The personal data that we collect will normally be kept on the council's own servers in the United Kingdom.

Sometimes, information may be held on 'third party' - meaning other organisations of company - servers which are outside of the European Economic Area EEA e.g. where the council is using a web-based service to send surveys or newsletters to its service users.

Information about you will only be held on third party servers outside of the EEA where either:

• the European Commission has made a decision that they are happy that the country where the information is being sent has satisfactory protections on personal data (called an adequacy decision), or;
• the council itself is able to provide suitable protections and make sure that you still have all your rights about your personal data.