Highwood Parish Council (“HPC”) Privacy Notice
Agreed at Council meeting 9 May 2018
1 HPC complies with data protection law.
2 HPC is a Data Controller and Data Processor.
3 The legal bases on which HPC carries out data processing are statutory powers, legal requirements and contracts.
4 HPC does not carry out automated decision-making nor profile personal information, neither does it pass it on to other organisations except when required to do so for legal reasons.
5 HPC does not process “special categories of data” nor that of children, except in the case of an accident report on council property.
6 HPC does not send personal information overseas nor use “cloud” storage.
7 HPC does not use personal information for purposes other than those for which it was collected.
8 HPC does not hold any personal information which is processed on the grounds of consent having been given so no consent form is required.
9 The personal data HPC holds will be used lawfully, fairly and in a transparent way. It will be accurate and kept up to date, and kept only as long as necessary for the purposes for which it has been collected. It will be kept and destroyed securely including ensuring that appropriate technical and security measures are in place to protect the personal data from loss, misuse, unauthorised access and disclosure.