Why we are collecting your personal data?
Wealden District Council is a data controller for the purposes of the General Data Protection Regulation 2016 and Data Protection Act 2018. We collect, hold and use your personal data in order to process and respond to your requests for information. We will only collect the personal data from you that we need in order to do this.
What is the legal basis for processing your personal data?
We process your personal data as a task carried out in the public interest and in accordance with the Freedom of Information Act 2000 and the Environmental Information Regulations 2004.
Who will your personal data be shared with?
We share your personal data internally for our own data matching exercise, using names and addresses. This helps us to ensure the personal data we hold is accurate and up to date and identify customers by a single customer record.
We share your personal data with other Council departments where this is necessary to respond to your request. We may also share information with the Information Commissioners Office (‘ICO’) where you have referred a complaint to them. We may also disclose your personal data to third parties where we are required to do so by law.
We may also use and check your personal data for the investigation and prevention of fraud, anti-social behaviour and criminal activity. This may include sharing your information with police services, credit reference agencies, governmental organisations (e.g., Department for Work and Pensions and HM Revenue and Customs) and other local authorities. We also take part in the National Fraud Initiative’s anti-fraud data matching exercise for these purposes.
We will not:
- Use your personal data for marketing purposes without your prior explicit consent.
- Store or send your personal data to a country outside the European Economic Area (EEA).
- Make decisions about you based on automated processing of your personal data.
How long will we hold your personal data for?
We keep all records relating to a request for information for a period of
one year from the date the request was responded to, unless there is a
specific reason for the data to be retained beyond this period.
If a complaint is referred to the ICO we will keep the data relating to the
request for a period six years from the date the complaint is resolved.
We will only keep your personal data longer if we are required to do so
by law
Your rights
The General Data Protection Regulation gives you a number of rights in
relation to your personal data:
- Right to access a copy of your personal data
- Right to have your personal data corrected
- Right to have your personal data deleted (“right to be forgotten”)
- Right to restrict how we use your personal data
- Right to ask us to transfer your personal data to another service provider
You can get more information about these rights in the Council’s Privacy Policy.
If you wish to exercise any of these rights please contact our Information Governance team on informationgovernance@wealden.gov.uk, in writing or by completing our online form.
If you are dissatisfied with how we have used your personal data you have a right to complain to the Information Commissioner’s Office at casework@ico.org.uk.
Identity of Data Protection Officer
If you have any questions or concerns about how your personal data is handled, you can contact our Data Protection Officer (DPO), Kristina ShawHamilton, at dataprotection@wealden.gov.uk.