Data Protection and Subject Access Policy

7 Processing

7.1 'processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as:

a) collection,
b) recording,
c) organisation,
d) structuring,
e) storage,
f) adaptation or alteration,
g) retrieval,
h) consultation,
i) use,
j) disclosure by transmission, dissemination or otherwise making available,
k) alignment or combination,
l) restriction,
m) erasure or destruction;

8 Privacy Notices and Data Subject Information Notices

8.1 Any collection of personal data must satisfy the requirements of fairness and transparency set out in the first Principle.

8.2 This includes paper or electronic application forms, telephone calls, and surveys.

8.3 At the time of collection, the Council will provide data subjects with information to comply with Articles 13 & 14 of GDPR.  This shall explain to the individual:

a) The identity of the Data Controller collecting the information - Wiltshire Council
b) Contact details for the Council and its Data Protection Officer InformationGovernance@wiltshire.gov.uk (opens new window)
c) The purpose for processing and the legal basis for doing so
d) Recipients or categories of recipients of their personal data

8.4 Wiltshire Council will ensure an appropriate Privacy Notice is included wherever personal data is collected.

Wiltshire Council publishes an overarching Privacy Notice is in a prominent position on the web sites it maintains https://www.wiltshire.gov.uk/privacy. In addition, where services have different specific needs, further privacy notices which are service specific will be added where appropriate.