Who we are Our website address is www.valeandspa.co.uk. Worcestershire’s Vale & Spa is the tourism brand of Wychavon District Council (the council) with all activity sitting under the council’s privacy notice. Privacy Notice We process and hold information in order to provide public services. This notice explains how we use and share your information, and […]
Our website address is www.valeandspa.co.uk. Worcestershire’s Vale & Spa is the tourism brand of Wychavon District Council (the council) with all activity sitting under the council’s privacy notice.
We process and hold information in order to provide public services. This notice explains how we use and share your information, and how we protect your privacy. Information may be collected on a paper or online form, by telephone, email, CCTV or by a member of our staff, or one of our partners.
Further information can be found relating to the individual services provided by the Council by selecting the relevant service found in Service Privacy Notices.
We have appointed a Data Protection Officer (DPO), Meesha Patel to oversee data rights. If you have any concerns or queries relating to Data Protection issues, please contact Meesha Patel in the first instance by emailing SAR@wychavon.gov.uk.
There are a number of legal reasons why we need to collect and use your personal information.
The privacy notices for individual services explains for each service which legal reason is being used. Generally we collect and use personal information where:
If we have consent to use your personal information, you have the right to remove it at any time. If you want to remove your consent, please contact SAR@wychavon.gov.uk and tell us which service you’re using so we can deal with your request.
Where we can, we’ll only collect and use personal information if we need it to deliver a service or meet a requirement.
If we don’t need personal information we’ll either keep you anonymous or we won’t ask you for it. For example in a survey we may not need your contact details we’ll only collect your survey responses.
We don’t sell your personal information to anyone else.
You have the right to ask for all the information we have about you and the services you receive from us. When we receive a request from you, we must give you access to your personal data within 1 calendar month of receipt of that request.
However, we can’t let you see any parts of your record which contain:
If you have any queries about access to your information please email SAR@wychavon.gov.uk.
You should let us know if you disagree with something written on your file.
We may not always be able to change or remove that information but we’ll correct factual inaccuracies and may include your comments in the record to show that you disagree with it.
In some circumstances you can ask for your personal information to be deleted, for example:
You have the right to ask us to restrict what we use your personal information for where:
We use a range of organisations to either store personal information or help deliver our services. Where we have these arrangements there is an agreement in in place to make sure that the organisation complies with data protection law.
We’ll often complete a privacy impact assessment (PIA) before we share personal information to make sure we protect your privacy and comply with the law.
Sometimes we have a legal duty to provide personal information to other organisations.
Under those circumstances we will usually have a Data Sharing Agreement in place. The Privacy Notices relating to individual services will detail which organisations we share data with.
We may also share your personal information where other rights override your right to privacy:
We will store your data (on paper and electronically) in a secure way, and we’ll only make it available to those who have a right to see it.
We provide training for our staff to make them aware of how to handle information and how and when to report when something goes wrong.
The majority of personal information is stored on systems in the UK. But there are some occasions where your information may leave the UK either in order to get to another organisation or if it’s stored in a system outside of the EU.
We have additional protections on your information if it leaves the UK ranging from secure ways of transferring data to ensuring we have a contract in place with that third party.
We’ll endeavour to ensure your personal information is not sent to a country that is not seen as ‘safe’ either by the UK or EU Governments.
We try to store personal information in accordance with our documentRetention Schedule (315 KB) . There’s often a legal reason for keeping your personal information for a set period of time, we try to detail this in our retention schedule.
For each service the schedule lists how long your information may be kept for. This ranges from months for some records to decades for more important records
If you have any worries or questions about how your personal information is handled please contact our Data Protection Officer at SAR@wychavon.gov.uk
For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner’s Office (ICO) by emailing email@example.com or writing to:
Information Commissioner’s OfficeWycliffe HouseWater LaneWilmslowCheshire SK9 5AF
We use third party analytics providers, including Google Analytics and Facebook Pixel, to collect information about your use of services and enable us to improve how these services work. The information allows us to see the overall patterns of usage on the services. It helps us record any difficulties you have with the services, shows us whether our targeting is effective and allows us to use your responses to advertising to optimise advertisement performance.
To further optimise our advertising performance, we track users’ activity across devices. This means we are able to see a user’s preferred method of web browsing when using our services – again, without identifying that user.
See the section below for more information, or to opt out of these practices.
Images may be taken without your explicit consent at public events where signage has been displayed. You have a right to object to the processing of your images where you have not provided your consent; and a right to withdraw your consent where you have signed a Photo Consent Form.
To exercise these rights please contact: firstname.lastname@example.org