This privacy notice is designed to help you understand how and why North Yorkshire Council processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The economic development, business and partnerships function covers:
- economic development
- business growth
- community regeneration
- arts and culture
The role of the function is to promote and support businesses, support growth and unlock economic potential in North Yorkshire. Delivery of this service can take the form of advice, guidance, information, events, capacity building, grants and the delivery of projects.
The function works with a wide range of officers, members and partners at all levels, providing strategic advice and guidance, as well as delivering for every service within the council.
The council has appointed Veritau to be its data protection officer. Their contact details are:
Information Governance Office
Tel: 01904 552848
What personal information do we collect?
The council may collect the following personal information in relation to this service:
- email address
- telephone number
- business name
For the administration of grant schemes/projects, additional information may be required in relation to the business including:
- bank account details
- previous financial statements such as bank statements, accounts, cashflow
- business plan/feasibility studies
Why do we collect your personal information?
If requested, we will provide you with regular information and updates on news, events and relevant consultations within your interest. Also, to ensure you are kept aware of council and partners support and investment initiatives which are specific to your business needs.
Where your information has been provided to us in relation to a grant, this information is processed so we can make any relevant payments and provide a transparent audit trail for the spending of public funds. Any grant scheme utilising council funds will be subject to the council’s retention policy, however if funds originate with a third party, your details will be retained in accordance to any specific requirements of the funder. These details will be made clear within any grant funding agreement.
Who do we obtain your information from?
We only receive personal information either from yourself, a colleague or from a business you represent.
Who do we share this information with?
Your data is retained by the team and only used for the purposes outlined above.
The Regeneration Team and occasionally the Economic Development Team, when delivering its service often deals with individual, community and stakeholder details, and may share limited personal information with such parties as relevant to the business/project.
How long do we keep your information for?
Contact details for general communications
Details to be held until service is no longer provided or the individual directly requests for their details to be removed from the database/unsubscribes
Grant awards – council funds
All details will be retained for the current year plus the following three
Grant awards – externally sourced funding delivered and administered by the council
All details will be retained for as long as council is contractually obliged to keep the information for. Timescales may vary between funders
What is our lawful basis for processing your information?
North Yorkshire council relies on the following lawful basis to process your personal data:
For the processing of personal information in relation to general communications, the council relies on:
- UK GDPR Article 6(1)(a) - the data subject has given consent to the processing of his or her personal data for one or more specific purposes
For the processing of personal information in relation to other provisions such as grant awards, the council relies on:
- UK GDPR Article 6(1)(e) - processing is necessary for the performance of a task carried out in the public interest and in the exercise of official authority vested in the controller
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.