Devon County Council (DCC) is collecting and or processing your personal data as a Data Controller under Data Protection Legislation and our ICO registration number is Z6475582. This privacy notice concerns the processing of personal data that takes place as part of the Connect to Work Programme.
This notice explains what information we collect, why we collect it and how we keep it secure. It also explains your rights and our legal obligation. Should you wish to find out more about Devon County Council’s data protection policies please contact our Data Protection Officer.
We will notify you of any changes to this privacy notice
This privacy notice was last updated on 2 September 2025. If we use your personal data for any new purposes, updates will be made to the policy information and changes communicated, where necessary in accordance with current data protection legislation. Any queries relating to this privacy notice please contact the Data Protection Officer.
What information are we processing?
All the personal data that we collect for the purposes of monitoring and administering the Connect to Work Programme will be evaluated periodically. We collect information about you as provided to us and note that you may be asked to provide the following:
- Name
- Date of birth
- National insurance number
- Contact details (email address, postal address, telephone number)
- Gender
- Employment status
- Residency status
In addition to this some information is considered ‘special category data and needs more protection due to its sensitivity. This includes any information about an identifiable individual that can reveal their sexuality and sexual health, religious or philosophical beliefs, racial origin, ethnicity, physical or mental health, trade union membership, political opinion, genetic/biometric data.
As part of this activity, we may process special category data in relation to the following:
- Details concerning your health
Purpose of collecting or processing your personal data
We will collect and process the above data about you:
- For the purposes of administration in respect of your participation with the Connect to Work (CTW) programme.
- To communicate with you.
- To undertake reporting and research in relation to how well the CTW programme’s work.
- To determine your eligibility and suitability requirements to participate in the CTW programme.
- To ensure that the serviced delivered meet your need and are of the highest standards.
- To support you with the management of health via an Integrated Care System to improve your health and wellbeing;
- To better identify the support, you may require for the achievement of the CTW outcomes.
- To monitor your outcomes achieved as a result of the participation in the CTW
- To undertake analysis and evaluation related to employment support for CTW participants.
- To support you into employment, by sending your CV or application forms via email to necessary recipients, including employees.
- To enable you to access the UK Government Funds
The legal basis for us collecting your personal data
Where DCC is processing your personal data, we are doing so for the purposes of monitoring the Connect to Work Programme. The processing of your personal data is necessary for us to discharge our legal obligations to promote economic development throughout Devon. On this basis, we rely upon the following lawful conditions of the UK GDPR to process your personal data:
- Article 6(1)(e) – Processing which is necessary for the performance of a public task, carried out in the public interest.
- Article 9(2)(g) – Substantial public interest.
Recipients or categories of recipients that we may share your personal data with
DCC and our Delivery Partners may share your personal and special category data with the DWP, DWP Evaluation Team and other bodies as permitted by law to ensure that the Connect to Work programmes is being delivered appropriately.
We will use other organisations to either store personal data or use it to help deliver our services to you. Where we have these arrangements, there is always an agreement in place to make sure that the organisation complies with data protection law.
Sometimes we have a legal duty to provide personal data to other organisations.
If a person is the subject of Multi Agency Public Protection Arrangements (MAPPA) then we may need to share relevant information with the police, probation service and other law enforcement agencies to support those arrangements.
We may also share your personal data when we consider/believe that there is a good reason to do so, which is more important than protecting your privacy. This doesn’t happen often, but in these circumstances, we may share your personal data:
- to find and stop crime and fraud; or
- if there are serious risks to the public, our staff or to other professionals;
- to protect a child; or
- to protect adults who are thought to be at risk, for example if they are frail, confused or cannot understand what is happening to them.
- For all these reasons, the risk must be serious before we can override your right to privacy.
If we are worried about your physical safety or feel we need to take action to protect you from being harmed in other ways, we will discuss this with you and, if possible, get your permission to tell others about your situation before doing so.
We may still share your personal data if we believe the risk to others is serious enough to do so.
If this is the case, we will make sure that we record what personal data we share and our reasons for doing so. We will let you know what we have done and why, if we think it is safe to do so.
In addition to the above, we note that your personal and special category data may be shared with your employers, education providers, or other relevant third-party organisations to gather personal and special category data regarding your eligibility or your employment achievements within the programme, this may involve providing your name and national insurance number,
International transfers
DCC does not intend to transfer your personal data to countries outside of the scope of UK Data Protection Laws.
How long will we hold your personal data?
Your personal data will retained from the point it was collected from point of expression of interest and retained for 7 years after the final claim.
Your data protection rights
Under Data Protection Legislation, you have the right to obtain a copy of their personal records held by us, this is called a Subject Access Request (SAR).
Details of how to make a request can be found here
Further details on your rights under data protection legislation and how to exercise them.
Complaints
If you have any comments, queries or complaints about this privacy notice or the processing of your personal data please contact our Data Protection Officer.
Alternatively, if you are not happy with the way that DCC is handling your personal data, you are entitled to appeal to the Information Commissioners Office (ICO). The Information Commissioners Office enforces and oversees the Data Protection Regulations.
Contact details are below:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Automated decisions
DCC does not intend to make automated decisions about you.