Under the General Data Protection Regulation 2016 (GDPR) and Data Protection Act 2018 (DPA) Bassetlaw District Council, Queen’s Building, Potter Street, Worksop, Notts, S80 2AH is a Data Controller for the information it holds about you. The Council will collect, process and hold personal data provided by you for the purpose of supporting NHS Test and Trace for individuals who have hired, used or attended Bassetlaw District Council facilities or events in line with government requirements and guidelines to help stop the spread of COVID-19. The lawful basis under which the Council collects, processes and holds personal data for this purpose is Compliance with a Legal Obligation in relation to The Health Protection (Coronavirus, Restrictions) (England) Regulations 2020.
Information we collect about you
We will collect the following information to fulfil our obligations in supporting NHS Test and Trace:
- Names (of those staff members working at the premises and customers/visitors using the facilities)
- Contact Numbers (of those staff members working at the premises and customers/visitors using the facilities)
- Dates and times that staff members worked
- Date, times and duration of customers/visitors visiting Bassetlaw District Council facilities or events
- If a customer/visitor only interacted with one member of staff during their visit then the name of the assigned staff member will be recorded alongside the name of the customer
Use of your personal data
We are collecting your personal data for the following purposes:
- To help support the NHS Test and Trace service by holding personal information for those individuals who have accessed, visited or used Bassetlaw District Council facilities or events
- To contact individuals who have accessed, visited or used Bassetlaw District Council facilities or events in the event of a COVID-19 outbreak affecting people who have attended an event or function at premises controlled or managed by Bassetlaw District Council.
- For the prevention and detection of crime or fraud
We are required by the following laws to process your personal data appropriately:
- Data Protection Act 2018
- The Health Protection (Coronavirus, Restrictions) (England) Regulations 2020. The above list is not exhaustive.
Sharing of your personal data
We MAY share your information with the following third parties for the reasons detailed above:
- Council Departments
- Nottinghamshire County Council
- Public Health England
- Central Government i.e. Department of Health and Social Care
- Nottinghamshire Emergency Services
We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
Keeping your personal data
We are required to hold your personal data for a period of 21 days after you have visited, used or accessed a function or event at facilities managed/or controlled by Bassetlaw District Council. Once this 21 day period has expired, Bassetlaw District Council will securely dispose of your personal information in line with GDPR/Data Protection legislation and requirement.
Also, we want to ensure that any information we hold is accurate. So you can help us by promptly informing us of any changes to the information that we hold about you i.e. a change in a contact number.
You can also view the council’s the most recent copy of our Retention Schedule. The Retention Schedule is a Live Document and as such, is updated regularly. Read our policy and guidelines that govern how we manage our Retention Schedule.
Protecting your personal data
We are strongly committed to data security and will take reasonable and appropriate steps to protect your personal information from unauthorised access, loss, misuse, alteration or corruption. We have put in place physical, electronic, and managerial procedures to safeguard the personal information that we hold.
We do not currently transfer your data to any third country or international organisation.
Research and statistics
Anonymised and pseudonymised data may be used for research and statistical purposes. Any data collected may be used for research and statistical purposes that are relevant and compatible with the purpose that the data was collected for.
There are a number of rights that you may exercise depending on the legal basis for processing your personal data. In most cases, these rights are not absolute and there may be compelling or overriding legal reasons why we cannot meet these rights in full. This will be explained to you in more detail should you contact us for any of the reasons detailed below:
- Request a copy of the personal information the council holds about you
- To have any inaccuracies corrected
- To have your personal data erased
- To place a restriction on the council’s processing of your data
- To object to processing and
- To request your data to be ported (data portability)
- To object to any automated decision making including profiling and the right to ask for any automated decision making to be reviewed by a human
Where the processing of your personal data is based on your consent, in most circumstances, you have the right to withdraw that consent at any time and we will act on your instructions.
For more information about how the Council may use your data and to learn more about your rights please see the Council’s Privacy Statement.
If you have any concerns or questions about how your personal data is processed, please contact the Council’s Data Protection Officer at the above address or by email to DataProtectionOfficer@bassetlaw.gov.uk. If you are dissatisfied, you can then make a complaint to the Chief Executive under stage 1 of the Council’s complaints procedure. Should you wish to pursue this further, please send your reasons in writing to the Council’s Chief Executive Officer here at Queen’s Buildings. If you remain dissatisfied with the Council’s response, you can complain to the Information Commissioner's Office in writing to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or by telephone 0303 123 1113 (local rate) or 01625 545 745.
Last Updated on Thursday, October 8, 2020