Below we have given some information on the rights you have about your personal data and how to use those rights. Please note that not all your rights can be used in all situations and there are some legal reasons why your rights might not be able to be used. These legal reasons are called 'exemptions'.
If you ask us to do something with your data, we will usually reply to you within one month, but we may need three months if you ask for something that takes a long time or if you have asked for a few things. We may ask for something to help us to know for certain you are who you say you are (e.g. a passport, etc.). This is to make sure that your personal data is not given to any person who has no right to receive it.
We will not usually charge you money for using these rights; however we may charge you a reasonable fee if what you are asking has no basis in fact or would take a very long time to do, or where you are asking for more copies of what you have already asked for.
How we manage your request can be found in our Data Protection Policy and more information your rights can be found at the Information Commissioner's Office's website.
When we collect your personal data, we will provide you with a privacy notice which will tell you details about how we use your personal data, including why and how we collect and use your personal data, who we share the information with, and our lawful basis for collecting and using the information.
You have the right to find out if we are holding or using personal data about you. If we hold your personal data, you have a right to access to that personal data and some other details about our use of that personal data. You can make a subject access request online.
You can ask us to change your personal data if you think part of it is wrong. We may not always be able to change or remove that data, but we will correct anything that is wrong if it is only factual data and we may include your comments in the record to show that you disagree with it. Where your data has been shared with others, we will do what we can to make sure that who we have shared your data with also corrects their information where they can. Please also see "Your right to ask us to restrict our use of your personal data" below, which may be useful if you have asked us to correct any personal data and we are still looking into it. You can make a rectification request online.
You can ask us to erase (delete) your personal data where:
Where your personal data has been shared with others, we will do what we can to make sure that who we have shared your data with also erases your data where they can.
Please note that there are some legal reasons why your right to be forgotten might not be able to be used. These legal reasons are called 'exemptions'. You can make a request to be forgotten online.
You have the right to object to our use of your personal data. You can object if you believe we are using your data for either of the following reasons;
When you object, you must give good reasons why you do not think we should use your personal data that must be specific to you, and we must stop using the data unless we can prove that we have a very strong reason for using your personal data which outweighs your interests, rights and freedoms, or we need to use the data to put together, use or defend against a legal claim. You can make an objection online.
You have the right to ask us to restrict our use of your personal data so that we may only use it for reasons you have said we can use it for, for legal claims, for the protection of other people's rights, and for reasons of important public interest.
You can ask us to restrict our use of your personal data where:
Where your data has been shared with others, we will do what we can to make sure who we have shared your data with also restricts their use of your data where they can. Where we have restricted our use of your data, we will tell you before we stop restricting our use of your data.
You can make a request for a restriction online.
You have the right to ask for your personal information to be given back to you or another company or organisation of your choice who are providing a service to you. This is called data portability. The information must be presented to you in a way often used by people, such as a pdf file.
This right can only be used if we're only using your data because you have told us we can and if processing your data is carried out by automated means (i.e. by a computer).
This right will most likely not apply to most of the services that the Council provides for you. You can make a request to have your personal data sent to somebody else online.
You have the right not to have a decision made about you based only on automated processing (i.e. decisions made by a computer) which has a legal effect on you. This includes the right to have these decisions explained to you and the right to question the automated decisions that have been made.
See our complaints procedure page for details of how to complain.
As well as our own complaints procedure, if you are worried about how we have used your personal data, then you have the right to complain to the Information Commissioner's Office, by getting in contact with them: