Privacy and Personal Data

Privacy Notice - Subject Access Request

The Council takes your privacy and personal data very seriously. This notice sets out what we will do with your personal information and who we may share it with.

We will use your information in order to process requests for personal data under the Data Protection Act 2018 and General Data Protection Regulation (GDPR) 2018). This notice sets out what we will do with your personal information and who we may share it with in respect of the above.

What information about you do we collect?

We collect the following information:

  • Name
  • Relevant contact details i.e. email address, telephone number, postal address
  • Confirmation of ID in the form of relevant documents, if required

This is to ensure that we are able to respond to your request and that any information provided is sent to those who are legally entitled to it. If you chose not to provide some of the required information, we may not be able to progress with your request.

How do we collect information about you?

Relevant personal data will be collected:

  • Directly from you as the data subject or from someone who is legally entitled to request the data subject's personal data on their behalf i.e. legal representative, parent, relative.

How will your personal data be used?

Your personal data will be used in the following ways:

  • To administer and process your request for personal data.

The Legal basis for processing your data

The Council is processing this personal data under the following legal bases:

  • Article 6 1(a): The data subject has given consent to the processing of his or her personal data.By submitting the request for personal data, you have given us consent to use your personal data to administer your request.

     
  • Article 6 1 (b): The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering a contract.
    • Without your personal data and the ability to process it to administer your request, we would not be able to progress with your request and provide you with your personal data.

       
  • Article 6 1 (c): The processing is necessary for the compliance of a legal obligation to which the controller is subject.
    • In accordance with the Data Protection Act 2018 and GDPR 2018, we are legally obligated to provide you with your personal data, should you make a valid request for us to do so.

       
  • Article 6 1 (e): The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

In accordance with the Data Protection Act 2018 and GDPR 2018, we have a public duty to provide you with your personal data, should you make a valid request for us to do so.

Who will your personal data be shared with?

  • Your personal data will only be shared within the Council, amongst authorised staff in order to process your request.
  • If you have appointed a third party to act on your behalf in making the request, your personal data will also be shared with them.
  • In some circumstances we may also need to forward it to third parties in order to obtain their permission to release information we hold about you if it was originally provided by them.

We will not share your personal data with any other third parties except where you have explicitly stated that we should, or where we are required to do so by law.

We will never sell your data to anyone else.

Transferring of data outside the EU

Your data will not be transferred outside the EU. It will be securely stored electronically within the UK only, unless it was necessary for safeguarding or for the prevention and detection of crime.

Length of time we keep your information

We will retain personal data for no longer than 2 years after completion of your request.

Individual rights

You have a number of rights under the General Data Protection Regulations. These can be found on the ICO website.

If you would like to exercise any of these rights, please Email.

The Data Controller for your information

West Devon Borough Council

Kilworthy Park,

Drake Road,

Tavistock

Devon

PL19 0BZ

Data Protection Officer

We have a duty to appoint a Data Protection Officer. Our Data Protection Officer is Drew Powell.

If you have any queries about our privacy notices or would like to exercise your data rights or make a complaint, please contact the Data Protection Officer by

  • Email
  • Telephone - 01822 813600
  • Writing to them at the address above

If you are not happy with how we have handled your complaint, you have the right to contact the Information Commissioner's Office to raise your concerns about how we have processed your information or how we have responded to your request to exercise any of your rights in relation to your information:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF