Privacy notice: Childcare and play
The council is the data controller for childcare and play.
Service: Children and Families Services
Team: Childcare and Play
About this privacy notice
The purpose of this privacy notice is to tell you how the council will process your personal data for the purpose of data collection for the purpose of our statutory requirement of producing a childcare sufficiency report and review and for the purpose of training needs. You have rights concerning how your data is collected and used for this purpose. This privacy notice informs you here what those rights are and how you can exercise them.
The council is committed to protecting the privacy and security of your personal data.
The council is only allowed to use, gather, and share personal information where we have an appropriate legal basis to do so. We only collect and processes personal information to fulfil our legal and official functions. We will only use personal information when the law allows us to and where it is necessary and proportionate to do so.
The council has appointed a Data Protection Officer (DPO) to help ensure that it fulfils its legal obligations when processing personal data. You can contact the DPO by email at DPO@anglesey.gov.wales
What personal data we are collecting and why
Your personal data is being collected and used to produce a childcare sufficiency report and review and for the purpose of training needs. We may also use your personal data to contact you about related matters.
We collect:
Setting name, address, email and telephone number. Registered person, and responsible individual names.
Documents will be collected to verify, CIW registration, SASS report, CIW/ESTYN report.
How we use your personal data
The council collects your personal data for the specific purposes of administering, monitoring and managing childcare and play.
‘Personal data’ may relate to the staff and responsible or registered individual. The processing of your personal data is necessary as part of our public task defined by Welsh Government and in substantial public interest in order to deliver on statutory obligation of the childcare sufficiency and for training needs of the childcare sector.
We are using the following lawful basis under UK GDPR to process personal data: Article 6(1)(e) of the UK GDPR – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Sharing your personal data
The council may share your data will other external parties where it is required to do so or it is lawful and appropriate to do so. The Childcare and Play Team supports the childcare sector in order to do this, may share relevant information with other services such as:
- health visitors
- registered childcare providers
- Early Years Team
- speech and language services
- Early Years, Additional Learning Needs and Inclusion Team
Please note that where we may share your data externally, that organisation will take on responsibility for your data at that point, and you should refer to their own privacy notice for details on how they will process your data.
Your rights as a data subject
The data being collected is your personal data, and you have rights that affect what happens to it.
You have the right to access and obtain a copy of the personal data that the council holds about you and to ask the council to correct your personal data if there are any errors or it is out of date.
In some circumstances you may also have a right to ask the council to restrict the processing of your personal data until any errors are corrected, to object to processing or to transfer or (in very limited circumstances) erase your personal data.
If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the Data Protection Officer as indicated above.
You can obtain further information about these rights from the Information Commissioner’s Office or via their telephone helpline 0303 123 1113.
No decision will be made about individuals solely based on automated decision making (where a decision is taken about them using an electronic system without human involvement) and which has a significant impact on them.
Storage, security, and data management
The council has a duty to safeguard and ensure the security of your personal data where we process this. We do that by having systems and policies in place to limit access to your information and prevent unauthorised disclosure, accidental loss, or alteration of your data.
We have also procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long will the council retain the personal data
The council will retain personal data obtained from the childcare questionnaire and uploaded evidence documents for 3 years and then dispose of it securely.
When we ask you for information, we will keep to the law, including the Data Protection Act 2018 and UK General Data Protection Regulation.
If you are unhappy with the way the council has acted when using your personal data, you can make a complaint by contacting the Data Protection Officer.
If you are still not happy, or for independent advice about data protection, privacy and data sharing, you can contact:
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
Web: https://ico.org.uk/
Published March 2024