North Yorkshire education services privacy notice

This privacy notice is designed to help you understand how and why North Yorkshire education services (NYES) processes your personal data. This notice should be read in conjunction with our corporate privacy notice and other purpose specific notices which can be found at the end of this page where applicable.

Who are we?

North Yorkshire council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). We have appointed Veritau Ltd to be our data protection officer. Their contact details are:

Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA

Email: infogov@northyorks.gov.uk

Tel: 01904 552848

What personal information do we collect?

The amount of personal data we collect is very limited and only includes information relating to your job role which includes your job title, work address, email and telephone number.

Why do we collect your personal information?

We collect this data in order to keep you up to date with any changes to services you purchase from us and, where you have requested, we will also use this data to provide you with relevant news from NYES and developments within the business.

Who do we share this information with?

This information will only be used by NYES and will not be passed to any third parties.

How long do we keep your information for?

Information will be held on our system for a period of five years. After this time, we will ask you to review your record and ensure details are still correct.

What is our lawful basis for processing your information?

The information we collect is processed as part of your contract with us regarding the services you have purchased and so that we can keep you informed about that service.

Where you have requested that we keep you up to date with relevant news this processing will be based upon consent.

Where we contact you with information regarding our services that you have not specifically requested, your information is being processed under the legitimate interests basis.