Coronavirus privacy notice
This privacy notice is designed to help you understand how and why Richmondshire District Council is processing your personal data in relation to Coronavirus (Covid-19). This notice should be read in conjunction with the council’s corporate privacy notice and other purpose-specific notices which can be found at the end of this page.
Who are we?
Richmondshire District Council is a ‘Data Controller’ as defined by Article 4(7) of the General Data Protection Regulation (GDPR).
The council has appointed Veritau Ltd to be its data protection officer. Their contact details are:
Information Governance Office
Veritau Ltd
County Hall
Racecourse Lane
Northallerton
DL7 8AL
DPO@richmondshire.gov.uk
01609 532526
What personal information do we collect?
The council could collect:
- Name
- Contact details
- Address or other geographical marker
- Medical information, age or any other personal information which would mark a vulnerability to the virus
- Recent history of contacts with other individuals or any other personal information which could help prevent or trace transmission of the virus
- Any other personal information which the council is asked to be collected by the relevant health or government authorities to mitigate the risks associated with Coronavirus (Covid-19) this includes health risks, economic risks and social risks
Why do we collect your personal information?
The Coronavirus (Covid-19) situation means that to fulfil these responsibilities, including statutory obligations, the council may collect additional personal information where relevant to the prevention or mitigation of the impact of the virus to comply with the CCA.
This information is collected so the council can prioritise its services and enable it to plan and respond to the situation as it changes.
The council may also be required to collect and process personal information to mitigate the other impacts of Coronavirus (Covid-19) such as economic or social impacts.
The council may also need to process personal information to support NHS Test and Trace. As part of NHS Test and Trace, North Yorkshire County Council (NYCC) is gathering information from Public Health Teams, and, where required, Richmondshire District Council. The sharing of this data between appropriate organisations allows NYCC to verify contact details to ensure they are reaching the correct individual(s). For further information, please see Public Health England’s published privacy information as well as NYCC’s Covid-19 Privacy Notice.
NHS Test and Trace support payment
From 8 March 2021, if you are applying for the NHS Test and Trace support payment as the parent or guardian of a child or young person who has been asked to self isolate by their education/childcare setting, please note that we will check and verify the information provided about that child/young person with the education/childcare setting.
Who do we share this information with?
The Civil Contingencies Act places a duty on Category 1 responders to share information with Category 2 responders and other organisations in order to provide services in response to the pandemic. We may share information with others including, but not limited to, Category 1 and Category 2 responders, such as:
- Other council services, public bodies and authorities including North Yorkshire County Council and other district councils within North Yorkshire
- Central Government
- Emergency services
- NHS agencies
- Healthcare organisations
- Utility companies
- Voluntary organisations
How long do we keep your information for?
Information will be kept for as long as necessary for the purposes for which it is processed. The council will destroy or archive information when the risks from Coronavirus (Covid-19) have been appropriately reduced.
What is our lawful basis for processing your information?
The legal basis the council relies on will be determined by the specific process. However it is likely that the council will process this personal data under the legal basis of:
- Article 6(1)(c) - Legal Obligation and;
- Article 6(1)(e) - Public Task
- Article 6(1)(d) - Vital Interest of the data subject and other people
Some of the personal data processed by the council will be information defined as Special Category Data. In order to lawfully process this type of information, the council will rely on the following Article 9 conditions:
- Article 9(2)(g) - Reasons of substantial public interest (with a basis in law)
- Article 9(2)(c) - Vital Interest of the data subject where they are physically or legally unable to give consent
The legislations, policies and guidance that underpin this processing include, but are not limited to:
- Civil Contingencies Act (CCA) 2004 and Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005
- The Local Government Act 1972
- The Local Government Act 2000
Changes to this privacy notice
This privacy notice will undergo regular review as the situation evolves. If any changes are made, we will publish the updated version on our website.
For more information about how the council uses your data, including your privacy rights and the complaints process, please see our corporate privacy notice.