Privacy notice – Subject Access Requests & Individuals Rights Requests

Overview

This Privacy Notice covers information we gather in order to process members of the public making Subject Access Requests and also making Individuals Rights Requests under the Data Protection Act 2018.

East Sussex County Council takes data protection seriously. Please be assured that your information will be used appropriately in line with data protection legislation, will be stored securely and will not be processed unless the requirements for fair and lawful processing can be met.

What information is being used?

We will process your name, date of birth, email address, address, proof of identity, proof of address and signature.

Where applicable, we will process your proof of entitlement, birth certificates, courts orders and Will.

How will your information be used?

We will process the information you have provided to locate information we hold on our systems about you and then in order to contact you.

We aim to maintain high standards, adopt best practice for our record keeping and regularly check and report on how we are doing. Your information is never sold for direct marketing purposes.

Our staff are trained to handle your information correctly and protect your confidentiality and privacy.

Your information is not processed outside of the European Economic Area.

What is the legal basis for processing your information?

The Data Protection Act 2018 requires us to satisfy ourselves of your identity and where appropriate your legal entitlement to receive personal information.

How long will your information be kept for?

We will keep your name, date of birth, email address, address, proof of identity, proof of address, signature and details of your request for three years after the end of this financial year, which runs from 1 April to 31 March.

Where applicable, we will keep your proof of entitlement, birth certificates, courts orders and Will and details of your request for three years after the end of this financial year.

Your rights

Under data protection legislation, you have the right:

to be informed why, where and how we use your information
to ask for access to your information
to ask for your information to be corrected if it is inaccurate or incomplete
to ask for your information to be deleted or removed where there is no need for us to continue processing it
to ask us to restrict the use of your information
to ask us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information
to object to how your information is used
to challenge any decisions made without human intervention (automated decision making)

Please visit data subject rights for further details.