This privacy notice is published in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The notice provides information on the way in which the personal information you provide is managed and processed by Bassetlaw District Council (the ‘data controller’). The Council’s lawful basis for hold and processing your information would be consent.
Bassetlaw Youth Council – young people’s activity/engagement consent
Bassetlaw Youth Council runs activities and/or events that may require loco parentis (duty of care) from the local authority.
Why do we collect your personal data?
We collect information from you/your child to allow them to participate in a specific activity or event, to safeguard your child and to meet any needs identified relating to the event. We may also need to communicate with you about matters related to the activity or about your child during the activity itself.
We will not collect any personal data that we do not need in order to provide this service and as far as is reasonable and practicable, will ensure that the information recorded is accurate and kept up to date.
Legal Basis for Processing
Processing shall be lawful because:
- You, or your legal representative, have given consent.
- You have entered into a contract
- It is require by law to which the Council is subject; Data Protection Act 2018, Children’s Act 2004
Information we collect about you
We will collect the personal data about you, or your child in order to ensure the young person can take part in the Youth Council events safety. The personal data we will collect includes:
- Child name, date of birth, address
- Parent/carer/guardian name and emergency contact details. Parent email address to send information related to the activity
- Child's special requirements and any behavioural issues
Who do we get your personal data from?
Your information is provided to us directly by you when you sign up to the Youth Council.
Sharing of your personal data
Bassetlaw Youth Council may share your personal data with:
- Nottinghamshire County Council Youth Services.
- Taxi Companies
- organisations that deliver services on behalf of the council
We will only share information when it is necessary to do so and in accordance with the law. We may share some information with partners that are providing the activity/event.
Keeping your personal data
We will keep your personal data in accordance with our retention schedule, unless you explicitly request it to be removed under GDPR information rights. This right to have your data removed is not an absolute right, for example, we will need to retain your data if this information forms part of a legal requirement, public registry or an existing contract.
We want to ensure any information we hold is accurate. You can help us by promptly informing us of any changes to the information we hold about you.
View the most recent copy of the Retention Schedule. The Retention Schedule is a Live Document and as such, is updated regularly. Read our policy and guidelines that govern how we manage our Retention Schedule.
Protecting your personal data
We are strongly committed to data security and will take reasonable and appropriate steps to protect your personal information from unauthorised access, loss, misuse, alteration or corruption. We have put in place physical, electronic, and managerial procedures to safeguard the personal information that we hold.
We do not currently transfer your data to any third country or international organisation.
Research and statistics
Anonymised and pseudonymised data may be used for research and statistical purposes. Any data collected may be used for research and statistical purposes that are relevant and compatible with the purpose that the data was collected for.
There are a number of rights that you may exercise depending on the legal basis for processing your personal data. In most cases, these rights are not absolute and there may be compelling or overriding legal reasons why we cannot meet these rights in full. This will be explained to you in more detail should you contact us for any of the reasons detailed below:
- Request a copy of the personal information the council holds about you
- To have any inaccuracies corrected
- To have your personal data erased
- To place a restriction on the council’s processing of your data
- To object to processing and
- To request your data to be ported (data portability)
- To object to any automated decision making including profiling and the right to ask for any automated decision making to be reviewed by a human
Where the processing of your personal data is based on your consent, in most circumstances, you have the right to withdraw that consent at any time and we will act on your instructions.
For more information about how the Council may use your data and to learn more about your rights please see the Council’s Privacy Statement at www.bassetlaw.gov.uk/privacy
If you have any concerns or questions about how your personal data is processed, please contact the Council’s Data Protection Officer at the above address or by email to DataProtectionOfficer@bassetlaw.gov.uk. If you are dissatisfied, you can then make a complaint to the Chief Executive under stage 1 of the Council’s complaints procedure. Should you wish to pursue this further, please send your reasons in writing to the Council’s Chief Executive Officer here at Queen’s Buildings. If you remain dissatisfied with the Council’s response, you can complain to the Information Commissioner's Office in writing to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or by telephone 0303 123 1113 (local rate) or 01625 545 745.
Last Updated on Friday, July 10, 2020