This privacy notice tells you how we use your information, the reasons for doing so, and also what rights you have in connection with the information we hold about you.
We may hold information about you in order to access training and development.
East Sussex County Council takes data protection seriously. Please be assured that your information will be used
appropriately in line with data protection legislation, will be stored securely and will not be processed unless
the requirements for fair and lawful processing can be met.
What information is being used?
The information we hold about you will be the information that you provide on registration plus details of any courses that you have taken. This may include:
- your name and email address
- the department or organisation that you work for
- your role
How will your information be used?
We hold your information so that we can provide training and development for you.
Some data is stored on a 3rd party database. This is administered via an internet based learning management system (LMS) which is hosted by an external supplier, Learning Pool. Any organisation commissioned by the Council will be under contractual obligation to comply with data protection legislation.
We aim to maintain high standards, adopt best practice for our record keeping and regularly check and report
on how we are doing. Your information is never sold for direct marketing purposes.
Our staff are trained to handle your information correctly and protect your confidentiality and privacy.
Your information is processed in the UK or in a country with an adequacy agreement with the UK.
What is the legal basis for processing your information?
We collect and hold your data in order to provide you with training and development. If you are a member of ESCC staff then it is part of the Council's contractual arrangement with you and processing is necessary to carry out obligations in the field of employment. For other users of our services we collect and hold your data as part of our a legitimate interests in providing training and development for you.
How long will your information be kept for?
All information processed by East Sussex County Council is subject to a retention policy which details how long we will retain the information. This is based on legal requirements and service needs.
Particular care is being taken to ensure that records relating to Children's Services and the safeguarding of vulnerable adults are not destroyed inappropriately and therefore any training records that relate to these services will be held for 35 years.
Any training records linked to Health & Safety and Occupational Health will be held for 50 years.
All other training records will be held for 7 years.
Sharing your information
We may also share your information if it is needed to protect you or someone else from harm.
Any sharing of personal data is always done:
- on case-by-case basis
- using the minimum personal data necessary
- with the appropriate security controls in place
- in line with legislation.
Information is only shared with those agencies and bodies who have a "need to know" or where you have consented to
the sharing of your personal data to such persons.
We may use the information we hold about you to assist in the detection and prevention of crime or fraud.
We may also share this information with other bodies that inspect and manage public funds.
Under data protection legislation, you have the right:
- to be informed why, where and how we use your information
- to ask for access to your information
- to ask for your information to be corrected if it is inaccurate or incomplete
- to ask for your information to be deleted or removed where there is no need for us to continue processing it
- to ask us to restrict the use of your information
- to ask us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information
- to object to how your information is used
- to challenge any decisions made without human intervention (automated decision making)
Please visit data subject rights for further details.
How to find out more or complain
Should you have any further queries on the uses of your information, please speak directly to our service:
this will be the manager of the service you have been dealing with.
To complain about the use of your information, please contact our Customer Services Team
or our Data Protection Officer.
Further information on making a complaint.
You can also contact the Information Commissioner's Office (ICO) for further information or to make a complaint:
Information Commissioner's Office
Cheshire SK9 5AF
Phone: 0303 123 1113 (local rate)
Report a concern on the ICO website