Withern with Stain Parish Council
GDPR - Privacy Notice
Withern with Stain Parish Council complies with the General Data Protection Regulation (GDPR) law which comes into effect on 25 May 2018 and supercedes the Data Protection Act 1998. We are committed to keeping your personal information accurate and up to date. We will not keep your information longer than necessary.
This privacy notice explains how we use your personal information and the ways in which we protect your privacy. This notice applies to all personal data collected for or on behalf of the Withern with Stain Parish Council. This includes information collected by letter, email, face to face, telephone or online. You may also receive a privacy notice specific to the service you are receiving.
The Council is the data controller and the Parish Clerk is the data processor and the data protection officer.
By using our site or communicating with the Parish Council you agree to accept this privacy notice. This notice may be reviewed from time to time so please check back here each time you submit personal data to us.
How we use your personal information
We collect and use your personal information so we can provide you with statutory and other services. We use your information for the purpose for which you provided the information, including the delivery of services for you. We also use this information to monitor our performance in responding to your request.
We use your information in the following ways:
to tell you about services and provide services appropriate to you, for example highlighting additional help or services available to you.
for insight purposes to allow us to analyse patterns and trends of service usage
for service and financial planning, to help us create policy and inform decision making, e.g. identifying where new facilities/infrastructure are most needed
to process financial transactions including payments involving the Parish Council or where the Council is acting on behalf of other government bodies, eg East Lindsey District Council
to help us to verify your identity if you ask us for services
to ensure that the council meets its duties, including those imposed by the Equality and Health and Safety Acts
where necessary for law enforcement functions, eg licensing, planning enforcement, trading standards and food safety where the Parish Council is legally obliged to carry out such processing.
to help investigate any concerns or complaints you have may have about the services you receive
where otherwise allowed under law. For further information on the General Data Protection Regulation (GDPR) which comes into effect on 25 May 2018, please refer to the Information Commissioner’s website
Services such as education and social care, protection of vulnerable children and adults, and the support of public health and wellbeing may involve collecting, using and sharing sensitive personal data as defined by law. We do not disclose or share sensitive or confidential information without your explicit consent except in a small number of situations where disclosure is allowed by law, or where we have good reason to believe that failing to do so would put you or someone else at risk.
The Parish Council is obliged to protect public funds. We may use personal information and data-matching techniques to help us to detect and prevent fraud and ensure public money is spent in the most appropriate and cost-effective way. In order to achieve this, we may share information with other organisations which audit or administer public funds. This includes the Audit Commission, other local authorities, HM Revenue and Customs, and the Police.
The Parish Council may record some telephone conversations. The reasons for this include to help with staff training, to maintain records of conversations, to help with the detection, investigation and prevention of crime. We will tell you if your call is being recorded.
We may use personal information to identify people who will need extra support during emergencies or major incidents e.g. emergency evacuation.
We are keen to ensure that we are providing the services that are needed and may contact you to make you aware of services or support which could be of interest to you. We may invite you to sign up for other services at the same time (for example, a regular mailing list). You can choose not to accept this invitation.
We may also ask for feedback on how we are performing, or ask for your views on services which you have been using.
You may not want us to collect or share your personal information, or you may set conditions on how we can use it. In these cases we may not be able to provide with the service you need, or may only be able to provide it in a limited way. There are occasions when we have a statutory obligation to collect or use personal information. In those cases we will not be able to agree to your request.
We may use ethnic, gender, sexual orientation and age information (ie, equalities data) to compile statistics in order to comply with equality legislation and assist in planning and service provision. Such data does not identify individuals or affect your entitlement to services.
Data protection issues associated with the Electoral Roll are the responsibility of East Lindsey District Council. The Clerk is sent a copy of the electoral roll, with updates throughout the year. The Parish Council does not permit any third party to view this document.
All paper documents are stored at the Clerk’s home.
All computer records are stored on a password protected laptop, with anti-virus software, at the Clerk’s home.
The Parish Council does not utilise Cloud storage.
Data is only used for the purpose for which it has been provided.
The Parish Council does not share or sell data, and never has done.
Third parties
The information we collect may be shared between Parish Council services and with other organisations, such as government bodies, the Police, health and social care organisations providing you with services and educational establishments.
We will only share your personal information when we are permitted to or are required to by law or we have your consent to do so as required by law.
The Parish Council does not pass personal data to other organisations for marketing purposes without your consent. Your personal information may be processed by an external service provider acting on our behalf to provide services.
Email
Emails that we send to you or you send to us may be kept as a record of contact. We may also store your email address for future use. If we need to email sensitive or confidential information to you, we will check that we are using the correct email address and may use additional security measures. If you need to send us sensitive information, we recommend using encrypted email or the postal service.
Your rights
You can ask us to stop processing your personal data in relation to any Parish Council service. This may delay or prevent us delivering a service to you. We will try to meet your request but we may be required to hold or process information to meet our legal duties.
You are entitled to request access to and a copy of any information we hold about you.
If you find that the information that the Parish Council holds about you is no longer accurate, you have the right to ask to have this corrected. We may not always be able to change or remove the information. However, we will correct factual inaccuracies and may include your comments in the records.
Visitors to this web site
When someone visits this website, we or the website administrators use a third party service, such as Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We and they do this to find out things such as the number of visitors to the various parts of the site. This information is only processed by us in a way which does not identify anyone. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
By using our site you agree to accept this privacy notice. This notice may be reviewed from time to time so please check back here each time you submit personal data to us.
Security and Performance
We use a third party service to help maintain the security and performance of our website. To deliver this service it processes the IP addresses of visitors to the site.
Links to other websites
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
Use of Cookies
This site uses cookies to maintain and keep track of users’ preferences and authenticated sessions, to identify technical issues, user trends and effectiveness of campaigns, and to monitor and improve the overall performance.
Disclosure of personal information
We collect contact details via the web site for the purposes of providing a service to existing and potential correspondents and residents. We will never disclose personal details without the consent of the owner unless required to by law. Details are only held for as long as is necessary for Parish Council business, normally not more than 7 years.
Access to personal information
Individuals can find out if we hold any personal information by making a ‘subject access request’ under the General Data Protection Regulations. If we do hold information about you we will:
• give you a description of it;
• tell you why we are holding it;
• tell you who it could be disclosed to; and
• let you have a copy of the information in an intelligible form.
Please make any such request in writing via our Data Protection Officer the Parish Clerk: Parishclerkwithernstain@gmail.com or by post . We will normally respond within 30 days.
