissioners Office at www.agpd.es or call +34 901 100 099.