Change Service
In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.
Identity and contact details of the data controller
- Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Contact details of the data protection officer
- Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Purposes for processing
The Change Service helps Lancashire County Council (LCC) create and maintain easy-to-use services for Lancashire residents. The Change Service also helps other LCC colleagues to design and manage their projects and programme effectively.
To achieve this, the Change Service uses various methods like service blueprints, which map out the entire journey of our services and help us to identify areas of improvement, business analysis, and user experience research.
Sometimes, the Change Service may ask you about your experience with an LCC service. When we do, we might need to use your data, where we do so we will always do so in full accordance with UK GDPR and will inform you as to what we will do with your data.
Category of personal data being processed
Personal data (information relating to a living, identifiable individual). The personal data that we might collect from you at this stage may include information relating to your:
Special category personal data (racial, ethnic origin, political opinions or religious belief)
Legal basis for processing personal data
The legal basis for processing your personal data, in accordance with the UK GDPR is:
(a) Consent: the individual has given clear consent for us to process your personal data for a specific purpose.
(e) Public Task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law. We will cite the applicable task/function and its' basis in law if we wish to rely on this basis for processing.
Where the Change Service relies on the lawful basis of (e) Public Task to process your personal data, it does so by virtue of the following legislation:
Local Government Act 2000 (1)(a)(b)(c); Every local authority are to have power to do anything which they consider is likely to achieve any one or more of the following objects—
(a)the promotion or improvement of the economic well-being of their area,
(b)the promotion or improvement of the social well-being of their area, and
(c)the promotion or improvement of the environmental well-being of their area.
(f) Legitimate Interests: pursued by us or by a third party.
Legal basis for processing special categories of personal data
The legal basis for processing special categories of personal data relating to you, in accordance with the UK GDPR Article 9 is:
(a) You have given explicit consent to the processing of your personal data.
- Processing is necessary for reasons of substantial public interest.
Where the Change Service relies on UK GDPR Article 9 (2) (g) it does so by virtue of the following legislation:
Data Protectionm Act (2018) Schedule 1 Part 2 (16) Support for individuals with a particular disability or medical condition
Information we will collect and share
- name
- age
- ethnicity
- gender
- job title
- email address
- phone number
- disability: information about any condition that may affect your ability to use digital services
- ability, such as your ability to use digital service
We may collect information relating to the specific topic we are researching about, and we might want to know you have used the particular service in the past.
We may also sometimes use other private companies to recruit people to take part in our research. When we do this, the companies may also collect additional data from you, our privacy policy will apply.
Any transfers to another country
- No
Retention periods
Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.
| File type | Description | Security | Retention period |
|---|---|---|---|
|
|
Emails held in Outlook that haven't been exported or moved elsewhere. |
Encryption used when sending emails that contain personal data |
Storage of any personal data collected as part of a Change Service activities will be retained for the duration of the project or programme or for a period not exceeding 3 years after collection whichever comes first. We will ensure that data is promptly deleted as soon as it is determined to no longer be required, even if this occurs prior to the expiration of our established retention period. |
|
Excel |
|
Personal data will be password protected. Personal data stored in project folder in SharePoint shall be password protected |
Storage of any personal data collected as part of a Change Service activity may be retained for the duration of the project or programme or for a period not exceeding 3 years after collection whichever comes first. We will ensure that data is promptly deleted as soon as it is determined to no longer be required, even if this occurs prior to the expiration of our established retention period. |
Your rights
You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are those rights:
- to be informed via Privacy Notices such as this.
- to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
- of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
- of rectification, we must correct inaccurate or incomplete data within one month.
- to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
- to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
- to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
- to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
- in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.
If you want to exercise any of these rights then you can do so by contacting:
Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ
Email: dpo@lancashire.gov.uk
To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.
Further information
If you would like more information about this specific service, then please contact
For more information about how we use personal information see Lancashire County Council's full privacy notice.
If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).