Luton Borough Council

Complaints and Information Governance

Service privacy notices

We're committed to protecting your privacy when you use our services. We have a data protection officer who makes sure we respect your rights and follow the law.

If you have any concerns or questions about how we look after your personal information, please contact us at [email protected].

Personal data

Personal data

Information we collect about you may be provided by you or we may process your personal information provided by agencies for the purpose of responding to data protection complaints, data security incidents or for the prevention and detection of crime and fraud.

We currently collect and process the following personal data when dealing with requests for information under the Freedom of Information Act 2000, the Environmental Information Regulations 2004, UK General Data Protection Regulations and the Data Protection Act 2018.

Name, address, email, telephone number, forms of written identification such as driving license, passport or utility bills, birth certificate

We may process other categories of personal data, including special category data held by other teams within the council, for example when responding to a Subject Access Request or;

When dealing with a request for disclosure from another agency with investigative powers.

Special Category data

Although we do not request special category data for example your medical history or criminal convictions, we do recognise that you may choose to provide special category data when contacting us or it may reach us via other means outlined above.

Special category data includes information revealing/concerning a person’s racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union membership, health or medical data (both physical and mental), sex life, sexual orientation and criminal convictions.

Purpose for using it

Information Governance uses your personal data to:

log or progress a complaint
log or progress a freedom of information or environmental information request
log or progress a subject access request
log or progress enquiries from your member of parliament or local councillor
detect and prevent fraud and other criminal activity

Lawful basis

Information Governance uses you personal data under the following categories:

personal data: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
special category: processing will take place on the basis of substantial public interest which will be proportionate to the reason for processing it.
The processing of special category data is supported by the following legislation:

Data Protection Act 2018
UK GDPR
Freedom of Information Act 2000
Environmental Information Regulations 2004

Who we share it with

The Complaints and Information Governance team may share your personal data with the following:

Other Teams and Services within Luton Council where law permits, or it is necessary to do so to complete a request
Someone acting on your behalf (providing it is evidenced you have asked them to do so)
Regulatory bodies, investigators and ombudsman (for example Information Commissioner’s Office (ICO) , Local Government & Social Care Ombudsman (LGO)
Agencies with investigative powers such as the Police, other Local Authorities or the Home Office

Why we share it with them

We may have a statutory obligation to share your personal information with those listed above.

We may also share personal information when investigating data protection complaints, data security incidents or for the prevention and detection of crime and fraud.

Any automated decision making or profiling

None

Transfer of data to another country

The majority of personal information is stored on systems in the UK. But there are some occasions where your information may leave the UK either in order to get to another organisation or if it’s stored in a system outside of the EU.

We have additional protections on your information if it leaves the UK ranging from secure ways of transferring data to ensuring we have a robust contract in place with any third party who may transfer it out of the EU.

If we need to send your information to an ‘unsafe’ location we’ll always seek advice from the Information Commissioner first.

Retention period

The data will be kept in accordance with our retention schedule.

Exercising your rights

You have the right to ask us to amend or delete your data as well transfer or limit its use. You also have the right to request a review of an automated decision where you think this is wrong.

Each request will be considered individually. Where we are required to keep your data by law we may be unable to action your request. In all circumstances we will explain our decision making in writing to you.

Please see our main privacy statement using the green button below If you want more information on how:

we keep your data safe
to request a change to the records we hold
to make a complaint

Read our main privacy policy

Downloads

Information-Commissioners-Office-(ICO)-Certificate.pdf

200 kB