Privacy Notice Annex 1
Purpose of Data Use |
Personal information used |
Our Lawful Basis for using the information |
---|---|---|
To answer your queries or complaints |
Contact details and records of your interactions with us. |
We have a legitimate interest to handle your queries and complaints. Details of our complaint’s procedure can be found on our website. |
To arrange and manage any contracts or funding agreements |
Contact details, transaction and payment information. Information about your business (sole traders and partnerships). Records of your interactions with us. Evidence required, including employee information, to authenticate funding claims. |
This is necessary to enable us to properly administer and manage any contract or funding agreement with you. |
To manage your relationship with us including providing business support. This may include telling you about events and news updates |
Contact details and records of your interaction with us. Information about your business (sole traders and partnerships). |
The legal basis for handling this data is legitimate interest. We have determined through a legitimate interest test that the information we may send you is proportionate and necessary to provide you with the support you have requested. Whilst relying on legitimate interest as a legal basis for processing we will still ask you how you prefer to be contacted, and you can unsubscribe at any time. |
To send you general marketing information we think you might find useful or which you have requested from us, including our newsletters and information about events |
Contact details and marketing preferences. |
The lawful basis for handling this data is consent. |
For the purposes of promoting events and projects related to the activity of HEYCA |
Images in video and/or photographic form. |
Where you have given us your explicit consent to do so. |
To administer your attendance at any workshops, programmes or events you sign up to |
Contact details. |
We have a legitimate interest to process this data to enable us to register you on to and properly manage and administer your attendance on any workshops, events or programmes you sign up to. |
For the purpose of undertaking statutory consultation exercises |
Contact details and records of your interaction with us. |
The lawful basis for handling this data is public task. |
For the purpose of managing a Mayoral election |
Electoral roll information. |
The lawful basis for handling this data is public task. |
For the purpose of meeting Access to Information obligations |
Images webcast live, retained and made available via the Combined Authority’s website. |
The lawful basis for handling this data is legal obligation. |
Retention of records |
All the personal information we collect. |
We have a legitimate interest in retaining records whilst they may be required in relation to complaints or claims. We need to retain records in order to properly administer and manage your relationship with us and in some cases, we may have legal or regulatory obligations to retain records for the purposes of accounting and to audit our operations. |
To conduct research and data analysis and develop statistics to better understand event attendance |
Records of your attendance at any events. |
This is necessary to perform our legitimate interest with you to ensure that our future events are relevant. |
To conduct research and data analysis |
Data made available to us through Data Sharing Agreements with partners. |
The lawful basis for handling this data is legitimate interest. |
The prevention and detection of crime |
Images captured on CCTV and personal information we collect. |
The lawful basis for handling this data is public task/legal obligation. |
To commission and fund adult education budget provision for learners within Hull and the East Riding of Yorkshire |
Data made available to us through Data Sharing Agreements with the ESFA or any other necessary parties. |
The lawful basis for handling this data is public task. Any Special Category data processed will be processed in accordance with Article 9 (2)(g) GDPR. |
To deliver and evaluate programmes funded by the Department of Education |
Data made available to us through Data Sharing Agreements with the ESFA or any other necessary parties. |
We have a legitimate interest to handle and transfer data to the Department of Education to enable effective delivery of Skills programmes. |
If you apply for a job or a non-Executive role with us |
Contact details, employment history and experience. |
The lawful basis relied upon is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract. Information you provide to us during the recruitment process will only be used for the purpose of progressing your application, or to fulfil legal or regulatory requirements if necessary. We will not share any of the information you provide during the recruitment process with any third parties for marketing purposes. We will hold the information securely whether it’s in electronic or physical format. We will only use the contact details you provide to us to contact you to progress your application. We will use the other information you provide to assess your suitability for the role you have applied for. We will ask you to provide equal opportunities information. This is not mandatory information - if you don’t provide it, it will not affect your application. If you do provide this ‘special category’ information we will rely on article 9(2)(b) of the GDPR, which relates to our obligations in employment and the safeguarding of your fundamental rights. And Schedule 1 part 1(1) of the DPA2018 which again relates to processing for employment purposes. This information will not be made available to any staff outside of our recruitment team, including hiring managers, in a way which can identify you. Any information you do provide will be used only to produce and monitor equal opportunities statistics. Data about unsuccessful applicants will be held within the recruitment system for a period of three months from the date of the interviews before being deleted. |