Privacy notice - Insurance
Overview
This notice explains what personal data (information):
- we hold about you when you contact the Insurance Team
- how we collect it
- how we use it
- how we may share information about you
We are required to give you this information under data protection law.
East Sussex County Council takes data protection seriously. Please be assured that your information will be used appropriately in line with data protection legislation, will be stored securely and will not be processed unless the requirements for fair and lawful processing can be met.
What information is being used?
In the course of handling your claim we collect the following personal information when you provide it to us:
- personal details – name, address, email address, telephone numbers, date of birth and National Insurance number (if claiming for personal injury)
- medical details (if claiming for personal injury) – GP name and address
- bank details (if required in order to settle claim)
How will your information be used?
We use your personal information to administer your claim and for the prevention and detection of fraud. East Sussex County Council is under a duty to protect the public funds it administers.
We aim to maintain high standards, adopt best practice for our record keeping and regularly check and report on how we are doing. Your information is never sold for direct marketing purposes.
Our staff are trained to handle your information correctly and protect your confidentiality and privacy.
Your information is processed in the UK or in a country with an adequacy agreement with the UK.
What is the legal basis for processing your information?
We rely on:
- legal obligation
- public task
- for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity for reasons of substantial public interest (equality of opportunity or treatment, preventing or detecting unlawful acts, protecting the public against dishonesty, preventing fraud, suspicion of terrorist financing or money laundering)
The provision of the information requested in our claim form is required from you to enable us to assess your claim for compensation.
If you do not provide the requested information we will be unable to process your claim.
How long will your information be kept for?
We will hold your personal information for up to 7 years in line with the Limitation Act 1980. In personal injury claims involving a child, the 7 year period does not start until the child reaches the age of 18 and so children’s personal information will be held for longer.
Sharing your information
We may disclose your information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our contracts with you; or to protect our rights, or our safety and/or the safety of our service users, or others.
We may also disclose your information to our suppliers and contractors to provide information to you on our behalf and or in order to fulfil our legal and statutory obligations.
We may share your personal data with our insurers and solicitors who may store it on their databases. Our insurers may search these databases when you make a claim, to validate your claims history or that of any other person or property likely to be involved in the claim.
Insurance services are provided by Orbis a collaboration between East Sussex County Council, Surrey County Council and Brighton & Hove City Council. Personal data will be shared by insurance team members of Orbis working on behalf of the aforementioned councils.
This authority is under a duty to protect the public funds it administers. In order to prevent and detect fraud, we may, in liaison with our insurers, share information about you with other organisations including the police, check and or share your details with fraud prevention and detection agencies or bodies responsible for auditing and administering public funds. If false or inaccurate information is provided and fraud is identified, details will be passed to fraud prevention agencies to prevent fraud and money laundering.
Any sharing of personal data is always done:
- on case-by-case basis
- using the minimum personal data necessary
- with the appropriate security controls in place
- in line with legislation.
Information is only shared with those agencies and bodies who have a "need to know" or where you have consented to the sharing of your personal data to such persons.
We may use the information we hold about you to assist in the detection and prevention of crime or fraud. We may also share this information with other bodies that inspect and manage public funds.
Use of third party organisations
East Sussex County Council may share your information with trusted external organisations to process your data on our behalf.
Your personal data will not be shared with any other third parties unless this is required to comply with a legal obligation.
Any organisation commissioned by the Council will be under contractual obligation to comply with data protection legislation.
Your rights
Under data protection legislation, you have the right:
- to be informed why, where and how we use your information
- to ask for access to your information
- to ask for your information to be corrected if it is inaccurate or incomplete
- to ask for your information to be deleted or removed where there is no need for us to continue processing it
- to ask us to restrict the use of your information
- to ask us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information
- to object to how your information is used
- to challenge any decisions made without human intervention (automated decision making)
Please visit data subject rights for further details.
How to find out more or complain
Should you have any further queries on the uses of your information, please speak directly to our service:
Email: Insurance
To complain about the use of your information, please contact our Customer Services Team or our Data Protection Officer.
Further information on making a complaint.
You can also contact the Information Commissioner's Office (ICO) for further information or to make a complaint:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Phone: 0303 123 1113 (local rate)