As a Local Authority, Corby Borough Council processes a considerable amount of information, including personal data about the citizens it serves, to allow it to provide services effectively. The Council recognises that this information is important to their citizens and that it has a responsibility to these citizens regarding the information it holds about them. As such, it takes seriously its responsibilities to ensure that any personal information it collects and uses is done so proportionately, correctly and safely and is committed to protecting the privacy and security of those individuals.
This notice explains what we do with any information that you provide us with, or is gathered automatically, to ensure you remain informed and in control of your information.
The personal data you supply to Corby Borough Council will be processed in accordance with the Data Protection Act 1998 and the General Data Protection Regulation (Regulation (EU) 2016/679). It will only be used for the specified purpose for which you have given it or for purposes that are compatible with that. Any personal data you have given us will not be passed to third parties for commercial purposes. This notice is for guidance only and does not form a contract.
Information will be shared among officers, councilors and other partner agencies where the law allows or requires it, to help improve the service you receive and to develop other services. We may also be legally required to share your personal data with law enforcement bodies such as the Police, government authorities and other organisations, for the prevention and detection of crime. If you do not wish certain information about you to be exchanged within the Council, you can request that this does not happen, although this may affect the ability of the Council to provide some services to you.
Any questions you have in relation to this policy or how we use your personal data should be sent to email@example.com or addressed to The Data Protection Officer, Corby Borough Council, The Cube, Parklands Gateway, George Street, Corby, Northants, NN17 1QD. A copy of the privacy notice can be found in The One Stop Shop, The Cube, George Street, Corby, within our leisure facilities, online at www.corby.gov.uk or by telephoning Customer services on 01536 46400 and a copy can be posted out to you.
2. ABOUT US
Your personal data (i.e. any information which identifies you, or which can be identified as relating to you personally) will be collected and used by Corby Borough Council (data controller number Z5560361) and Electoral Registration Officer Corby Borough Council (data controller number) ZA270853. For the purposes of data protection law, Corby Borough Council will be the controller.
3. WHAT INFORMATION WE COLLECT
Personal data you provide
As a local authority, the council delivers services to you. In order to do this in an effective way we will need to collect and use personal information about you.
If you use a specific council service, we will usually let you know how that service will use your personal information via a separate privacy notice.
The Data Protection Act 1998 and the EU General Data Protection Regulation ensure that we comply with a series of data protection principles. These principles are there to protect you and they make sure that we:
- Process all personal information lawfully, fairly and in a transparent manner.
- Collect personal information for a specified, explicit and legitimate purpose.
- Ensure that the personal information processed is adequate, relevant and limited to the purposes for which it was collected.
- Ensure the personal information is accurate and up to date.
- Keep your personal information for no longer than is necessary for the purpose(s) for which it was collected.
- Keep your personal information securely using appropriate technical or organisational measures.
Information from third parties
We sometimes receive personal data about individuals from third parties. For example, if we are partnering with another organisation (e.g. you provide your information to Department of Work and Pensions or other government authorities).
We may collect information from social media where you have given us permission to do so, or if you post on one of our social media pages.
Sensitive personal data
We collect and store sensitive personal data (such as information relating to health) about some of our customers. We’ll take extra care to ensure your privacy rights are protected.
Accidents or incidents
If an accident or incident occurs on our property, then we’ll keep a record of this(which may include personal data and sensitive personal data).
3. HOW WE USE INFORMATION
We only ever use your personal data with your consent, or where it is necessary in order to:
- enter into, or perform, a contract with you;
- comply with a legal duty;
- protect your vital interests;
- for our own (or a third party’s) lawful interests, provided your rights don’t override the these.
Corby Borough Council will use your personal data for a for the purpose or purposes it was collected for (or else for closely related purposes):, and at all times within the rules set out in the Data Protection Act 1998.
This means that we will process personal data for the following purposes:
- Personal information relating to identified natural persons used to deliver services such as:
- Adult and children's social care, human resources, special educational needs, planning applications, access to information requests, legal claims, school appeals, library cards, blue badges, customer services, highways claims and complaints, pensions, children's services, parking services, care homes, early years, youth offending, trading standards and more.
- Sensitive information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and data concerning health or sex life.
- Health and wellbeing information. All local authorities have a duty to improve the health of the population they serve. To help with this, we use information from a range of source data, including data collected at the registration of a birth or death to understand more about the health and care needs in the area.
- Research and statistical data to provide intelligence including demographic data, population projections, the economic situation, health and wellbeing information. This personal information is often pseudonymised when an identifier such as name is replaced with a unique number.
- Where otherwise permitted under the Data Protection Act 1998
4. DISCLOSING AND SHARING DATA
Information will be shared among officers, councilors and other partner agencies where the law allows or requires it, to help improve the service you receive and to develop other services. We may also be legally required to share your personal data with law enforcement bodies such as the Police, government authorities and other organisations, for the prevention and detection of crime or fraud. If you do not wish certain information about you to be exchanged within the Council, you can request that this does not happen, although this may affect the ability of the Council to provide some services to you such as:
- District Councils
- Fire Service
- Voluntary organisations
We will also need to supply your information to organisations we have contracted to provide a service to you.
We will only ever share your information if we are satisfied that our partners or suppliers have sufficient measures in place to protect your information in the same way that we do.
We will not send your information to marketing agencies.
Before sharing information the council will ensure that:
- Privacy Notices are completed if appropriate.
- Technical security such as encryption and access controls are in place to keep information secure.
- Information Sharing Agreements are completed showing the rules to be adopted by the various organisations involved in the sharing exercise.
- Privacy Impact Assessments are completed to assess any risks or potential negative effects.
- Common retention periods and deletion arrangements are set for the information.
- Subject access rights are catered for.
From 01.04.2018, Corby Borough Council will ask its customers to “opt-in” for marketing communications. This is due to a change to the rules which govern how we can communicate with you and a new regulation on personal data (the General Data Protection Regulation) coming into force in May 2018. Therefore we are introducing a new approach that relies on you giving us your consent about how we can contact you. This means you’ll have the choice as to whether you want to receive these messages and be able to select how you want to receive them (email, phone, or post).
You can decide not to receive communications or change how we contact you at any time. If you wish to do so please contact to firstname.lastname@example.org or addressed to The Data Protection Officer, Corby Borough Council, The Cube, Parklands Gateway, George Street, Corby, Northants, NN17 1QD.
Newsletters and magazines
Council newsletters, magazines, and waste collection information, are provided as a benefit to our customers. We send these out to all our tenants and registered addresses within the Borough.
6. YOUNG PEOPLE
Parental permission: If your child is under 18 then we’ll need permission from you as their parent or guardian for them to enter one of our competitions or to share a picture, photo or story with us.
Information for parents
We take great care to protect and respect the rights of individuals in relation to their personal data, especially in the case of children. If your child is under 18, we’ll only use his or her personal data with your consent. This means that, for example, if your child wants to have his or her name or picture featured in one of our magazines, we’ll need you to confirm you’re happy for us to do so.
We won’t send marketing emails, letters, calls or messages to under 18 year-olds
7. HOW WE PROTECT DATA
We employ a variety of physical and technical measures to keep your data safe and to prevent unauthorised access to, or use or disclosure of your personal information.
Electronic data and databases are stored on secure computer systems and we control who has access to information (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data protection procedures which personnel are required to follow when handling personal data.
All electronic forms that request financial data will use the Secure Sockets Layer (SSL) protocol to encrypt the data between your browser and our servers.
If you use a credit card to we will pass your credit card details securely to our payment provider (Verifone). Other payment methods) are handled in a similar manner. Corby Borough Council complies with the payment card industry data security standard (PCI-DSS) published by the PCI Security Standards Council, and will never store card details.
Of course, we cannot guarantee the security of your home computer or the internet, and any online communications (e.g. information provided by email or our website) are at the user’s own risk.
Some of our premises have CCTV and you may be recorded when you visit them. CCTV is there to help provide security and to protect both you and Corby Borough Council. CCTV will only be viewed when necessary (e.g. to detect or prevent crime) and footage is only stored temporarily. Unless it is flagged for review CCTV will be recorded over.
Corby Borough Council complies with the Information Commissioner’s Office CCTV Code of Practice, and we put up notices so you know when CCTV is in use.
Where we store information
Corby Borough Council stores our data within the European Union. Some organisations which provide services to us may transfer personal data outside of the EEA, but we’ll only allow them to do if your data is adequately protected.
For example, some of our systems use Microsoft products. As a US company, it may be that using their products result in personal data being transferred to or accessible from the US. However, we’ll allow this as we are certain personal data will still be adequately protected (as Microsoft is certified under the USA’s Privacy Shield scheme).
How long we store information
We will only keep your information for as long as it is required to be retained. The retention period is either dictated by law or by our discretion. Once your information is no longer needed it will be securely and confidentially destroyed.
9. KEEPING YOU IN CONTROL
We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights under the Data Protecton Act 1998 and EU general Data Protection Regulations, which are as follows:
- The right to be informed via Privacy Notices such as this.
- The right of access to any personal information the council holds about you. To request a copy of this information you must make a subject access request in writing, either via a letter to Data Protection Officer, Corby Borough Council, The Cube, Parklands Gateway, George Street, Corby, Northants, NN17 1GD, or via email to: email@example.com .
- To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.
- From 25th May 2018 the Council will not be charged for making a subject access request. You are entitled to receive a copy of your personal data within 30 calendar days of our receipt of your subject access request.
- The right of rectification, we must correct inaccurate or incomplete data within one month.
- The right to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
- The right to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
- The right to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
- The right to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
- You have rights in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.
Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.
If you would like further information on your rights or wish to exercise them, please write to our Data Protection Officer at Corby Borough Council, or email firstname.lastname@example.org.
We can provide you with a template subject access form which includes guidance on how to make your request (and will help us respond more quickly). Please contact us for a copy of this.
Access to Council Official information
Under the Freedom of Information Act 2000 and the Environmental Information Regulations 2004 you have a right to request any recorded official information held by the council. The information you require may already be publicly available. The council has a duty to make official recorded information available the council has a duty to make information available via a publication scheme. Before you submit a request please check the publication scheme.
If you need to make a request, it must be done in writing. You can:
- Submit a request online at www.my.corby.gov.uk
- Email: email@example.com
- Write to: Freedom of Information Officer, Corby Borough Council, The Cube, Parklands Gateway, George Street, Corby, Northants, NN17 1GD
You do not need to say why you want the information. Your request must include your name, and an address for correspondence (if you apply by email, your email address is a suitable address for correspondence). Please ensure you identify the information you want as clearly as possible.
With certain limited exceptions, you are entitled to a response within 20 working days.
It costs nothing to make a freedom of information request. However, the council can refuse to deal with your request if doing so would cost more than £450 (which equates to 18 hours' work). In extreme circumstances, the council may also charge for the cost of photocopying and postage.
You may not get the information you asked for:
- If the council does not hold the information you have requested
- If the information is exempt from disclosure
- if finding the information you have requested would take longer than 18 hours
If we are unable to supply any of the information you have requested, we will tell you the reasons why. For more details please refer to the Information Commissioner's Office website, this can be found at www.ico.org.uk.
You can complain to Corby Borough Council directly by contacting our data protection officer using the details set out above. If wish to make a complaint which does not directly relate to your data protection and privacy rights, you can do so in accordance with Corby Borough Councils complaint policy.
If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you can complain to the UK Information Commissioner’s Office which regulates and enforces data protection law in the UK. Details of how to do this can be found at www.ico.org.uk
Web statistics about your visit to our site are collected automatically. This information is used to help us follow browsing preferences so that we can regularly improve our website. These statistics do not contain personal data.
If your experience would be improved by our website knowing your location, we will ask permission to obtain your current location from your device. This can include coordinates, direction of travel and the time the data was recorded. This location data is not tracked and is used in providing specific service requests.
E-mails / forms
In some areas of the Council website, we may ask you to register your name and e-mail address. We may also collect personal data from you if you complete any forms or if you contact us with comments or specific requests. The personal data collected will only be used for the specified purpose(s), stated on the form. E-mails to councillors are confidential between yourself and your councillor.
If you are using a public computer and do not wish others to be able to go back to view the details you have typed into a form on the web it is advisable to clear the contents of the form and your cache (temporary internet files) before leaving the computer
10. COOKIES AND LINKS TO OTHER SITES
Our website uses local storage (such as cookies) to provide you with the best possible experience and to allow you to make use of certain functionality.
Links to other sites
Our website contains hyperlinks to many other websites. We are not responsible for the content or functionality of any of those external websites (but please let us know if a link is not working by using the 'Contact us' link at the top of the page).
Although we make reasonable efforts to keep the information on this website up-to-date and accurate, we make no representations, warranties or guarantees whether express or implied that the content on our site is accurate, complete or up-to-date. Corby Borough Council, its employees or agents will not be held responsible for any loss, damage or inconvenience caused as a result of reliance on such information.