The Service will take all reasonable steps to make sure the information we hold about you is kept secure and only available to those who have a legal right to see it. Personal data is any information relating to an identifiable, living individual. For example, this could be your name, contact details, date of birth or a photograph. We are really pleased with our DPO from The DPO Centre, who understood our needs and was able to translate them into a workable plan that has greatly assisted our business’s compliance journey. The DPO Centre’s advice and support has assisted us in ensuring that our compliance level has remained high despite the challenges that rapid growth presents. 7.2 Royal Voluntary Service also has an appropriate privacy statement for employees explaining how Royal Voluntary Service processes employee data.

What If I Want Information About The Council That Is Not Personal Information?

The Council has successfully passed the Cyber Essentials assessment and received its certificate 22nd of December 2022. To pass the Council had to demonstrate that we have implemented security controls and processes that are then tested by an external independent security company. Cyber Essentials is applicable to all organisations, of all sizes, and in all sectors including the private sector, universities, charities, public sector and not-for-profit organisations.

Accessing Your Information

You should design any system, service, product, and/or business practice to protect personal data automatically. With privacy built into the system, the individual does not have to take any steps to protect their data – their privacy remains intact without them having to do anything. These considerations lead into the second step, where you put in place actual technical and organisational measures to implement the data protection principles and integrate safeguards into your processing. The key is that you consider data protection issues from the start of any processing activity, and adopt appropriate policies and measures that meet the requirements of data protection by design and by default. ☐ We adopt a ‘plain language’ policy for any public documents so that individuals easily understand what we are doing with their personal data.

We will work with your team to understand your data processing profile and business practices, map your organisation’s data protection requirements, identify your strengths and weaknesses, and create an improvement plan. Therefore, Services and ALEOs analysing the personal data they use have been encouraged to look for alternatives to consent as the legal basis for processing. In most cases, we will instead be processing personal data because it is necessary for us to do so in order to carry out tasks in the public interest. ‘Consent’ is one of the legal grounds under which organisations, such as ourselves, can use to make sure processing personal data is lawful. Under the previous Data Protection Act 1998, we asked our citizens and service users for their consent, for us to process their personal data in a wide variety of situations.

However we may take longer to respond – by up to two months – if your request is complex. You have the right to ask us to stop using your personal information for any council service, but if this request is approved this may cause delays or prevent us delivering a service to you. Prior to any formal engagement, including the Data Protection Advisory Service, Northdoor conducts a workshop assessment to determine your existing compliance status, capability maturity and organisation-specific risks.

HEE will provide user licences and access to YAS for use of the Maytas system and will process and validate YAS learner data. Personal data “held” by the University includes personal data created or received as well as personal data held by third parties on behalf of the University. If we are processing your information based on you giving us consent to do so, you have the right to withdraw your consent at any time. Doing so may mean we are unable to provide the service you are hoping to receive and the implications of you giving or withdrawing your consent will be explained at the time. This will be based on either a legal requirement (where a law says we have to keep information for a specific period of time) or accepted business practice.

The Integrated Commissioning Unit (ICU) is a joint commissioning team for Portsmouth City Council and NHS Portsmouth Clinical Commissioning Group. This guidance is aimed specifically at researchers and study coordinators managing individual research projects, and will therefore be of interest to site and sponsor research managers supporting them. If you have questions about why you were in care or want to learn more about friends and family, a Subject Access Request (SAR) is unlikely to provide the information you are seeking.

You can make a Subject Access Request (“SAR”) to request information about the personal data we hold about you (free of charge, save for reasonable expenses for repeat requests). Under the GDPR any individual whose personal data is obtained, stored or processed by an organization can make a request to that organization to obtain a copy of their information. This page contains an overview of how the City of Doncaster Council uses information about you. It also contains links to other pages that set out how we use your information for specific services we provide (these are sometimes known as ‘privacy notices’ or ‘fair processing notices’). We want you to understand what information we collect and how it is used to provide you with a service. We operate a complex set of services that often mean we need to share your data with suppliers and partners who provide that service on our behalf.

When individuals apply to work for the council, we will only use the information they supply to process their application and to monitor equal opportunities statistics. Personal information about unsuccessful candidates will be held for six months after the recruitment process has been completed, it will then be destroyed securely. We hold the details of these people who have requested a service in order to provide it.

Almost every interaction you have with your customers involves them giving you their personal data, such as their names and addresses. Sharing data you hold in the right way and for the right reasons can help keep your business running, improve the services you offer and save you time. itservice-datenschutz ensures that we do not fall foul of the law due to the grey areas that sometimes exist. Many of these relate to other obligations in the UK GDPR, such as transparency requirements, documentation, Data Protection Officers and DPIAs. This shows the broad nature of data protection by design and how it applies to all aspects of your processing.