Read our privacy notice for information on how we collect, store and process your data.
The council is the data controller for purposes of the Data Protection Act (2018) and The General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO).
Brighton & Hove City Council is committed to protecting your personal information. As a data controller, we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection laws.
The primary laws which govern how Brighton & Hove City Council collects and uses personal information (known as “Data”) about you are:
However, City Infrastructure is also subject to specific other laws which define when and for what purposes it can use your personal data.
The engagement process will help inform detailed design and levels of support for projects carried out by Brighton & Hove City Council's City Infrastructure Licensing and Enforcement team.
We're collecting your data to monitor:
We have a lawful basis for processing your data: GDPR Art.6 (1) (c) compliance with a legal obligation under S.3 Local Government Act 1999 and GDPR Art.9 (2) (g) substantial public interest under Data protection Act 2018 schedule 1 Part 2 (8) (1) equality of opportunity or treatment and under Section 1 (1) Equality Act 2010.
We may collect Personal Data or Special Category Data.
The type of personal information collected from you is as follows.
This could include:
We may also collect Special Category of personal data that may include:
Your information will not be shared with any other third party unless we're under a legal obligation to do so.
The principles we will use to determine how long your data will be kept include:
Your information will be stored in:
We'll only make your information available to those who need to know to perform their council role.
Examples of the security measures we use are given below.
We provide training for our staff, making them aware of:
We use encryption when data is being sent, meaning that information is scrambled so that it cannot be read without access to an unlock key. The hidden information is said to be then ‘encrypted’.
Where possible, data will be pseudonymised, meaning that your identity will be removed, so that work can be done without your identity being known by the people doing that work.
We control access to systems and networks, which allows us to stop people who are not allowed to view your personal information from getting access to it.
We carry out regular testing of our technology and ways of working, including keeping up to date on the latest security updates (commonly called patches).
Your information is not processed outside of the European Economic Area.
We'll tell you if we make an automated decision, including profiling, with your personal information. If we do this, you have the right to ask us to make this decision manually instead.
Under GDPR, you have certain rights concerning your information.
Check your rights in relation to your personal information.
If you have a concern about how we collect or use your personal data, you can contact the council’s Data Protection Officer.
We aim to resolve all complaints about how we handle personal information. You also have the right to make a complaint about data protection to the Information Commissioner's Office.
To contact the Information Commissioner's Office:
You can also make a complaint or find out more information on the Commissioner's Office website.
If your complaint is not about data protection, find details on how to make a complaint about a council service.