Corporate ICT Privacy Notice
The purposes for which we use your personal data
Ceredigion County Council’s ICT Service is responsible for the management and administration of the Authority’s IT systems, as well as management of the Authority’s IT infrastructure. In order to carry out these functions, we must process personal data as set out in the notice below.
Your information will be used to:
- Creation of user account
- Provision of support to member of the public, councillors, service users, users and service areas
- Maintain logs of access/phone usage
- Access to corporate website(s)
- Provision of service area support
- Provision of telephony services to the Authority
- Business intelligence system reporting
- Data quality management
The lawful basis for the processing of your information is
- Article 6 e) processing is necessary to perform a task in the public interest or in the exercise of official authority
Where special category data is processed, the lawful basis shall be:
- Article 9 (2) g) reasons of substantial public interest
The substantial public interest processing condition shall be:
- Statutory and government purposes
- Equality of opportunity or treatment
The enactments or rules of law relied upon are:
- Computer Misuse Act
- Safeguarding (Education Act, safety at school)
What if you do not provide personal data?
If you do not give us the information we need when we ask for it, this may result in our being unable to provide services to you, such as access to our network or IT infrastructure.
What type of information do we use?
We may collect the following types of personal data about you to deliver this service, depending on your circumstances:
- Name
- Address
- Date of birth
- Gender
- Unique reference number
- Telephone number
- Email address
- Employment
- Images/photographs
- Location data
- IP address
- Nationality
- Ethnicity
Do we use information received from other sources?
To provide this service, we collect information directly from you but also receive information from the following sources:
- Police forces
- Welsh Government
- Other local authorities
- Other Council departments
The following types of personal data may be obtained, depending on your circumstances:
- Name
- Address
- Date of birth
- Unique reference number
- Telephone number
- Email address
- Employment and education details
- Images/photographs
- IP address
- Location data
Transferring your data abroad
In respect of the use of specific systems in the Authority’s Microsoft Estate, your data may be subject to international transfer.
Who your information may be shared with (internally and externally)?
We share your information with the following recipients/We may share your information with the following recipients depending on your circumstances.
Internally
- Audit
- Performance information team
There are also other specific situations where we may be required to disclose information about you, such as:
- Where the Council is required to provide the information by law
- Where disclosing the information is required to prevent or detect a crime
- Where disclosure is in the vital interests of the person concerned