Privacy notice: 'Our future' consultation
The council is the data controller for the consultation on the Council Plan 2023-28 also known as ‘Our Future’ consultation.
About this privacy notice
The purpose of this privacy notice is to tell you how the council will process your personal data for the purpose to deliver the ‘Our Future’ consultation. You have rights concerning how your data is collected and used for this purpose. This privacy notice informs you here what those rights are and how you can exercise them.
The council is committed to protecting the privacy and security of your personal data.
The council is only allowed to use, gather, and share personal information where we have an appropriate legal basis to do so. We only collect and processes personal information to fulfil our legal and official functions. We will only use personal information when the law allows us to and where it is necessary and proportionate to do so.
The identity and contact details of the council’s data protection officer
The council has appointed a data protection officer (DPO) to help ensure that it fulfils its legal obligations when processing personal data.
You can contact the DPO by email at DPO@anglesey.gov.uk
What personal data we are collecting and why
Your personal data is being collected and used to deliver the ‘Our Future’ consultation. We may also use your personal data to contact you about related matters.
How we use your personal data
The council collects your personal data in order to administer a mailing list to keep you informed of any future consultations on behalf of the Isle of Anglesey County Council.
Lawful basis for processing the data
We are using the following lawful basis under UK GDPR to process personal data:
Article 6(1)(a) of the UK GDPR – the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
Sharing your personal data
The council may share your data will other external parties where it is required to do so or it is lawful and appropriate to do so.
Please note that where we may share your data externally, that organisation will take on responsibility for your data at that point, and you should refer to their own privacy notice for details on how they will process your data.
Your rights as a data subject
The data being collected is your personal data, and you have rights that affect what happens to it. You have the right to access and obtain a copy of the personal data that the council holds about you and to ask the authority to correct your personal data if there are any errors or it is out of date. In some circumstances you may also have a right to ask the council to restrict the processing of your personal data until any errors are corrected, to object to processing or to transfer or (in very limited circumstances) erase your personal data.
If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the data protection officer as indicated above.
You can obtain further information about these rights from the Information Commissioner’s Office https://ico.org.uk/ or via their telephone helpline 0303 123 1113.
Is any personal data sent overseas?
No.
Automated decision making and profiling
No decision will be made about individuals solely based on automated decision making (where a decision is taken about them using an electronic system without human involvement) and which has a significant impact on them.
Storage, security, and data management
The council has a duty to safeguard and ensure the security of your personal data where we process this.
We do that by having systems and policies in place to limit access to your information and prevent unauthorised disclosure, accidental loss, or alteration of your data.
We have also procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long will the council retain the personal data?
The council will retain the data for as long as there is a legitimate business purpose for retaining the data, namely operating the consultation mailing list.
Personal data will be disposed of securely within one month once notice to unsubscribe from the mailing list is received via the Govdelivery software platform (Granicus).
Complaints and more information
When we ask you for information, we will keep to the law, including the Data Protection Act 2018 and UK General Data Protection Regulation.
If you are unhappy with the way the council has acted when using your personal data, you can make a complaint by contacting the Data Protection Officer.
If you are still not happy, or for independent advice about data protection, privacy and data sharing, you can contact:
The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Telephone: 0303 123 1113 or 01625 545 745
Web: https://ico.org.uk/
Published 20 September 2022
Last updated 20September 2022