Tourism and Culture privacy notice

How Tourism and Culture use and share your data.

This departmental privacy notice should be read in conjunction with the Council's corporate privacy notice.

Using your data

Reasons for using your data:

• Statutory requirements e.g. reporting to Government
• Service delivery
• Service improvement and planning
• Prevention and detection of crime
• Financial transactions
• Research including consultations
• Communications and marketing
• To engage with local businesses and offer services, support, and advice
• To engage with job seekers and offer support and advice
• To promote economic regeneration
• To award grant funding
• Equality monitoring
• Applications received from prospective volunteers and the management of volunteers        

Why we are allowed to use your data

Legal obligation or public task under various UK laws including but not limited to:

• The Localism Act 2011
• The Equality Act 2010 Contract (leisure centre use, ticket sales) Consent (direct marketing, consultation, job creation, business support)
• Freedom of information Act 2000
• Environmental Regulation 2004
• Data Protection Act 2018
• UK General Data Protection Regulation 2016/679

Obtaining and sharing your data with others

We collect your personal data from you, or from others (e.g. Council staff in other departments or external organisations or individuals) who inform us of matters relevant to this service area.

We can share your data with:

• National regulators e.g. Information Commissioner’s Office, Ombudsman, Investigatory Powers Commissioner
• Judicial agencies e.g. Courts
• Police
• Archives services
• Elected Members and MPs (as your representative)
• Contractors providing IT services
• Funding bodies
• Other Council departments, including shared services
• Other Councils
• Other third parties with consent

Using your data to make automated decisions

We do not use your data to make automated decisions.

Data sent to countries outside of the EEA

Generally, the Council will not process your personal data outside of the UK or the EEA. In exceptions where we do, we will ensure equivalent data protection controls are in place.

Further information

To see what data is collected and how to exercise your rights to your data, please read our corporate privacy notice.