Privacy and Disclaimer
The South West Wales Corporate Joint Committee (“CJC”) have a Data Protection regime in place to oversee the effective and secure processing of your personal data: in accordance with the requirements of the General Data Protection Regulation 2016 (GDPR) and the Data Protection Act 2018 (DPA).
In providing your personal information to the CJC (you acknowledge that CJC is the data controller for personal information provided to us.
Why we need it?
Your information will be used by the CJC for one or more of the following purposes:-
- The processing is necessary for the performance of a contract with yourself or in order to take steps at your request prior to entering into such a contract;
- The processing is necessary for the CJC to comply with a legal obligation to which it is subject;
- The processing is necessary for the performance of a task carried out in the public interest by the CJC or in the exercise of official authority vested in the CJC;
- The processing is necessary for the purposes of the legitimate interests pursued by the CJC or by a third party.
The CJC will not process your personal information for any other purposes, other than those set out above.
Please note that each of the service applications on this website is designed to collect personal data from you with the intention of providing you with a service (or services) or to enable the CJC to carry out its legitimate public and/or business functions. Accordingly, each of the website applications provides details of the purpose (or purposes) that your information will be used for. Each service application also provides details of the relevant GDPR legal basis being relied upon by the CJC (in order to lawfully process your personal data), in the form of a specific Privacy Notice for each particular application.
What we do with it?
All the personal data we process is processed by our staff in the United Kingdom. For the purposes of IT hosting and maintenance this information is located on servers within the European Union and it will not be transferred outside of the European Union.
The CJC will not use your personal data for the purposes of automated decision making.
Your information may be shared within CJC departments to the extent permitted by law and we will not share your data with third parties unless we are required or permitted to do so by law (e.g. under GDPR, DPA or any other legislation).
We will share your personal data securely with service providers who are exercising responsibilities on the part of the CJC, but we will ensure that such information is protected by way of GDPR compliant Data Processing Agreements.
How long we keep it for?
The information will be held by the CJC in accordance with requirements set out in legislation and generally (subject to any legal requirements to the contrary) for a minimum period of six years. Though where you have provided information for marketing purposes this will be kept by us, until you notify us that you no longer wish to receive this information.
For more information on our retention periods please refer to the specific Privacy Notice relating to the specific service application which you are using on our website.
What are your rights?
Under GDPR you are entitled to the following rights in respect of your personal data:
- A right of access to your personal data held by the CJC;
- A right to have any inaccuracies in your personal data corrected;
- A right to have personal data held by the CJC erased (in certain circumstances);
- A right to restrict the processing of your personal data (in certain circumstances);
- A right to object to the CJC using your personal data for direct marketing purposes;
- A right to data portability (in certain circumstances).
Further information on the above rights may be obtained from the Information Commissioner’s Office; information is also available on the Information Commissioner’s website
In the event that you wish to object to the CJC’s use of this information or amend any information, you may notify the CJC at any time who will consider any request - but please note that this may have an impact on the nature of the services that the CJC will be able to provide to you.
Also please be aware that there is certain personal information which the CJC must hold in respect of you by virtue of our legal requirements and any failure to give this information or to provide accurate information, could render you liable to legal proceedings.
If at any point you believe that the personal information we process about you is incorrect, you may request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter.
Our Data Protection Officer is the Monitoring Officer of the CJC who is the Head of Legal and Democratic Services of Neath Port Talbot County Borough Council, who can be contacted at NPTCBC Civic Centre, Port Talbot, SA13 1PJ (firstname.lastname@example.org)
If having made a request and/or complaint to the CJC, you are not satisfied with our response or believe that we are processing your personal data in a manner which is not in accordance with the law, you may complain directly to the Information Commissioner’s Office (ICO).
The ICO’s contact details may be found on the ICO’s website.