St Mawgan-in-Pydar Parish Council

GENERAL PRIVACY NOTICE

Your personal data – what is it?

“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address).
Identification can be directly using the data itself or by combining it with other information which helps to identify a living individual.
The processing of personal data is governed by legislation relating to personal data which applies in the United Kingdom including the General Data Protection Regulation (the “GDPR”) and other legislation such as the Human Rights Act.

Who are we?

This Privacy Notice is provided to you by the St Mawgan-in-Pydar Parish Council which is the data controller for your data.

Other data controllers the council works with:

local authorities
community groups
other not for profit entities
contractors

We may need to share your personal data we hold with them so that they can carry out their responsibilities to the council.
If we and the other data controllers are processing your data jointly for the same purposes, we may be “joint data controllers”.

Names, and titles;
Contact details such as telephone numbers, addresses, and email addresses;
Information such as gender, age, marital status, nationality, education/work history, qualifications, hobbies, family composition, and dependants where relevant;
Financial identifiers such as bank account numbers or payment details where services are paid for;
Sensitive or special category data such as criminal convictions, health, or other protected characteristics where required.

How we use sensitive personal data

We may process sensitive personal data to monitor compliance with equal opportunities legislation or to comply with legal obligations.
These are known as “special categories” of data and require higher levels of protection.
We may process such data:
- With your explicit consent;
- To carry out legal obligations;
- Where it is in the public interest.

Do we need your consent?

In limited circumstances, we may ask for your written consent to process certain sensitive personal data.

Data protection principles

Used lawfully, fairly and transparently;
Collected only for valid purposes;
Relevant and limited to what is necessary;
Accurate and up to date;
Kept only as long as necessary;
Kept securely.

How we use your personal data

To confirm your identity;
To contact you by post, email, or telephone;
To prevent and detect fraud;
To meet legal obligations;
To promote the interests of the council;
To maintain accounts and records;
To seek your views or comments;
To send requested communications;
To process financial transactions;
For statistical analysis.

Our processing may also include the use of CCTV systems for the prevention and prosecution of crime.

Legal basis for processing

Most personal data is processed to comply with legal obligations or statutory functions. Some data may be processed to perform a contract or with your consent.

Sharing your personal data

Other data controllers the council works with;
Agents, suppliers, and contractors;
Other local authorities or not-for-profit bodies in joint ventures.

How long we keep your data

Some records are kept permanently where required by law. Others are kept for specific periods, such as financial records for at least 8 years. Data is kept only as long as necessary.

Your rights

Right of access – request the data we hold about you.
Right to rectification – correct inaccurate or incomplete data.
Right to erasure – request deletion where appropriate.
Right to restrict or object to processing.
Right to data portability.
Right to withdraw consent.
Right to complain to the Information Commissioner’s Office.

Transfer of data abroad

Any data transferred outside the EEA will only be placed on systems with equivalent protection.

Further processing

If we need to use your data for a new purpose, we will provide a new notice and obtain consent where required.

Changes to this notice

Updates will be posted at:

https://stmawganparishcouncil.org.uk

This Notice was adopted on June 13th, 2018.

Contact details

The Data Controller, St Mawgan-in-Pydar Parish Council
3 The Oaks, Quintrell Downs, Newquay, TR8 4QG
Email:
clerk@stmawganparishcouncil.org.uk
Telephone: 07500 515950
ICO registration number: ZA205215