Why we are collecting your data?
Wealden District Council is a data controller for the purposes of the General Data Protection Regulation 2016 and Data Protection Act 2018. We collect, hold and use your personal data in order to carry out our legal obligations to you in respect of private housing, including the assessment of housing standards and the licensing of homes in multiple occupation. We will only collect the personal data from you we need in order to perform these legal obligations.
What is the legal basis for processing your personal data?
We collect and use your personal data as a task carried out in the public interest in line with the Housing Act 2004 and regulations made under that Act, and the Caravan Sites and Control of Development Act 1960. We will not be able to provide these services or comply with our legal obligations to you without the personal data we collect from you.
Who will your information be shared with?
We share your personal data internally for our own data matching exercise, using names, addresses and dates of birth. This helps us to ensure the personal data we hold across the Council is accurate and up to date and identify customers by a single customer record.
We may share your personal data with our statutory organisations (such as the Fire Service, Immigration Service and the Police) where we are required to do so in order to comply with our legal obligations or where we believe a breach in law has taken place.
We may also use and check your personal data for the investigation and prevention of fraud, anti-social behaviour and criminal activity. This may include sharing your information with police services, credit reference agencies, governmental organisations (e.g., Department for Work and Pensions and HM Revenue and Customs) and other local authorities. We also take part in the National Fraud Initiative’s anti-fraud data matching exercise for these purposes.
Where we need to disclose sensitive information such as medical details to a third party, we will do so only where we are required to do so by law, to protect an individual from harm or once we have obtained your explicit consent.
Your information may be anonymised into statistical or aggregated data in such a way as to ensure that you are not identified or identified from it. This information might be used to conduct research and analysis, including to prepare statistical research and reports.
We will not:
- Use your personal data for marketing purposes without your prior explicit consent.
- Store or send your personal data to a country outside the European Economic Area (EEA).
- Make decisions about you based on automated processing of your personal data.
How long will we hold your data for?
We keep all records for a period of 6 years from the date of completion of the service received, completion of formal action or expiry of any licence issued. We will only keep your personal data longer if we are required to do so by law.
Your rights
The General Data Protection Regulation gives you a number of rights in relation to your personal data:
- Right to access a copy of your personal data
- Right to have your personal data corrected
- Right to have your personal data deleted (“right to be forgotten”)
- Right to restrict how we use your personal data
- Right to ask us to transfer your personal data to another service provider
You can get more information about these rights in the Council’s Privacy Policy.
If you wish to exercise any of these rights please contact our Information Governance team on informationgovernance@wealden.gov.uk, in writing or by completing our online form.
If you are dissatisfied with how we have used your personal data you have a right to complain to the Information Commissioner’s Office at casework@ico.org.uk.
Identity of Data Protection Officer
If you have any questions or concerns about how your personal data is handled, you can contact our Data Protection Officer (DPO), Kristina ShawHamilton, at dataprotection@wealden.gov.uk.