|Website URL : http://mole-valley.gov.uk/index.cfm?articleid=17840|
Privacy and Cookies Policy
Mole Valley District Council ("MVDC") is the body exercising control over the purpose for which and the manner in which your personal data is processed.
Data Controller's contact details:
MVDC Pippbrook, Dorking RH4 1SJ. Telephone: 01306 885 001
Data Protection Officer:
Mr Tom Penlington (Solicitor): Telephone: 01306 879 354
The legal basis for and the purposes of the processing:
MVDC will only process your personal data if it is fair and lawful to do so. It will only be lawful for MVDC to process your personal data if one of the conditions in paragraph (A) below applies to the processing of your personal information.
(A) Conditions to make the processing of personal information lawful:
If your personal information is sensitive (or special category) personal data then one of the conditions in paragraph (B) immediately below must also apply.
(B) Conditions to make the processing of sensitive personal information lawful:
Sensitive (or special category) personal information has a specific definition in the GDPR. This means that your personal data will fall within one of the following categories: data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, or data concerning somebody's sex life (or sexual orientation).
Please note that there is a separate Privacy Notice available which will inform data subjects how their personal information will be processed by MVDC in its capacity as an employer.
What bodies this Privacy Notice will apply to:
A separate Privacy Notice is available in respect of processing by or for and on behalf of the Elections Registration Officer and Returning Officer (including processing by MVDC staff when performing such duties).
People who we process personal information about:
In addition to our residents we process personal information about the following:
Staff; Persons contracted to provide a service, and persons receiving a service; Claimants; Complainants, enquirers and their representatives; Professional advisers and consultants; Youths (for example in connection with MVDC's Youth Council); Carers or representatives of persons in need of specific services; Landlords and prospective landlords; Recipients of benefits; Witnesses; Offenders and suspected offenders; Licence and permit holders; Traders and others subject to inspection; People captured by CCTV images; Representatives of partner and other organisations
The purposes of the processing:
Personal information will be processed for a wide variety of reasons. The majority of the processing will be in connection with MVDC's functions (i.e., all of the obligations and powers to act (or omit from acting)) that MVDC must, or is able to do (or refrain from doing)).
The processing performed by MVDC in connection with its functions will sit within one of the following Service areas (some of which are internal Services, with a number of those Service functions covered by this wider privacy notice):
Benefits & Fraud
Community Safety & Wellbeing
Development Management & Planning Support
HR and Organisational Development
Information and Communications Technology
Policy and Performance
Regeneration and Investment
Strategy & Corporate Support
Data Processing and Data Sharing
MVDC may (or will) process your personal information where we have an obligation or a power to do so. Processing is defined very widely in the General Data Protection and in addition to disclosing the information to other persons (whether internally or externally) also includes, for example: collecting, holding, altering, consulting on, restricting, erasing or destroying. It will therefore apply, for example to the storing of your personal information on MVDC's systems in whatever media is used, for example electronic files, databases and e mails, hard copy files, photographs, audio (eg, the recording of your telephone calls when you contact MVDC), video (eg, the CCTV cameras in and around MVDC's Pippbrook Offices). Because the definition of personal data has changed, it will also apply to electronic information collected in respect of visitors to MVDC's website, and please refer to the cookies section at the end of this Privacy Notice.
In respect of telephone calls [to] MVDC, your call may be recorded and that recording may be kept for up to 6 weeks. The main reason why your call is recorded is to protect both parties to the call. If there is a dispute about the contents of the call, for example, then the recording may be referred to during the retention period to help resolve any disagreement. Callers to our main number 01306 885001 will hear a recorded message advising that calls may be recorded. If you have a dispute and need to obtain a copy of a call recording please contact firstname.lastname@example.org in the first instance.
People that we may disclose the personal information to include:
Internal or external auditors; Customers; Family, associates or representatives of the person whose personal data we are processing; The Charities Commission; Current past and prospective employers; Healthcare, social and welfare organisations; Educators and examining bodies; Providers of goods and services; Financial organisations; Debt collection and tracing agencies; MVDC's insurance company; Private investigators; Service Providers; Local Government, Central Government, and other bodies providing services on their behalf; The Ombudsman and regulatory authorities; Press and the Media; Professional advisers (eg, external solicitors and barristers) and consultants; Courts and Tribunals; Trade Unions; Political organisations; Credit reference agencies; Professional bodies; Survey and research purposes; Police forces and other law enforcement or prosecuting authorities; Housing associations and landlords; Voluntary and charitable organisations; Religious organisations; Data Processors (i.e., third parties who process personal information for and on behalf of MVDC (excluding MVDC staff)); Regulatory bodies; HMRC; Partner agencies,; Joint working bodies (eg, Southern Building Control Partnership in respect of information held on the systems of MVDC, Reigate and Banstead D.C. and Tandridge D.C.); Licensing Authorities; The Disclosure and Barring Service.
It is therefore important, that if you provide us with personal information about you that you keep this relevant (to the reason why your personal data is being processed by MVDC). Please do not provide any personal information that you consider is excessive or irrelevant (in the context of why your personal data is being processed by MVDC).
Members have three separate roles in respect of how they process personal data. These are as follows:
(i) MVDC Business: When Members process the personal data of their residents on MVDC business (eg, when processing personal data in their capacity as a member of an MVDC Committee or a Portfolio holder), then this processing will take place for and on behalf of MVDC, and so MVDC will be the Data Controller. If none of the other conditions apply that enable lawful processing (referred to at paragraphs [xxx] above (re personal data) and paragraph [xxx] below re sensitive personal data), then you will be asked for your consent to the processing. If you agree to consent to the processing then you can withdraw that consent at any time. You will be informed how to withdraw consent in the form (or other medium) at the same time as you are asked for consent.
(ii) business connected to an elected representative's political party: When the processing of personal information is performed for and on behalf of a political party, for example when campaigning at election time on behalf of a political party, such processing is entirely separate to MVDC. Please refer to the political party's Privacy Notice and Data Protection Policy for further information (see (iii) below for independent councillors).
(iii) Other matters: The individual member will be the data controller in respect of the processing of all other personal data processed by elected members (in that capacity); for example, responding to requests about pot holes, fly tipping and traffic issues, or where the elected member is an independent councillor. Members may, if they wish, use MVDC's General Privacy Notice and Data Protection and other relevant policies for this processing, or they may (at their discretion) use their own. Please contact the individual member concerned for further information. MVDC Councillors are often required to sit or are asked to sit on the governing committees (or similar) of external organisations. MVDC may invite persons within those organisations to participate in any such consultations. There is no requirement to respond to any such consultation, or to include any personal data within any such response. Where personal data is received in a response, this will be deleted/ destroyed within 2 years of receipt.
Further information on onward transfers:
MVDC will not transfer the personal data you have provided outside of the UK or European Union unless this is permitted in accordance with the General Data Protection Regulation or the Data Protection Act 2018.
How long the personal data will be kept for:
The personal data you have supplied will be destroyed in accordance with MVDC's Data Retention and Disposal Schedule.
Automated Decision Making:
MVDC will not routinely make decisions which affect your rights and freedoms using automated means alone. If automated decision making is being used, then further details will be provided on the specific notice for the relevant service.
Data Subject Rights:
From 25 May 2018 you will have some specific rights in respect of your personal data. The rights available to data subjects are set out below. Please note, these will not all apply in every situation. The rights available to you will be set out in the specific Privacy Notice for your service area, and/ or you will receive an explanation as to why any right that you would like to exercise does not apply:
Will the personal data be processed for a different purpose?
MVDC will not generally process the personal information about you for purposes that are not compatible with the reason why it was collected (and as referred to in the relevant Privacy Notice). There are, however, some exceptions where that processing is required or permitted by law.
MVDC uses Google Analytics software to collect information about how you use www.molevalley.gov.uk. MVDC does this to help make sure the site is meeting the needs of its users and to help us make improvements.
The cookies MVDC uses for this purpose are:
How do I prevent being tracked by Google Analytics?
If you are uncomfortable with this tracking, you can take the following actions:
Install the Google Analytics opt-out extension.
© 2018 Mole Valley, Pippbrook, Dorking, Surrey, RH4 1SJ.
Tel: +44 (0)1306 885001 Fax: +44 (0)1306 876821, 2018.