Communications privacy notice for the use of the Orlo Social Media Platform

This privacy notice is designed to help you understand how and why the communications team, processes your personal data. This notice should be read in conjunction with our corporate privacy notice.

Who are we?

North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).

The communications team works with all council services to deliver, and advise on, communications including media relations, internal communications, campaigns, marketing, corporate identity, public information and engagement. The head of communications leads the service.

The council has appointed Veritau to be its data protection officer. Their contact details are:

Information governance office,
West Offices,
Station Rise,
North Yorkshire,

Tel: 01904 552848

What personal information do we collect and why do we require it?

The communications team processes personal data sent by members of the public seeking answers to queries via social media. The team does not routinely collect special category personal data although residents may share this with us if it relates to a question they would like answered.

Who do we share this information with?

Information is automatically shared with our social media management platform, Orlo.

How long do we keep your information for?

Data held

Data provided by members of the public in order to answer queries.

Retention period

Members of the public can delete this data at any time using their personal social media accounts, this is then replicated in Orlo.

If members of the public do not delete this data themselves, it will be deleted from Orlo 4 weeks after our contract with them ends.

What is our lawful basis for processing your information?

We rely on the following lawful basis to process your personal data:

  • Article 6(1)(e) - Public Task (DPA Section 8 - Public interest or official authority

When processing special category data, the council will rely on the following lawful basis:

  • Article 9(2)(g) - substantial public interest  - DPA Schedule 1 Part 2 - substantial public interest) Conditions: 6 - statutory and government purposes

For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.