Internal Audit Service Specific Privacy Notice

Conwy County Borough Council is a Data Controller registered with the Information Commissioners Officer. https://ico.org.uk/ESDWebPages/Entry/Z4738791

This notice applies to information provided by an individual who may raise a concern about any aspect of the Council’s work, either directly with the Internal Audit Service or information that is passed to the Internal Audit Service following reporting to another service within the Council.

A concern may be, but is not limited to:

• An act against the Council’s Constitution or a breach of the Council’s polices
• An act against the Local Government Code of Conduct
• Improper conduct or where established standards or practices are not met
• A criminal offence, for example, fraud or theft
• Misuse or abuse of the Council’s resources
• Concealment of any of the above

Purpose

Conwy County Borough Council are required by law to protect the public funds it administers and so may use any information you have provided for the prevention, detection and investigation of fraud and irregularity.  For the performance of a contract, or, task carried out in the public interest and to comply with a legal obligation.

Information Collected

• Name
• Contact Details
• Any other relevant information based on the concern raised
• No special category data is collected

Legal Basis

Part 6 of the Local Audit and Accountability Act 2014 and the Accounts and Audit (Wales) Regulations are the Legal basis.

How/Where your Data is Stored

Data will be securely stored internally by Conwy County Borough Council.

How Long your Data Will be Held For

Should your concern be founded and an investigation undertaken we will retain the information for 6 full years.  Should your concern be unfounded we will retain the information for 2 years.

Who we May Share Your Data With

• Other Services within the Council
• Police or Crown Prosecution Service
• Any other third party who may need to be contacted based on the concern raised

Your information will not be transferred to a country outside of the European Economic Area.

Artificial Intelligence, Machine Learning and AI Large Language Models (GenAI) or other similar tools

No aspects of proposed processing will be undertaken by means of AI, ML, LLM or GenAI. 

Your Information Rights

In law you have a range of rights over your personal data which include:

• The right to be informed
• The right of access to the personal data we hold about you
• The right to correct any inaccuracies within the personal data we hold
• The right to have your personal data deleted when it is no longer required
• The right in limited circumstances to restrict how your personal data is used
• The right to object to the use of your personal data 

In the rare situations where we rely on consent as the lawful basis upon which we process your personal data, you may withdraw that consent at any time.

Please also see the CCBC Full Privacy Notice: Conwy County Borough Council Full Privacy Notice - Conwy County Borough Council

Contact Details

Phone: 01492 576215
Email: sioned.parry@conwy.gov.uk

If you have any other questions about how your personal data is used or you wish to exercise any of your rights referred to above please contact:

Phone: 01492 577215
E-mail: info-gov.unit@conwy.gov.uk

If you believe we have failed to handle and manage your personal data appropriately you have the right to appeal to the: 

Email: wales@ico.org.uk