We are the data controller the for the personal information we hold about you or your child in connection with the services we provide.
The type of information we use
Personal data is information about living individuals, such as name, address or data of birth. It can also include more sensitive information (referred to as ‘special category personal data’) such as information about a person’s health, ethnicity, and other similiar things.
We currently collect and process some or all of the following information:
- full name and any alias’s
- date of birth
- contact details such as address, email addresses and telephone numbers
- employment or education details
- identification numbers such as NHS number or National Insurance number
- living arrangements
- family and personal relationships
- risk posed to self and others
We also process the following types of special category data:
- personal data revealing ;racial or ethnic origin
- personal data revealing ;political opinions
- personal data revealing ;religious or philosophical beliefs
- personal data revealing ;trade union membership
- genetic data
- data concerning ;health
- data concerning mental health
- data concerning a person’s ;sex life
- data concerning a person’s ;sexual orientation
We may also process criminal offence data including, but not limited to:
- details of criminal activities
- Allegations
- Investigations
- legal proceedings
- details of online activity
Why we collect and use this information
Our Prevent aims to stop people becoming terrorists or from supporting terrorism, in all its forms. Prevent works at the pre-criminal stage, using early intervention to encourage and empower individuals and communities to challenge extremist and terrorist ideology and behaviour.
Channel is a multi-agency safeguarding programme run in every local authority in England and Wales. Channel focuses on early intervention to protect vulnerable people from being radicalised and help them avoid being drawn into extremism. The Channel programme adopts a multi-agency approach to identify and provide support to individuals who are at risk of being drawn into terrorism.
If you are offered support through Channel, the Channel Panel operating in the local authority area such as Derby City Council or ourselves, will collect and process personal information about you. Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 we have certain responsibilities as a controller and processor of your personal data, and you have certain rights as a data subject. This notice is to inform you of your rights and our responsibilities.
The information provided will only be used to discuss the given circumstances and concerns with relevant services to develop a tailored support plan for the individual in Channel. It will not be processed for any other purpose.
The lawful bases for processing the information are set out as follows:
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6 (1) (e))
- processing is necessary for compliance with a legal obligation to which the controller is subject (Article 6 (1) (c))
- processing is necessary in order to protect the vital interests of the data subject or of another natural person (Article 6 (1) (d))
When we collect your ‘special categories of personal data’, (such as health, race, ethnicity, sexual orientation) we rely on the following lawful bases: -
- processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent (Article 9 (1) (c))
- processing is necessary for reasons of substantial public interest (Article 9 (1) (g))
When we collect your criminal convictions and offences personal data we rely on the following lawful bases:
- processing is necessary for reasons of substantial public interest, for the prevention or detection of crime
Where we rely on substantial public interest then this is where we have duties under the Counter Terrorism and Security Act 2015.
View further information on how the Home Office process information relating to the Channel Programme.
If we use an alternative legal basis to process your personal data for any reason you will be made aware.
Collecting your data
We collect information, if appropriate and relevant, from a range of individuals and organisations. ; These will include yourself, as well as from other partner agencies for example, family members, schools, health organisations, government departments and criminal justice organisations.
Most of the personal information we process is provided to us directly by you when you fill out any forms using our customer portals or on our website, also when you contact us in writing, speak to us on the phone, by email or any other type of electronic communication, or talk to us face to face.
Please note if you do not provide the information that we require it may affect our ability to deliver the services.
Keeping your information safe
In order to meet our commitment to protecting your personal data we have ;data protection policies and procedures ;in place to ensure that it is safeguarded.
We carry out checks on all third parties we use, and also have contracts in place with them which detail data protection obligations they have to follow.
Your information will only be held by us for the set amount of time stated in our ;records retention schedule and will be permanently deleted or securely destroyed at the end of the period stated unless we have a lawful reason to retain it.
Sharing your data
Your information will only be shared with relevant professionals as part of Prevent process’s which may include:
- the Police
- health services
- relevant local schools and other educational establishments
- relevant charities and commissioned services
The information will be shared securely and only when it is necessary to do so.
We will share personal information with law enforcement or other authorities if required to do so by applicable law.
In order to process your personal data, we may use third party software providers such as Microsoft. We carry out checks on all data processors we use, and also have contracts in place with them which detail data protection obligations they have to follow.
The Accounts and Audit Regulations 2015 require the us to have an internal audit service to evaluate the effectiveness of its risk management, control and governance processes. To enable this, our internal audit team require access to documents, records and personal data belonging to us, its contractors, or suppliers to do their work. Further details on the role of our internal audit team can be found within the audit services charter document.
Requesting access to your personal data
You have the following rights, subject to lawful exemptions, to:
- access copies of any records we hold about you
- have any information we hold about you corrected
- have any information we hold about you erased
- restrict how information we hold about you can be used or shared
- object to information about you being held
- have any information we hold about you transferred to a third party
- challenge decisions relating to you made using automated decision making and profiling
For further information on your rights, and how to make requests under those rights, view our GDPR page.
For more detailed advice on your rights visit the Information Commissioner’s Office.
If you have any concerns
If you have any concerns or are unhappy with our use of your personal data, please let us know by contacting:
Data Protection Officer
Legal Services
Derbyshire County Council
County Hall
Matlock
Derbyshire
DE4 3AG
Email: access2info@derbyshire.gov.uk
If you are dissatisfied with our response you can contact:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate) or tel: 01625 545 745 if you prefer to use a national rate number, ;Fax: 01625 524 510.