Who controls your data
We are committed to protecting your personal data, and ensuring it is used fairly and lawfully. Information you provide to us will be used in accordance with UK GDPR and the Data Protection Act 2018.
We are the data controller for the personal information we hold about you.
The types of personal information we use
We currently collect and process the following types of data:
- name and email address (if you subscribe to an e-newsletter)
Why we collect and use this information
We process this data so you can receive the e-newsletters. The lawful basis for processing is consent. After you have given consent, we assume you are happy to continue receiving your chosen newsletters until you decide not to. Every newsletter includes an 'unsubscribe' link, which goes to our subscription preferences page. There, you can choose which titles to receive or delete your account altogether.
Keeping your information safe
In order to meet our commitment to protecting your personal data we have data protection policies and procedures in place to ensure that it is safeguarded.
We carry out checks on all third parties we use, and have contracts in place with them which detail data protection obligations they have to follow.
Our records retention schedule does not require us to keep your information after you delete your account, so your name and email address will be permanently removed from the system.
Sharing your data
We only share your data with the company which distributes newsletters on our behalf. We carry out checks on all data processors we use and have contracts in place with them which detail data protection obligations they have to follow. Our present supplier is based in the United States of America, and is an active participant in the UK-US data bridge.
The Accounts and Audit Regulations 2015 require the council to have an internal audit service to evaluate the effectiveness of its risk management, control and governance processes. To enable this, the council's internal audit team require access to documents, records and personal data belonging to the council, its contractors, or suppliers to do their work. Further details on the role of the council's internal audit team can be found within the Internal Audit Charter.
Individual rights under UK GDPR
You have the following rights, subject to lawful exemptions:
- the right to be informed about how we use your data
- the right of access to your data
- the right to rectification of your data if it is factually incorrect
You can find further information on your rights, and how to make requests under those rights.
For more detailed advice on your rights visit the Information Commissioner's Office website.
If you have any concerns
If you have any concerns or are unhappy with our use of your personal data, please let us know by contacting:
If you are dissatisfied with our response you can contact the Information Commissioner's Office:
- telephone: 0303 123 1113 (local rate)
- write to:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF