Who controls your data
The data controller is Derbyshire County Council, except when you register to use original archives in our search room, when the data controller is the Archives and Records Association (ARA ). As a data processor, our access to the data controlled by ARA is very limited.
Information we collect and why
Search room access
If you want to use the archives in the search room, you'll need to give your name and contact details, including home address. ARA collect this so we can register you as a user. If you lack evidence of identity, we can let you have a temporary access card.
If you apply under a legal exemption to use archives that are ordinarily kept closed under the Data Protection Act, we'll keep the application form, which includes your name and address.
In these cases, the information is needed to fulfil a contract between us and you for the provision of access to the archives. If you do not want to give your details, you can access other public areas, but not the search room.
Archives and local studies enquiries
If you contact Derbyshire Record Office with an enquiry relating to research and the documents we look after, we'll keep the enquiry, our reply and your contact details. This helps us fulfil our legal obligation to enable members of the public to consult the documents in our care, set out in Section 224 of the Local Government Act 1972 and clarified by government guidance.
Keeping your details helps us give good customer service.
Our visitor books
If you visit Derbyshire Record Office, you'll be asked to fill in the visitor book, giving your name, postcode and vehicle registration. We use the information with your consent, to compile statistics about how many people visit us, and how far they travel to get here. It also helps us administer the car park. We do not allow anyone to leaf through the book to see who is in the building, but if you prefer to preserve privacy by only giving your initials, that’s fine.
If you're only going to be in our public areas, you do not have to fill in the visitor book.
To enter controlled areas (for example, if you are a maintenance contractor) you must complete the visitor book, so we can account for you in the event of a building evacuation. We have a legal obligation to have adequate fire safety measures under the Health and Safety at Work Act 1974.
How long we keep your information
We use the retention schedules, especially the one for leisure and culture. Generally, this means we keep your data for 6 years from the end of the financial year. However, we keep things for shorter periods:
- if you register as a temporary user, we will only keep your registration details for 3 years
- when the visitor book is full, we can destroy it straight away, as suggested by the corporate property retention schedule
Sharing your information
Apart from ARA, we do not share your information with anyone else. We do not ordinarily share your information unless the law says we must, for instance, if the police ask for your information while they're investigating a crime.
We can also make an exception in our legitimate interests. For instance, if we ever need to take legal action against you, we'll pass your details to our legal services department.
Keeping your information safe
Security matters to us a lot. We keep your registration details under lock and key, and lock away the visitor book any time it is out of our sight. You can find out other ways we keep your information secure.
Your rights and who to contact about them
You can find out more about your rights as a data subject but here are the main things you need to know:
- if you want a copy of your own information, please ask us
- if you want your name to be deleted from our visitor book, please ask us
- if you want to complain about how we handle your personal data you can contact the data protection officer:
- email: email@example.com
- write to:
Data Protection Officer
Derbyshire County Council
- you have the right to contact the Information Commissioner
Find out other ways of getting in touch with us.