This Privacy Notice is designed to help you understand how and why the Business and Environmental Services directorate processes your personal data. This notice should be read in conjunction with our corporate privacy notice and the Ministry of housing, communities and local government’s privacy notice.
Who are we?
North Yorkshire Council and the ministry of housing, communities and local government (MHCLG) will be acting as joint ‘data controllers’ as defined by article 4(7) of the UK General Data Protection Regulation (UK GDPR). The business and environmental services directorate are administering the UK community renewal fund on behalf of North Yorkshire council.
The council has appointed Veritau Ltd to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
The ministry of housing, communities and local government's data controller can be contacted at: dataprotection@communities.gov.uk
What personal information do we collect?
- name
- contact telephone number
- email address
- postal address
Why do we collect your personal information?
Your personal data is being collected as an essential part of the UK community renewal fund bidding process, so that the ministry of housing, communities and local government and North Yorkshire Council can contact you regarding your bid and for monitoring purposes. The ministry of housing, communities and local government and North Yorkshire Council may also use it to contact you about matters specific to the Fund.
North Yorkshire Council and the ministry of housing, communities and local government may wish to publicise the use of this fund which may include the name of your organisation.
Who do we share this information with?
As part of the process of selecting and monitoring the UK community renewal fund North Yorkshire Council will share you data with relevant parties to enable us to assess the bids:
- local enterprise partnership
- consultants working for North Yorkshire Council
- city of York council
- east riding of Yorkshire council
- consultants employed
The data will be shared with ministry of housing, communities and local government who will share your personal data with relevant government departments including:
- department for work and pensions (DWP)
- her majesty’s treasury (HMT)
- cabinet office
- office of the secretary of state for Scotland
- office of the secretary of state for Wales
- Northern Ireland office
- department for education
- department for business, energy and industrial strategy (BEIS)
- department for environment, food and rural affairs (DEFRA)
- department of international trade
The data may also be shared with departments in the devolved administrations, and contractors where they are used for monitoring purposes, to evaluate the programme. Their contract will set out what they are permitted to do with personal data.
How long do we keep your information for?
Your personal data will be held by both North Yorkshire Council and the ministry of housing, communities and local government for up to two years from the closure of the bidding process. This is currently estimated to be July 2023. As part of the monitoring process, the ministry of housing, communities and local government and North Yorkshire Council will contact you regularly to ensure our records are up to date.
|
Data held |
Retention period |
|---|---|
|
Name, contact telephone number, email address, postal address |
Estimated July 2023 for successful bids and unsuccessful bids |
|
Finance information |
Retained for 6+1 years |
What is our lawful basis for processing your information?
North Yorkshire Council will process all data according to the provisions of the data protection act 2018 and the UK General Data Protection Regulation 2018 (UK GDPR) and all applicable laws and regulations relating to processing of personal data and privacy, including, where necessary, the guidance and codes of practice issued by the information commissioner and any other relevant data protection regulations (together “the data protection legislation (as amended from time to time)”).
The data protection legislation sets out when we are lawfully allowed to process your data.
The lawful basis that applies to this processing is Article 6 (1) (e) of the UK GDPR; that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; data being processed belongs to business contacts processed during the routine course of business of a government department.
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.