- This Website
- National Fraud Initiative
The General Data Protection Regulation 2016 and Data Protection Act 2018
Brentwood Borough Council may need to collect your personal data in order to provide you with council services, as well as for legally required purposes such as council tax and electoral registration.
Personal data is any data which can be used to identify a living individual. We will not pass your details to any other organisation without your consent unless there is a legal requirement for us to do so.
The GDPR and Data Protection Act 2018 state that all personal data must be:-
- processed lawfully, fairly and in a transparent manner;
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals;
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
- You have a general right of access to your personal data. Access requests must be in writing. There is no fee for such requests. In some cases, we may have to withhold data if it refers to other people who have not consented to disclosure, or if disclosure could cause damage or distress, or prejudice crime prevention or legal proceedings. Even if we cannot provide you with the data, we will still confirm what type of data we hold and why we hold it.
- If you think your personal data is inaccurate or out of date you can write to us explaining why and ask us to correct your data.
- You are entitled to know the purpose or purposes for which we hold and process your data.
- You are entitled to require us to delete your personal data if the continued processing of that data is not justified (e.g., legal proceedings, protecting the rights of another person or entity, or purposes that serve a substantial public interest).
- You are entitled to request information about the identities of third parties with whom we share your data.
- You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format that supports re-use and to transfer personal data from one controller to another, to store their personal data for further personal use on a private device; and have your personal data transmitted directly between controllers without hindrance.
- You have the right to object to the processing of your personal data for the purposes of direct marketing, research or statistical purposes (unless we do this for reasons of public interest).
- You have the right not to be subject to a decision based solely on automated processing which significantly affect them (including profiling). Such processing is permitted where: it is necessary for entering into or performing a contract with you, it is authorised by law, or you have explicitly consented andappropriate safeguards are in place.
You can find out more about Data Protection on the Information Commissioner's website.