|
Introduction:
|
Conwy County Borough Council is a Data Controller registered with the Information Commissioners Officer.
https://ico.org.uk/ESDWebPages/Entry/Z4738791
|
|
The Service who will be processing (using) your personal data is:
|
This privacy notice covers how Conwy County Borough Council (as a Data Controller) will collect, use and share your personal data for the purposes of undertaking our duties of ensuring that all aspects of Communicable Disease and Health Protection Legislation within our responsibility, is complied with.
|
|
The reason (purpose) it is necessary to process your personal data is:
|
We collect and use your personal information so that we can undertake our duties and ensure that all relevant parties are complying with their obligations under the aspects of Communicable Disease and Health Protection Legislation within our remit.
The information that you provide will be processed according to the UK General Data Protection Regulation, the Data Protection Act 2018 and Public Health (Control of Disease) Act 1984.
We will also make any disclosures required by law and we may also share this information with other bodies responsible for detecting/preventing fraud/crime.
We will not make any disclosures to third parties for marketing purposes.
Your data will be secure and confidential at all times and we will only collect the personal information that is required to provide you with our service.
|
|
The personal data that will collected and processed is:
|
The categories of personal data being collected are: Name and contact details.
|
|
The lawful basis for processing your personal data is:
(see Lawful basis for processing | ICO)
|
The UK General Data Protection Regulations (UK-GDPR) requires specific conditions to be met to ensure that the processing of your personal data is lawful. These relevant conditions are below:
- Article 6 (1)(e) Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
|
|
Details of any special category data collected and processed (if any):
|
Some types of personal data are more sensitive than others, and need more protection. This is classed as ‘special category data’ and includes NHS number, doctor's surgery, results of tests, health data and in some instances details about your religious or philosophical beliefs or and the processing of health and sex life and sexual orientation.
|
|
The lawful basis for processing your special category data is:
(see Special category data | ICO
|
Depending on the particular service, we process personal data in accordance with either Article 6c (legal obligation) or 6e (public task) of the UK-GDPR.
Our use of special category data is justified by Article 9h (provision and/or management of health or social care), or 9i (public interest in the area of public health), or 9j (statistical purposes), according to the particular service or Public Health function |
|
How/where your data is stored:
|
Conwy County Borough Council use a variety of different systems to store and process your data, most of which are hosted internally. We do however share specific information to a shared database operated by Public Health Wales (PHW).Privacy Notice - Public Health Wales (nhs.wales)
|
|
How long your data will be held for:
|
Conwy County Borough Council will only keep your information for as long as is necessary, we will retain the information provided to us for up to 7 years and your information will be securely disposed of once it is no longer required. Your information may be retained by Public Health Wales/ NHS for a different period of time and Council officers may have access to this data from databases operated by those organisations. Public Health Wales Privacy Notice can be found at:Privacy Notice - Public Health Wales (nhs.wales)
|
|
Who your data may be shared with:
|
We may need to share your personal data with internal departments, other organisations and third parties, this will include:
Public Health Wales (PHW), the NHS Wales and other Local Authorities or Food Standards Agency as required. We may also share data with other enforcement bodies if required.
|
|
Your data rights:
|
In law you have a range of rights over your personal data which include:
- the right to be informed
- the right of access to the personal data we hold about you.
- the right to correct any inaccuracies within the personal data we hold.
- the right to have your personal data deleted when it is no longer required.
- the right in limited circumstances to restrict how your personal data is used.
- the right to object to the use of your personal data.
In the rare situations where we rely on consent as the lawful basis upon which we process your personal data, you may withdraw that consent at any time.
Please also see the CCBC Full Privacy Notice:
Conwy County Borough Council Full Privacy Notice - Conwy County Borough Council
|
|
Any other information relevant (if required):
|
Privacy Notice - Public Health Wales (nhs.wales)
|
|
Service contact:
|
Food Safety & Health and Safety Team
Conwy County Borough Council
PO Box 1 CONWY LL30 9GN
Foodsafety-healthandsafety@conwy.gov.uk
|
|
Information Governance Unit:
|
If you have any other questions about how your personal data is used or you wish to exercise any of your rights referred to above please contact:
Conwy County Borough Council
Information Governance Unit
PO Box 1 Conwy LL30 9GN
info-gov.unit@conwy.gov.uk
01492 574016/577215
If you believe we have failed to handle and manage your personal data appropriately you have the right to appeal to the:
Information Commissioner’s Office – Wales 2nd Floor
Churchill House
Churchill Way
Cardiff
CF10 2HH
Email: wales@ico.org.uk
|