Privacy Notices - Make a fraud referral Privacy Notice

Introduction

You need to be aware of this Privacy Notice if you are making a fraud referral.

What is a Privacy Notice?

A Privacy Notice is a statement issued by an organisation which explains how personal and confidential data about individuals is collected, used and shared.

Who is collecting and using your personal data?

Swindon Borough Council will act as a “Data Controller” for any personal data that you provide to us.  We will ensure that the data given to us is processed in line with our Data Protection Act 2018 (DPA 18) and the EU General Data Protection Regulations. (GDPR)

To find out more about Swindon Borough Council’s data protection policies please contact our Data Protection Officer. dataprotection@swindon.gov.uk or in writing to Data Protection Officer, Civic Offices, Euclid Street, Swindon, Wiltshire, SN1 2JH.
 

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”).

What personal data do we collect?

The fraud referral form can be completed anonymously. However, if you do provide your details (name and contact details), it will help our investigation should we need to seek additional information or clarify what you have reported.

How do we process your personal data?

Swindon Borough Council complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

Why do we need your personal information?

In case we have any questions regarding the information you have reported or if we need to clarify anything.

How the law allows us to use your information?

In accordance with article 6 of the GDPR, data processing is necessary for compliance with a legal obligation and is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Who do we share your information with?

We will only share the information you provide with Law Enforcement Agencies and Government Departments (for example; The Crown Prosecution Service (CPS)) for the detection and prevention of fraud and only if required to do so by law.

How do we protect your information?

We take the security of your personal data seriously. We have internal policies and controls in place to ensure that your personal data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

How long do we keep your personal information?

In accordance with the Borough Council Data Retention and Disposal policy your data will be kept for a period of six years after the year in which you submit your report.

What you can do with your information?

You have a number of rights.  

You can:

  • access and obtain a copy of your data on request (Subject Access Request)
  • require the Council to change incorrect or incomplete data

If you would like to exercise any of these rights, please contact the Council’s Data Protection Officer, Civic Offices, Euclid Street, Swindon SN1 2JH or email DataProtection@swindon.gov.uk.

Your right to complain

In the event that you wish to complain about the way that your personal data has been handled by Swindon Borough Council, you should write to the Data Protection Officer and clearly outline your case. Your complaint will then be investigated in accordance with our customer complaint procedure.

If you remain dissatisfied with the way your personal data has been handled, you have the right to complain to the Information Commissioner’s Office at www.ICO.org.uk. You may refer the matter to the Information Commissioner’s Office whose contact details are below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email: casework@ico.org.uk

This website also contains information on data protection and your rights and remedies.
 

What if you do not provide personal data?

As noted above, you can make a report anonymously.  If you do it may limit our ability to fully investigate the report you have made.

How will we ensure compliance?

Through document retention arrangements, restricted access to information, password protected database with access limited to the Corporate Fraud Team only, annual mandatory data protection training for all staff.

Main privacy notice

You are viewing the Privacy Notice for making a fraud referral.

Read the council's main Privacy Notice