There are separate safeguards for personal data relating to criminal convictions and offences. Both when the data transfer can go ahead or not, our team helps you draft the required accountability documentation, to ensure that any complaints or investigations are swiftly addressed and closed. Data protection legislation requires that organisations demonstrate ongoing compliance. Generally, organisations, must respond to a SAR within 1 month, free of charge.

If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority. If you work or reside in a country that is a member of the European Union or that is in the EEA, you may find the contact details for your appropriate data protection authority on the following website. While we follow generally accepted standards to protect Personal Data, no method of storage or transmission is 100% secure. You are solely responsible for protecting your password, limiting access to your devices and signing out of websites after your sessions. If you have any questions about the security of our websites, please contact us by using the information in Section 13 below. We take appropriate precautions including organisational, technical, and physical measures to help safeguard against accidental or unlawful destruction, loss, alteration, and unauthorised disclosure of, or access to, the Personal Data we process or use.

If the individual is not capable of giving their consent, the representative may have the legal authority to act using a lasting ‘Power of Attorney’ and must provide this to us. Data protection legislation gives you the right to request access to the information that the Council holds about you. However, as it is a legal process, the following ‘Frequently Asked Questions (FAQs) should help to inform you and guide you through it. Here at Bradford Council, we are updating our application forms and you will be prompted to give consent before your data is processed unless a legal basis applies.

You also have the right to complain about how we use your personal information to the Information Commissioner’s Office (ICO). If you’re unhappy about how we respond to your request for rectification, we will provide you with information on how you can complain to the Information Commissioner’s Office, or how to take legal action. If, when we consider your request fully, we don’t consider the personal information to be inaccurate then we’ll add a comment to your record stating your concerns about the information.

The Uk General Data Protection Regulation

For more details on your rights and choices and how to exercise them, please review the “Your rights relating to your Personal Data” section in our full Privacy Statement. Please review the “Who do we share Personal Data with” section in our full Privacy Statement for the full list and more detailed information. The high uptime and performance is achieved with an auto-scaling, load balanced multi-server environment with failover and 24/7 system monitoring.

If the data contains personal information there will be extra hoops you need to jump through. We keep personal data only for as long as is necessary for the purpose for which it is processed. This depends on the circumstances and the legal basis on which it is collected. The length of time we can keep operational data is strictly regulated through RIPA 2000 and the IP Act 2016, as well as our approved handling arrangements. Being transparent and providing accessible information to individuals about how we may use personal data is a key element of the Data Protection Act (DPA) and the UK General Data Protection Regulation (UK GDPR). The Department for Infrastructure (DfI) is committed to building trust and confidence in our ability to process your personal information.

Contact Details For The West Yorkshire Fire And Rescue Service’s Data Protection Officer:

Committing to adopting “data protection by design and default” will include conducting data protection impact assessments (DPIAs) where relevant. DPIAs will be mandatory where processing is deemed to be high risk or where new or enhanced processing activities are being undertaken or new technology is being introduced. The GDPR will require some organisations to designate a DPO, for example, organisations whose activities involve the regular and systematic monitoring of data subjects on a large scale.

Why Outsource Your Dpo?

In particular, your rights concerning your information are explained in The Individual Rights of Data Subjects Policy and Procedure. Courses all include interactive elements and are suitable for everyone in your organisation. If you already have an in-house DPO but would like some extra support, our advisory service is ideal. By way of example, SurveyMonkey provide an ancillary agreement directly with its US affiliate which incorporates the model clauses.

You can configure Matomo to automatically anonymize all the user data, basically exempting you from the GDPR (at least as far as site analytics are concerned). Even if itservice-datenschutz don’t want to anonymize the data, Matomo provides a number of GDPR compliance tools to help you comply efficiently. The law says you should keep personal data safe, using measures you think are appropriate. You get direct and fast access to expert advice and data protection law guidance by outsourcing DPO tasks to an external DPO.

If you do not hold a passport or driving licence please contact us at to discuss alternative forms of identification. We will make it clear to you whenever we collect any personal information through our website and will explain what we intend to do with it. We usually have to disclose the complainant’s identity to whoever the complaint is about.