Who is collecting and using your personal data?

Devon County Council will act as a ‘data controller’ for any personal data that you provide to us when making a request under the Data Protection Act 2018, General Data Protection Regulation, Environmental Information Regulations 2004, and or Freedom of Information Act 2000 (information request). As such, we will ensure that the data you give us is processed in line with our organisation’s Data Protection Policies and in line with your rights under the EU General Data Protection Regulations and any other laws enacted in the UK which govern the processing of personal data.

Should you wish to find out more about Devon County Council’s data protection policies please contact our Data Protection Officer.

Please note that failure to provide your personal data may affect the ability of the Council to effectively respond to your request.

For more information about your rights and our obligations under data protection laws please see our Information governance privacy notice.

Why are we collecting your personal data?

We are collecting your personal data to help us to respond to your request. The processing of your personal data is necessary to enable us to comply with the legislation relevant to your request. We will be processing your personal data with your consent.

You should be mindful that if you withdraw your consent, the Council may not be able to respond to your information request.

Who will we share your personal data with?

To enable us to respond to your information request, it may be necessary for us to share your name and other identifying information with other services within the Council. The Council will not share your personal data outside of the Council, unless we have a lawful reason to do so.

How long will we hold your personal data?

We will retain your personal data for only as long as is necessary, and in line with our organisation’s record retention schedules.

Exercising your rights

Under the Data Protection Act 2018 and the EU General Data Protection Regulations you have the following rights:

The right of access to your own personal data
The right to request rectification or deletion of your personal data
The right to object to the processing of your personal data
The right to request a copy of the information you provide us in machine readable format
The right to withdraw your consent to any processing that is solely reliant upon your consent
Should you wish to exercise any of your rights, you should contact the Data Protection Officer.

Your right to complain

In the event that you wish to complain about the way that your personal data has been handled by Devon County Council, you should write to the Data Protection Officer and clearly outline your case. Your complaint will then be investigated in accordance with the Council’s customer feedback procedure. If you remain dissatisfied with the way your personal data has been handled, you may refer the matter to the Information Commissioner’s Office whose contact details are below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email: casework@ico.org.uk