Fair processing notice - Data Protection Act

As a data controller, the Council will make every reasonable effort to ensure that we or any third party who may process data on our behalf, complies with the principles of the Data Protection Act when processing personal data.

The 8 Data Protection principles can be found below:

1. Personal data shall be processed fairly and lawfully.

2. Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.

3. Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.

4. Personal data shall be accurate and, where necessary, kept up to date.

5. Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

6. Personal data shall be processed in accordance with the rights of data subjects under this Act.

7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

8. Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

This notice is known as a ‘fair processing’ notice for the purposes of the Data Protection Act 1998 and intends to inform you of the types of personal data The Isle of Anglesey County Council  may hold and what it may do with it.

What types of information will Isle of Anglesey County Council be holding about me?

We may be holding such information as your name, address, date of birth or bank account details, but we could also be holding more sensitive types of information about you for example, information about your health, religion, sexual orientation or any criminal offences you may have committed. The type of information we hold will depend upon the service being delivered.

Personal data could be information which is held on a computer, in a paper record i.e. a file, but it can also include other types of electronically held information i.e. CCTV images.

The information we hold about you may be collected from a variety of sources for example, from you, your legal representative, partners and relatives or from other agencies.

What will Isle of Anglesey County Council do with my information?

The Isle of Anglesey County Council collects and holds personal information about members of the public, staff and those people that it carries out business with or provides services to. The Isle of Anglesey County Council will only use the information that it holds to comply with its statutory duties for example, the collection of council tax or to provide you with a service that you have requested or need.

In certain circumstances you may have consented to us collecting and holding your information for example, by signing up to a marketing list for a certain type of public event.

How will my personal data be protected?

The Isle of Anglesey County Council will make every effort to keep your information secure and will endeavour to comply with all relevant legislation including the Data Protection Act 1998 and applicable standards, for example the ISO27001 Information Security Standard. This means that we have to put measures in place to ensure that our computers and files are secure and that the information you give to us will be kept confidential.

Who will Isle of Anglesey County Council disclose my information to?

From time to time The Isle of Anglesey County Council is obliged by law to disclose personal information that it holds, for example to the Revenue and Customs, the Police, the Health Service or other agencies. Any disclosures made will only be done in accordance with the law.

What can I do if I want to find out what information Isle of Anglesey County Council holds on me?

A person is entitled, in accordance with the provisions of the Data Protection Act 1998, to ask for a copy of the information that a ‘data controller’ holds. This is known as a ‘Subject Access’ request. The Isle of Anglesey County Council has procedures in place so that people can make a subject access request.

What can I do if I think the information held on me is incorrect, or misleading?

The Isle of Anglesey County Council will ensure that it will keep its information as up to date as possible however, please tell us if you think that the information held about you is incorrect in any way. This will not only help us to keep you informed about vital services you may be entitled to, but will also ensure that we comply with our legal requirements.

The Data Protection Act 1998 gives you the right to have information blocked, rectified, erased, amended or deleted. However, in some circumstances we may be required by law to keep your information for a certain period of time so it may not always be possible to do so. Where this is the case we will tell you.

If you want to know more about the Data Protection Act, contact the Information Commission at:
www.ico.gov.uk