Privacy notice: Governors Development Programme 2024 to 2025
The council is the data controller for the enrolment and feedback arrangements for the Governors Development Plan 2024 to 2025
About this privacy notice
The purpose of this privacy notice is to tell you how the council will process your personal data for the purpose of the enrolment arrangements for the Governors Development Plan. You have rights concerning how your data is collected and used for this purpose. This privacy notice informs you here what those rights are and how you can exercise them.
The council is committed to protecting the privacy and security of your personal data.
The council is only allowed to use, gather and share personal information where we have an appropriate legal basis to do so. We only collect and process personal information to fulfil our legal and official functions. We will only use personal information when the law allows us to and where it is necessary and proportionate to do so.
The council has appointed a Data Protection Officer (DPO) to help ensure that it fulfils its legal obligations when processing personal data. You can contact the DPO by email at DPO@anglesey.gov.wales
What personal data we are collecting and why
Your personal data is being collected and used to deliver the Governors Development Plan (so that you can register on to the session; so that we can send you relevant information and materials and to contact you for feedback following the session).
We may also use your personal data to contact you about related matters.
We collect your name, the name of the school that you are employed and your work email address (Hwb).
How we use your personal data
The council collects your personal data in order to register you on to the Governors Development Plan; to send you relevant information and materials and to contact you for feedback following the session.
Lawful basis for processing the data
We are using the following lawful basis under UK GDPR to process personal data:
Article 6(1)(c)- task carried out in the public interest or in the exercise of official authority.
We will not knowingly ask you to provide information that is categorised as special categories of personal data.
Sharing your personal data
The council may share your data will other external parties where it is required to do so or it is lawful and appropriate to do so.
Please note that where we may share your data externally, that organisation will take on responsibility for your data at that point, and you should refer to their own privacy notice for details on how they will process your data.
- Processed lawfully, fairly and in a transparent manner.
- Collected for specified, explicit and legitimate purposes ('purpose limitation').
- Adequate, relevant and limited to what is necessary.
- Accurate, and where necessary, kept up to date.
- Kept in a form which permits identification of data subjects for no longer than is necessary.
- Processed in a manner that ensures appropriate security of the personal data.
Your rights as a data subject
The data being collected is your personal data, and you have rights that affect what happens to it. You have the right to access and obtain a copy of the personal data that the council holds about you and to ask the Authority to correct your personal data if there are any errors or it is out of date.
In some circumstances you may also have a right to ask the council to restrict the processing of your personal data until any errors are corrected, to object to processing or to transfer or (in very limited circumstances) erase your personal data.
If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the Data Protection Officer as indicated above.
You can obtain further information about these rights from the Information Commissioner’s Office https://ico.org.uk/ or via their telephone helpline 0303 123 1113.
Is any personal data sent overseas?
No, personal data will not be sent overseas.
Automated decision making and profiling
No decision will be made about individuals solely based on automated decision making (where a decision is taken about them using an electronic system without human involvement) and which has a significant impact on them.
Storage, security, and data management
The council has a duty to safeguard and ensure the security of your personal data where we process this. We do that by having systems and policies in place to limit access to your information and prevent unauthorised disclosure, accidental loss, or alteration of your data.
We also have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long will the council retain the personal data
The council will retain the data until the end of April 2025 and then dispose of it securely.
When we ask you for information, we will keep to the law, including the Data Protection Act 2018 and UK General Data Protection Regulation.
If you are unhappy with the way the council has acted when using your personal data, you can make a complaint by contacting the Data Protection Officer.
If you are still not happy, or for independent advice about data protection, privacy and data sharing, you can contact:
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
Website: https://ico.org.uk
Changes to our privacy notice
We keep our privacy notice under regular review and will share any revisions.
Published 20 September 2024
Last updated 20 September 2024