Forest of Bowland National Landscape Partnership
In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.
Identity and contact details of the data controller
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Contact details of the data protection officer
Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Purposes for processing
The Forest of Bowland National Landscape Partnership offers services to you. In order to do this in an effective way we will need to collect and use personal information about you. We need to collect information in order to, for example: keep you informed about the work of the Forest of Bowland National Landscape Partnership and our partners; let you know about opportunities for getting involved; inform you about grants and offers; manage and administer projects, events, training and competitions etc.; record and respond to feedback and suggestions; share and use photography; provide customer services and respond to enquiries.
Some of our projects may have separate purposes for processing. Where this is the case, we will let you know in the project information.
Our service will process personal information relating to identified natural persons used to deliver services such as:
Sustainable tourism business network; newsletters & publications; volunteer opportunities; events & training; online photo sharing; management plan reviews & other surveys, grant & bursary applications; prize draws & competitions: access to information requests, legal claims, interactions with customer services and project management & delivery.
We may also process:
Limited special category personal data including health and ethnic origin data relating to specific projects and surveys.
Category of personal data being processed
- Personal data (information relating to a living, identifiable individual)
- Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)
Legal basis for processing personal data
The legal basis for processing your personal data, in accordance with the UK GDPR is:
(a) Consent: the individual has given clear consent for us to process your personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract we have with you, or because we have asked you to take specific steps before entering into a contract.
(c) Legal Obligation: the processing is necessary for us to comply with the law. We will cite the applicable legislation if we need to rely on this basis for processing.
(f) Legitimate Interests: pursued by us or by a third party.
Where Lancashire County Council relies on UK GDPR Article 6 (c) it does so by virtue of the following legislation:
- Health and Safety at Work Act (1974)
Legal basis for processing special categories of personal data
The legal basis for processing special categories of personal data relating to you, in accordance with the UK GDPR is:
(a) You have given explicit consent to the processing of your personal data.
(g) Processing is necessary for reasons of substantial public interest.
Where the Forest of Bowland National Landscape Partnership
is processing data around 'health' data to facilitate certain events, it relies on UK GDPR Article 9 (2) (g) by virtue of the following legislation:
Data Protection Act (2018) Schedule 1 Part 2 (16) Support for individuals with a particular disability or medical condition
Recipients of the data
- Forest of Bowland National Landscape Partnership
- Wider Lancashire County Council services
- External funding organisations
- External partners where the data relates to joint projects
- Press and media
- General public, if used in image credits for example
- We store your data in Lancashire County Council secure networks, Microsoft 365 Cloud storage and in the National Landscape Partnership's website Content Management System (CMS) provided by Drupal and administered by Countryscape. Please click on the links to view individual privacy policies.
- We use Mailchimp to provide newsletter and event programme circulation.
- We use Zoom and Microsoft Teams to host events and meetings and MS Teams Forms to gather information. If events are recorded, all in attendance are notified. Videos may be uploaded to YouTube. Please click on the links to view individual privacy notices.
- We use the NetCall Liberty Create platform for event booking and management.
- Trybooking hold personal data related to historical Forest of Bowland NL event bookings
- Worldpay is the payment management provider used by Lancashire County Council. Flows of payment details are strictly between the individual and Worldpay.
Information we share
Name
Postal address
Email address
Telephone number
Age/Date of birth
Ethnic origin
Health data
Emergency contact information
Online identifiers, including IP addresses and cookie identifiers
Image
Bank details of individuals (where we are making a payment to you)
Any transfers to another country
Countryscape process personal data within the United Kingdom.
NetCall's Liberty Create is hosted in Amazon Web Services (AWS) UK based data centres.
We use Mailchimp services to offer communication distribution for you. As part of this process your personal data is processed by this organisation in the United States.
We use Zoom and YouTube to host and share events and videos. Both of these platforms are based in the United States.
Retention periods
Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.
| File type | Description | Security | Retention period |
|
Event & training bookings & management
|
Including relevant Festival Bowland events and events/training linked to individual projects and programmes |
Stored on NetCall Liberty Create platform; Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive; secure LCC networks; Zoom and YouTube.
Historic data stored on TryBooking platform. |
NetCall/Microsoft Teams forms/LCC networks: data will be anonymised three months after the event date and deleted after 12 months.
Event recordings will be retained according to our discretion. Please see the privacy policies of Zoom and Google for personal data retention periods. Trybooking: Data is stored for four years. Please see TryBooking's privacy policy.
|
| Information circulation lists e.g. newsletters |
Including: Festival Bowland; Forest of Bowland Farmer Group; Business Network; individual project and programme information
|
Stored on Mailchimp platform and secure LCC networks.
|
Retained for as long as you remain subscribed to our distribution lists. Consent re-sought as necessary.
Personal data processed via Mailchimp may continue to exist on Mailchimp servers according to their retention periods. Please see Mailchimp’s privacy policy. |
| Volunteering applications & management | Including: Promoted Routes volunteers; Traditional Boundaries volunteers; individual project and programme volunteers |
Stored on secure LCC networks.
Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive. |
Retained for six years after you stop volunteering with us.
Consent for ongoing volunteers re-sought as necessary. |
| Photo gallery | Images and contact data submitted to our online public photo gallery or photography competitions. | Stored on a secure server and secure LCC networks. | Retained on the website server for 12 months then transferred for retention on the LCC network, with consent renewal sought after a further 12 months. Personal data linked to non-renewed images will be deleted. |
| Business Network applications & management | Including: Sustainable Business Network; locator logos | Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive; secure LCC networks. | Retained for as long you remain a member of the business network or make use of our locator logos. |
| Grant applications & management | Including: Farming in Protected Landscapes; National Grid LEI; Outdoor Learning Transport Fund; future grant funds which may be made available |
Stored on secure LCC networks.
Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive. Hard copies held in secure filing cabinets. |
Retained in line with individual grant funding requirements. |
| Consultations | Including Forest of Bowland NL Management Plan etc |
Stored on secure LCC networks.
Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive.
|
Data will be deleted after 12 months. |
| Requests for information | Including publications etc |
Stored on secure LCC networks.
Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive. |
Data will be deleted once the request has been fulfilled. |
| Project records |
Including data on participants involved in individual projects and programmes.
e.g. Connecting People & Nature (CPAN) |
Stored on secure LCC networks.
Microsoft Teams form on FoB NL website. Form data stored on LCC OneDrive. CPAN data will be stored on the NetCall Liberty Create platform. |
Retained according to individual project requirements.
CPAN data will be deleted at the end of the programme. |
| Forest of Bowland National Landscape website | Visits to website | Stored on a secure server. | Online identifiers stored for approximately 24 hours. |
| Photographs and videos etc | Where individuals can be identified | Stored in secure LCC networks and on a secure server. |
2 years where relying on Consent as the lawful basis. Renewed consent sought as appropriate.
Retention period will be longer where relying on Legitimate Interests as the lawful basis. |
| Bank account details | Of individuals, in order to pay for services or to offer grant payments etc | Stored in secure LCC networks | 6 years from the end of the financial year of the last transaction. |
Your rights
You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are those rights:
- to be informed via Privacy Notices such as this.
- to withdraw your consent. If we are relying on your consent to process your data, then you can remove this at any point.
- of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this, we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
- of rectification, we must correct inaccurate or incomplete data within one month.
- to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
- to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
- to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
- to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
- in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.
If you want to exercise any of these rights, then you can do so by contacting:
Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ
Email: dpo@lancashire.gov.uk
To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.
Collecting information automatically
Website cookies
We use cookies for certain areas of our website. A cookie is a simple text file that is stored on a user’s computer (or mobile device) that is created when a user visits a website using a program called a browser (for example Internet Explorer, Firefox or Safari).
A cookie allows the website to read the contents of the cookie text file. The text file itself contains a unique identifier code; the site name and some digits and numbers.
How do I disable cookies?
Each browser has different settings which allow a user to adjust their particular cookie permissions - e.g. permissions for Firefox
Third party cookies
We sometimes embed content from social media and other third-party websites. These may include YouTube, Twitter, Facebook, and Instagram. As a result, when you visit a page containing such content, you may be presented with cookies from these websites and these third-party cookies may track your use of our website. The Forest of Bowland National Landscape does not control the dissemination of these cookies and you should check the relevant third party's website for more information.
We also use Google Analytics to collect data about user behaviour for our own developmental purposes. Google Analytics sets cookies to help us accurately estimate the number of visitors to the website and volumes of usage. This is to ensure that the website is available when you want it and to help us understand what you want to use. For further details on the Google Analytics Privacy Policy visit: Privacy Policy – Privacy & Terms – Google
Security
We are committed to ensuring that your information is secure. Unfortunately, no data transmission over the Internet is 100% secure. As a result, while we strive to protect your information, we cannot ensure and do not warrant the security of any information you transmit to us via the National Landscape website, and you do so at your own risk. Once we receive your information, in order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
We may link to other websites which are neither within our control or ownership. Once you have left the National Landscape website, we cannot be responsible for the protection and privacy of any information which you provide at the linked website. You should exercise caution and look at the privacy statement applicable to the website in question. We provide these links as a convenience, and the inclusion of any link does not imply endorsement by us of the site or the views, practices or information contained on the site, or any association with its operators.
Further information
If you would like more information about this specific service, then please contact bowland@lancashire.gov.uk.
For more information about how we use personal information see Lancashire County Council's full privacy notice.
If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).