Consent and retention
Consent for processing personal data
The council provides limited services which will require your consent to process your personal data. This could include for example leisure centres, library membership or other recreational groups. In these situations, the legal basis for processing your personal data will be that you have given consent to the processing of your personal data for one or more specific purposes.
In circumstances as described above, your consent to process your personal data must be ‘specific, informed, active and affirmative’. This means it must be clear and freely given by you after we explain what further processing we would like to do with your data. You can therefore make an informed decision about whether you consent to the processing or not.
You are in control, and you can withdraw your consent at any stage by contacting our Data Protection Officer (DPO) using the details at the bottom of this page. Any processing that has taken place up to the time that you withdraw consent will be considered lawful.
Consent for special category personal data
We will require your ‘explicit consent’ to process sensitive or ‘special categories of personal data’. This means your consent must be very clear and specific, and again you can withdraw your consent at any stage by contacting our DPO.
Where the council seeks to disclose sensitive personal data, such as medical details, to third parties, we will do so only with your prior explicit consent.
There may be occasions where we may have to disclose your personal data if it is required or permitted by law, for example in relation to crime prevention/detection. In these cases, we do not require your specific or explicit consent to share your your personal data.
Recording or managing consent
Once a citizens’ consent is obtained we will keep a record of when the citizen consented, the information they were provided with prior to consent and how they consented.
Consent is part of your ongoing relationship with our citizens and will therefore be managed appropriately. The consent will be reviewed periodically to ensure it remains appropriate, and, as previously stated, citizens have the right to withdraw their consent at any stage.
Children’s data
When relying on consent for processing a child’s data, we will make sure that the child understands what they are consenting to. We do not exploit any imbalance of power in the relationship between us.
Retention
We will only keep your personal data for as long as necessary and in accordance with our retention schedule. When your personal data is no longer needed it will be securely deleted, except where such retention is necessary for compliance with a legal obligation we have, or to protect your vital interests or the vital interests of another person.
Page last updated: 1 May 2024
