(Last Updated 24th May 2018)
Pembrey and Burry Port Town Council is the Data Controller and is committed to protecting the rights of individuals in line with the Data Protection Act and the General Data Protection Regulation.
The Council provides a wide range of community services. To provide some of these services we need to collect and use appropriate personal information; this may be collected on a paper or online form, by telephone, email, or by using CCTV or video footage including photographic and digital images, or in person by a member of our staff.
When you contact us
We may ask you for personal information such as your name, address, postcode, telephone contact details and so on. We will only use this information to provide you with the service you have requested or perhaps to satisfy a general query or complaint. If we need to use the information for any additional purposes or uses we will let you know when we collect it. Sometimes we have to share or confirm personal information with other parties; if we need to do this we will make it clear to you on the form, letter or email you complete to give us your information.
We will only share information when it is fair and lawful to do so.
We collect and hold your information to:
Any information you provide to the Council will be stored securely and used for the purposes stated when the information was collected.
We will use the information you provide in a manner that conforms to the Data Protection Act and the General Data Protection Regulation. We will endeavour to keep your information accurate and up to date and not keep it for longer than is necessary. In some instances the law sets the length of time information has to be kept. Your personal information will be stored in line with our retention schedule.
The Council’s Right to Process Information
The Council has a right to process The Council has a right to process information in accordance with the General Data Protection Regulation Article 6(1) (a), (b) and (e) and in particular where:
Processing of information
We will process your information for the following purposes:
We will not process your information using web services that are hosted outside the European Economic Area.
At no time will your information be passed on to organisations external to us for marketing or sales purposes or for any commercial use.
Telephone calls to the Council are not recorded.
Emails – if you email us we may keep a record of your contact and your email address and the email for our record keeping of the transaction. For security reasons we will not include any confidential information about you in any email we send to you, unless you consent to this.
We suggest that you keep the amount of confidential information you send us via email to a minimum and use our secure online form.
Any information provided through the Council’s contact page on its website and where you enquire about services or you wish to tell us something else such as making a comment, compliment or complaint will be used for the purposes which we reasonably believe it was provided for.
Where an individual has indicated that they would like to receive further information from the Council, this information is processed with their consent.
Where the Council is relying on consent to process personal data, the individuals have the right to withdraw their consent and can do so by contacting the Council’s Town Clerk through firstname.lastname@example.org
Right related to automated decision making and profiling
We do not use any form of automated decision making or the profiling of individual personal data. Furthermore, we will not pass any of your personal information on to third parties, other than those who either process information on our behalf, or because of a legal requirement.
Where possible we will only pass on information after we have ensured that sufficient steps have been taken to protect the personal data by the recipient.
We will not process any data relating to a child (under 13) without parental or guardian consent of the child concerned.
Disclosure of information
We will not disclose any information that you provide ‘in confidence’ to us, to anyone else without your permission, except in situations where disclosure is required by law, or where we have good reason to believe failing to share the information will put someone else at risk.
Access to Information
Individuals have a right to access their own personal information, to object to the processing of their personal information, to rectify, to erase, to restrict and to port personal information.
Requests and objections
Any requests or objections should be made in writing to the Council’s Town Clerk at :
Pembrey and Burry Port Town Council
Parc Y Minos Street,
Security of Information
Data Protection legislation requires the Council to keep information secure. This means that confidentiality will be respected and all appropriate measures will be taken to prevent unauthorised access and disclosure. Only members of staff who need access to relevant information will be authorised to do so. Information held in electronic form will be subject to password and other security restrictions, while paper files will be stored in secure areas with controlled access. If you use our website to provide us with your personal details, the webpages are protected by a digital certificate called a ‘Secure Socket Layer’. This is installed onto the web server to ensure that the information being transmitted is secure and to encrypt that information which makes it virtually impossible to intercept that transfer.
Where individuals are unhappy with the way in which their personal data has been processed, they may in the first instance contact the Council’s Town Clerk using the contact details above.
In the event that any complaint is not resolved then the issue may be taken to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
Information Commissioner’s Office – Wales
2nd floor, Churchill House
Telephone: 029 2067 8400