We created this privacy notice in September 2020 and will keep it under review.
If you have any questions about this Privacy Notice contact the council’s Data Protection Officer.
When we use your personal data, City of York Council (CYC) complies with data protection legislation, and is the registered ‘Controller’. Our data protection notification is registered with the Information Commissioner’s Office (ICO), reference Z5809563.
View the privacy information for all of the City of York Council (CYC).
Collecting personal data
We will collect your personal information when you apply for a self-isolation payment and this privacy notice explains how we will use it.
- only ask you for the information that is necessary to consider your application for this payment
- protect it and make sure nobody has access to it who shouldn’t
- ensure you know if you have a choice about giving us information
- make sure we don’t keep it for longer than is necessary
We ask that you:
- give us accurate information
- tell us as soon as possible of any changes
- tell us as soon as possible if you notice mistakes in the information we hold about you
If you don't provide the personal information requested by us, we may not be able to provide you with the information you need or to process your application.
Using personal data
The personal information you give us will be used to process your application as you have requested.
The information we collect will be included in reports and returns to central government where required. Any information for publication or use outside of the council staff who need to use it to process your application will be anonymised and will not identify any individuals.
Our legal basis for using personal data
We collect and use your personal data as you have applied for a self isolation payment, and we need this information to process your application.
The council relies on your consent to access you records contained in the NHS Test and Trace data system, known as CTAS, for the purposes of confirming your eligibility for this scheme of payment.
Sharing personal data
We will only share your personal information with other council services as appropriate, for example with our Finance Services.
To validate your bank account details, we need to share relevant information you've given us with TransUnion. This will be used to ensure your support payment is paid to the correct bank account and to help prevent fraudulent use of support payments.
This is not a credit check and won't impact your credit rating.
For more information on how TransUnion may use your data, please visit https://www.transunion.co.uk/legal-information/privacy-centre.
Your data will not be shared with other entities outside of the council for any purpose, and you may withdraw your consent at any time by contacting the Data Protection Officer. Please be aware that if you withdraw your consent, you will no longer be entitled to the payments under this scheme.
Sharing data under Data Protection legislation
We may use the data you provide and information held by the council about you or your household to help process your application and to prevent and detect fraud, including through data matching exercises.
We may share your information with external agencies including the police and other government bodies and councils where the law allows or requires us to do so for a specific purpose and to participate with government data matches.
We may be required or permitted, under data protection legislation, to disclose your personal data without your explicit consent, for example if we have a legal obligation to do so, such as for:
- law enforcement
- fraud or tax investigations
- regulation and licensing
- criminal prosecutions
- court proceedings
Retaining personal data
We will keep your personal data for 7 years. We will then delete or destroy it securely.
At the end of the retention period, we may pass any relevant information to the City Archives where it is required or appropriate to do so.
Further processing of personal data
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we'll provide you with a new notice.
The new notice will:
- explain this new use before we start the processing
- set out the relevant purposes and processing conditions
Where and whenever necessary, we'll seek your consent to the new processing, if we start to use your personal data for a purpose not mentioned in this Privacy Notice.
Your rights relating to personal data
When we collect your personal data we'll tell you how we are going to use it. Where we process your personal data, you have a number of rights under data protection law.
To find out about your rights, you can go to the Information Commissioners Office (ICO) website.
If you have any questions about this privacy notice, want to exercise your rights, or if you have a complaint about how your information has been used, please contact us on email: email@example.com, on telephone: 01904 554145, or write to:
Data Protection Officer
City of York Council