Privacy Notices - Health and Wellbeing Strategy consultation

You need to be aware of this Privacy Notice if you are completing our Health and Wellbeing Strategy for 2023 to 2033 survey.

A Privacy Notice is a statement issued by an organisation which explains how your personal and confidential data is collected, used and shared.

Swindon Borough Council will act as a “Data Controller” for any personal data that you provide to us. We will ensure that the data given to us is processed in line with our Data Protection Act 2018 (DPA 18) and the EU General Data Protection Regulations. (GDPR).

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of data is governed by the General Data Protection Regulation 2016/679 (the "GDPR").

We will collect any information you have chosen to provide in your response to the survey, such as: your age band, ethnic background, the first part of your postcode, gender, whether you have a long-term physical or mental condition, and whether you are a living in Swindon and/or working for an organization that directly or indirectly supports the health and wellbeing of people living in Swindon. 

The information collected as part of this survey will be used to develop future policies to improve service delivery. The data you supply will be processed using electronic data modelling software. This consultation does not ask for personal identifiable data, such as your name and address and we strongly advise that you do not include any personal data when you complete the survey.

This consultation does not require personal information, but we are providing this privacy statement for people who may disclose personal information in their response; which we strongly advise they do not.

If personal data is collected, we rely on the following legal bases:

• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

When we collect your ‘special categories of personal data’, (such as health, race, ethnicity) we rely on the following legal bases:

• Processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services

These legal bases are underpinned by acts of legislation that dictate what actions can and should be taken by local authorities, including:

• The Care Act 2014
• Health and Social Care Act 2015
• Children’s Act 1989
• Data Protection Act 2018
• Human Rights Act 1998
• Mental Health Act 1983 (Amended 2007)
• Mental Capacity Act 2005

We do not need your personal indentifer information for this survey. However, if you have included personal data, we may share your personal information when we feel there is a good reason for example:

• to protect a child
• to protect adults who are thought to be at risk, for example if they are frail, confused or cannot understand what is happening to them

If this is the case, we will make sure that we record what information we share and our reasons for doing so. We will let you know what we have done and why, if we think it is necessary to do so.

We have appropriate technical and organisational measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorized way.

• We limit access to your personal information to those who have a business need to know it
• We ensure those processing your information are adequately trained

Staff under go data protection training annually.

If you provide personal data, it will be retained for up to two years from completion of this survey.

Under GDPR you have several information rights which allow you to:

• know what we are doing with your information and why we are doing it
• ask to see what information we hold about you (subject access request)
• ask us to correct any mistakes in the information we hold about you
• object to direct marketing
• make a complaint to the Information Commissioner's Office

If you have a complaint about any part of this privacy notice or require further information please contact our Data Protection Officer via e-mail at dataprotection@swindon.gov.uk or in writing to Data Protection Officer, Civic Offices, Euclid Street, Swindon, Wiltshire, SN1 2JH.

You also have the right to complain to the Information Commissioner’s Office at www.ICO.org.uk .

You may refer the matter to the Information Commissioner’s Office whose contact details are below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Or Email: icocasework@ico.org

You are under no statutory obligation to provide personal data to Swindon Borough Council. This survey also does not require any personal data.

A yearly audit will take place on personal data to ensure that we remain legally compliant in accordance with current data protection legislation.

You are viewing the Privacy Notice for the Health and Wellbeing Strategy 2023 to 2033.

Read the main Privacy Notice