We are committed to protecting your personal information.
The council is the data controller for purposes of the Data Protection Act (2018), and The General Data Protection Regulation (EU) 2016/679 ("GDPR"), and is also registered as a data controller with the Information Commissioner’s Office (ICO).
As a data controller, we have a responsibility to make sure you know why and how your personal information is being collected. This is according to relevant data protection law.
The primary laws which govern how Brighton & Hove City Council collects and use personal information (known as data) about you are:
Why we collect your data
We will be collecting your data to:
- keep you updated on your order for the Smile PSHE project resources, and keeping you updated about the Smile PSHE project
- support and encourage active and sustainable travel to and from schools in Brighton & Hove
The SMILE project is funded by the DfT (Department for Transport) Capability Fund and is a teachers’ lesson and resource pack aimed at helping to teach infant school children the value of active travel in terms of physical and mental wellbeing.
Our legal basis for collecting your data
GDPR Article 6(1) (e)The lawful basis for processing this data is Performance of a Public Task carried out in the public interest.
Under Section 108 of the Transport Act 2000 and Part 2 of the Local Transport Act 2008, Brighton & Hove City Council is required to show it has fulfilled the conditions as to the use of the DfT (Department for Transport) Capability Fund Revenue Funding Grant to support access to education.
GDPR Article 6 (1) (a) Consent
What data we collect from you
Personal data
Personal data we collect includes:
Personal work emails are optional and are not requested or required for a school to use the resource, but some teachers will prefer this method of communication.
Who we share your data with
We will only make your information available to those who need to know, so they can perform their council role.
We will not share your information with any other third party, unless we are under a legal obligation to do so.
How long we will keep your data
We will hold your data for duration of this project until the end of March 2023.
How we store your data
We will store your information on electronic databases, document management systems and on paper records.
How we protect your data and keep it secure
Examples of the security measures we use are:
- training for our staff, making them aware of how to handle information securely, and how and when to report when something goes wrong
- encryption when data is being sent, meaning we scramble information so other people can’t read it without access to an unlock key
- pseudonymising your data, where possible - this means we will remove your identity so the people working with your data will not know your identity
- controlling access to systems and networks - this stops people who are not allowed to view your personal information, from getting access to it
- regular testing of our technology and ways of working, including keeping up to date on the latest security updates (called patches)
Transferring your data outside the European Economic Area
Your data is not processed outside of the European Economic Area.
Your rights
Check your personal information rights.
Work email addresses are collected with participants’ consent, which may be withdrawn by contacting the fund manager.
To do this you can:
How to get advice or make a complaint
If you want to discuss any of your data protection rights, you can:
Information Commissioners Office (ICO)
The ICO is the national regulator with responsibility for ensuring compliance with data protection.
We would prefer you to contact us first with any concerns, but you can also contact the Information Commissioner to make a complaint:
- on their website
- by phone: 0303 123 1113
- by post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Changes to this privacy notice
This privacy notice will be subject to review when there is a change.
The council is the data controller for purposes of the Data Protection Act (2018) and The General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO).
