Bank holiday service changes
View details of the Easter bank holiday service changes, including bin collections.
This privacy notice is designed to help you understand how and why the Inclusion Service processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
North Yorkshire Council are a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The Inclusion service is responsible for carrying out duties under the children and families act 2014 in relation to statutory assessment processes, and the ongoing monitoring of children and young people who have an education, health and care plan. In order to provide this service effectively, the inclusion service needs to collect and process your personal and special category data.
We have appointed Veritau to be our data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
In order to deliver our inclusion service we will need to collect both personal and special category data, specifically:
We will collect the following personal data:
We will collect the following special category data:
We need to collect this information to fulfil our legal obligation with regard to the care of a child, specifically for the following purposes:
Some of the data we collect will be provided by parents on behalf of their child or children. However, we may also obtain personal information related to you and/or your child from the following sources:
In the course of performing our duties, we may share your information with a number of agencies who are key to delivering our service.
Internally within the council:
External agencies we share information with:
If we are informed that a child has moved into or outside of our local authority area: data relating to the child’s education, health and care plan will be shared between ourselves and the child’s new local healthcare provider as standard. This allows the child’s new healthcare provider to confirm if they can meet the child’s care and support needs.
Data held | Retention period |
---|---|
Data relating to children with special needs (EHCP Plans and/or other related information). | 25 years from the child’s date of birth |
We rely on the following lawful basis to process your personal data:
UK GDPR Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.
When processing special category data, we will rely on the following lawful basis:
UK GDPR Article 9(2) - processing is necessary for reasons of substantial public interest. Processing is in relation to specific needs and meets Schedule 1, Part 2 of the Data Protection Act 2018 as below:
UK GDPR Article 9 (2)(h) – processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services on the basis of domestic law. Meeting schedule 1, Part 1 of the data protection act 2018 a below:
The legislations, policies and guidance that relate to this service include, but is not limited to:
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.