What is the legal basis for processing your personal data?
The purposes for which the Council is processing your personal data will determine the legal basis for processing. Generally, the legal basis for processing by the Council as a public authority will be:
- To perform a function or provide a service required by statute (Article 6 (1) (e) GDPR);
- To comply with a legal obligation (Article 6 (1) (C) GDPR);
- Where the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (Article 1(b) GDPR);
- Where disclosure is in the vital interests of yourself or another person (Article 6 (1) (d) GDPR);
- With your explicit consent (Articles 6 (1) (a) and 9 (2) (a) GDPR).
In addition, the Council may process your personal information where it is in your legitimate interests, however, this does not apply where the processing relates to the Council’s statutory functions.
Where the purpose for processing your personal data has changed, you will be contacted and you will, where applicable, be advised at the point of collection or within one month of the Council receiving information, of the legal basis for the processing of your personal information.
In certain circumstances you may be able to withdraw your consent to processing. Please contact the Council’s Data Protection Officer (contact details provided below), who will explain if your consent can or cannot be withdrawn.