Skip to main content

Ceredigion County Council website

Corporate ICT Privacy Notice

The purposes for which we use your personal data

Ceredigion County Council’s ICT Service is responsible for the management and administration of the Authority’s IT systems, as well as management of the Authority’s IT infrastructure. In order to carry out these functions, we must process personal data as set out in the notice below.

Your information will be used to:

  • Creation of user account
  • Provision of support to member of the public, councillors, service users, users and service areas
  • Maintain logs of access/phone usage
  • Access to corporate website(s)
  • Provision of service area support
  • Provision of telephony services to the Authority
  • Business intelligence system reporting
  • Data quality management

The lawful basis for the processing of your information is

  • Article 6 e) processing is necessary to perform a task in the public interest or in the exercise of official authority

Where special category data is processed, the lawful basis shall be:

  • Article 9 (2) g) reasons of substantial public interest

The substantial public interest processing condition shall be:

  • Statutory and government purposes
  • Equality of opportunity or treatment

The enactments or rules of law relied upon are:

  • Computer Misuse Act
  • Safeguarding (Education Act, safety at school)

What if you do not provide personal data?

If you do not give us the information we need when we ask for it, this may result in our being unable to provide services to you, such as access to our network or IT infrastructure.

What type of information do we use?

We may collect the following types of personal data about you to deliver this service, depending on your circumstances:

  • Name
  • Address
  • Date of birth
  • Gender
  • Unique reference number
  • Telephone number
  • Email address
  • Employment
  • Images/photographs
  • Location data
  • IP address
  • Nationality
  • Ethnicity

Do we use information received from other sources?

To provide this service, we collect information directly from you but also receive information from the following sources:

  • Police forces
  • Welsh Government
  • Other local authorities
  • Other Council departments

The following types of personal data may be obtained, depending on your circumstances:

  • Name
  • Address
  • Date of birth
  • Unique reference number
  • Telephone number
  • Email address
  • Employment and education details
  • Images/photographs
  • IP address
  • Location data

Transferring your data abroad

In respect of the use of specific systems in the Authority’s Microsoft Estate, your data may be subject to international transfer.

Who your information may be shared with (internally and externally)?

We share your information with the following recipients/We may share your information with the following recipients depending on your circumstances.


  • Audit
  • Performance information team

There are also other specific situations where we may be required to disclose information about you, such as:

  • Where the Council is required to provide the information by law
  • Where disclosing the information is required to prevent or detect a crime
  • Where disclosure is in the vital interests of the person concerned