Privacy notice: Human Resources Development (Corporate Transformation Service)
You have a right to know about the way information about you is used by us. Please read the following information as it refers to additional rights which you should know about.
This notice gives you information about the data we hold about you, how we use it, your rights in relation to it and the safeguards that are in place to protect it.
Isle of Anglesey County Council is the data controller and is registered as a data controller with the Information Commissioner's Office. Full details of the registration are available at the ICO register of data controllers.
Purpose of processing
Isle of Anglesey County Council is the data controller for your information. This means that the council protects your information and decides on how it is used. The legal term for using information is processing. Also, the legal term for information about you is personal data.
The council will use your personal information to arrange a work experience placement. This is the intended purpose of processing. The information will not be used for purposes that are not compatible with why it is gathered in the first instance.
Legal basis of processing
The council collects and uses your personal information because it has a legal duty or right to do so; or to perform a public interest task; or because you have given your consent. The legal term for this is called legal basis of processing.
Sharing your personal data
The council will not use your information for automated decision making or profiling. Profiling means any form of automated processing of your personal data to evaluate or analyse or predict things about you. This could include your economic situation, health, personal preferences, interests or behaviour.
The council will not transfer your personal information to another country.
In this instance the council is using your personal information because you have given your explicit consent to the processing at the time of the application.
The council will collect and share information with public bodies that contains some personal data. Please note that the council will collect and share data with the Auditor General for Wales’ (AGW’s) in connection with his audit work and studies. Data sharing will also take place pursuant to the duty at Section 33 of the Local Government (Wales) Measure 2009.
The personal information you provide will not be shared with any other organisations other than for the purposes of arranging a work experience placement through liaising with other services within the council and the school / college. The services within the council and the school / college will have to comply with data protection legislation and safeguard your data as a personal data processor.
Retention period
The information you supply will be kept for as long as is required or necessary, and will be destroyed securely. The retention periods are set out in the council’s list of retention periods, known as a retention schedule. For further information please contact the Data Protection Officer (DPO).
Your legal rights
You have legal rights, and it is important that you know what they are.
You have the right to obtain confirmation that information about you is being used
The council will provide confirmation if you ask for it.
You have the right to obtain a copy of your personal data
You will be provided with copies of your personal data within the statutory period of one month (or if providing your personal data is a complex matter, this will be done as soon as is reasonable within 3 months).
Your personal data will be provided to you free of charge, however, if your request is deemed manifestly unfounded or excessive, a reasonable fee will be charged. You ask to obtain your personal data by contacting the council’s Data Protection Officer.
You have the right to have information about you corrected. This is known as the right of rectification
You have the right to ask that your personal data is rectified if it is incorrect or incomplete. This will be done within 1 month, or if your request is complex, within 3 months.
The right to have personal data erased
You have a right to have personal data erased in specific circumstances:
- Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed
- When you object to the council’s processing and there is no overriding legitimate interest for continuing the processing
- If the personal data was unlawfully processed
- When the personal data has to be erased in order to comply with a legal obligation or
- When the personal data is processed in relation to the offer of information society services
to a child, for example an 'app' developed specifically for children.
The right to restrict processing
Where it is claimed that data is inaccurate or the right to erasure has been exercised you can require the Council to restrict processing until verification checks have been completed.
The right to object
In addition to the right to object to your information being used for direct marketing, you have the right to object to processing based on the performance of a task in the public interest/exercise of official authority (including profiling), and processing for purposes
of scientific/historical research and statistics.
The right to withdraw your consent at any time
This means that if the council uses your consent to process your personal data, you can withdraw it. This does not change the lawfulness of processing that happens before you withdraw consent.
Rights in relation to automated decision making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects on you or affects you in a significant way.
Please contact our Data Protection Officer by email, post or telephone if you have any queries about this Privacy Notice or the information we hold about you.
The council’s Data Protection Officer (DPO) can be contacted by email: DPO@anglesey.gov.uk or SDD@ynysmon.gov.uk . We hope that our DPO can resolve any query or concern you may raise about our use of your personal information.
The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority where you work, normally live or where any alleged infringement of data protection laws occurred.
The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email: casework@ico.gsi.gov.uk
Telephone: 0303 123 1113.
Version 1
Date May 2018