Devon County Council (DCC) holds personal data relating to those who successfully applied for grants under the South West Forest Planting Scheme.
DCC is a data controller under Data Protection Legislation and our ICO registration number is Z6475582.
This notice explains what information we collect, why we collect it and how we keep it secure. It also explains your rights and our legal obligation. Should you wish to find out more about Devon County Council’s data protection policies please contact our Data Protection Officer.
We will notify you of any changes to this privacy notice
This privacy notice was last updated 1 April 2019. If we use your personal data for any new purposes, updates will be made to the policy information and changes communicated, where necessary in accordance with current data protection legislation. Any queries relating to this privacy note please contact the Data Protection Officer.
How will we use your personal data?
We are working with the Forestry Commission and DR company to commission an evaluation of the successfulness of the South West Forest Planting Scheme. To facilitate this, we would like to allow the Forestry Commission and DR Company to use your data to contact you. However, before we do this, we are writing to you to ask for your permission to use your details in this way.
We will only share the minimum amount of personal data to deliver this assessment and you have ultimate discretion as to whether to agree to this. If you do not give us permission to share your personal data, or if you do not respond to our communication, we will dispose of your personal data within two months.
What information do we hold?
We hold records about you which may include:
- Date of birth
- Telephone number(s)
- Email address(s)
- Your application details including its status
Why we want to use your personal data
We want to assess the effectiveness of the South West Forest Planting Scheme. To complete this assessment, it will be necessary for us to share personal data about you with Forestry Commission and DR Company. This information will be stored in accordance with the requirements of the Data Protection Act 2018 and the General Data Protection Regulation and will be shared securely once you have given us your permission.
Your information is never collected for direct marketing purposes and is not sold on to any other third parties. Information will be retained in line with the council’s corporate retention schedule and will be stored in accordance with your rights under data protection legislation.
The legal basis for us collecting your personal data
We will only use your personal data for the purposes outlined in this privacy notice with your consent. We will write to you and ask if you wish to participate in this evaluation. If you refuse to provide your consent, we will dispose of your personal data securely. If you do not respond, we will securely dispose of your personal data from our records within 2 months.
Your data protection rights
Under Data Protection Legislation, you have the right to obtain a copy of their personal records held by us, this is called a Subject Access Request (SAR).
We do not transport or share personal data outside of the European Union.
If you have any comments, queries or complaints about this privacy notice or the processing of your personal data please contact our Data Protection Officer.
Alternatively, if you are not happy with the way that DCC is handling your personal data, you are entitled to appeal to the Information Commissioners Office (ICO). The Information Commissioners Office enforces and oversees the Data Protection Regulations.
Contact details are below:
Information Commissioner’s Office