This privacy notice is designed to help you understand how and why our health and adult services participation and engagement team process your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The health and adult services participation and engagement team processes personal data in order to support the directorate and council, and at times other statutory partners, to carry out engagement and consultation activity. The team also directly supports a number of community engagement forums and regularly liaises with a wide range of community groups.
We have appointed Veritau Ltd to be our data protection officer.
Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
In order to deliver our Health and Adult Services participation and engagement service we will need to collect both personal and special category data, including: Personal data collected:
- name
- contact details such as email address, postal address, telephone number
- bank account details for processing expenses claims
- views expressed in the course of community engagement forums and other activities in the form of meeting minutes
The team will also collect certain special category data including:
- basic information on access needs such as wheelchair access or requirement for interpreters
- information on sex, ethnicity, age and disability may be gathered in the course of engagement activity e.g. via surveys, but this will be anonymous and not attributable to an individual
- personal information required in order to undertake risk assessments or similar to keep individuals safe
Why do we collect your personal information?
We need to collect this information to carry out the following tasks:
- deliver and report on engagement and consultation activities
- to inform service and policy development/changes
- communicate about meetings and other engagement activities/opportunities
- make travel arrangements
- process expenses claims
Who do we share this information with?
In the course of performing these duties, the Team may share your information with a number of agencies who are key to delivering these services. Generally, this information is in the form of either publicly available meeting minutes or anonymised feedback and reports of engagement and consultation activities. Your contact details will not be shared without your permission. Your contact details and bank account information will be shared with our financial services in order to process claims.
Within the council your information may be shared with:
- health and adult services
- central services
- children and young people’s services
- business and environmental services
Agencies your information may be shared with:
- clinical commissioning groups
- health providers
- social care providers
- voluntary organisations
How long do we keep your information for?
|
Data held |
Retention period |
|---|---|
|
Name and contact details |
Retain from year records created for 6 years |
|
Banking information |
Retain from year records created for 6 years. |
|
Meeting minutes |
Retain from year records created for 6 years. |
|
Information gathered in the course of engagement activities and Consultations |
Retain from year recorded for 6 years |
|
Reports on engagement and consultation activities |
Retain from year records created for 6 years. |
|
Information collected for Risk Assessments and Safeguarding |
Retain from date of last contact for 6 years |
What is our lawful basis for processing your information?
With regard to personal data:
- article 6(1)(c) – Legal obligation: the processing is necessary to comply with the law
With regard to special category data:
- article 9(2)(h) – Provision of health and social care
The legislations, policies and guidance that relate to this service includes, but is not limited to:
- care act 2014
- equality act 2010
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.