Privacy notice - Test and Trace data capture for East Sussex Libraries
Overview
This privacy notice covers the capture and use of library visitor names and telephone numbers or email address in support of the government mandated Test and Trace programme.
East Sussex County Council takes data protection seriously. Please be assured that your information will be used appropriately in line with data protection legislation, will be stored securely and will not be processed unless the requirements for fair and lawful processing can be met.
What information is being used?
For each library visitor we will collect a name and contact number or email address.
How will your information be used?
The information collected will be used solely to support the government mandated Test and Trace programme. In the event of a formal request, we will share this data with the NHS to assist in the tracing of any library visitors whom it is believed could have been in contact with someone who has tested positive for COVID-19.
We aim to maintain high standards, adopt best practice for our record keeping and regularly check and report on how we are doing. Your information is never sold for direct marketing purposes.
Our staff are trained to handle your information correctly and protect your confidentiality and privacy.
Your information is processed in the UK or in a country with an adequacy agreement with the UK.
What is the legal basis for processing your information?
’Article 6(1)(e) of GDPR provides a lawful basis for processing where:
“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”’.
How long will your information be kept for?
The information will be retained for 21 days.
Sharing your information
The information will be shared with the NHS, in the event of a formal request, to support the Test and Trace programme.
Any sharing of personal data is always done:
- on case-by-case basis
- using the minimum personal data necessary
- with the appropriate security controls in place
- in line with legislation.
Information is only shared with those agencies and bodies who have a "need to know" or where you have consented to the sharing of your personal data to such persons.
We may use the information we hold about you to assist in the detection and prevention of crime or fraud. We may also share this information with other bodies that inspect and manage public funds.
Your rights
Under data protection legislation, you have the right:
- to be informed why, where and how we use your information
- to ask for access to your information
- to ask for your information to be corrected if it is inaccurate or incomplete
- to ask for your information to be deleted or removed where there is no need for us to continue processing it
- to ask us to restrict the use of your information
- to ask us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information
- to object to how your information is used
- to challenge any decisions made without human intervention (automated decision making)
Please visit data subject rights for further details.
How to find out more or complain
Should you have any further queries on the uses of your information, please speak directly to our service:
Principal Library Officer
Learning and Online Services
Libraries and Information Service
Communities, Economy and Transport
East Sussex County Council
Tel: 01323 463882
Email: Steve Henson
To complain about the use of your information, please contact our Customer Services Team or our Data Protection Officer.
Further information on making a complaint.
You can also contact the Information Commissioner's Office (ICO) for further information or to make a complaint:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Phone: 0303 123 1113 (local rate)