Use and storage of your personal information
When you supply any personal information to us we have legal obligations towards you in the way we deal with that data. We must collect the information fairly, that is, we must explain the purpose and legal basis for us using it (this will be set out on the webpages where information may be requested or any form you are asked to complete). In general we process personal data in relation to the delivery of our services (our public task) or in relation to the legitimate interests of the individual or the National Park Authority (as data controller). Further information on the legal basis for processing of any data you have provided the National Park Authority can be obtained from our Data Protection Officer on the contact details below.
We must tell you if we want to pass the information on to anyone else. In general, any information you provide will only be used within the South Downs National Park Authority and by its service providers, including the South Downs National Park Trust. It will never be supplied to anyone outside South Downs National Park Authority or the South Downs National Park Trust without first obtaining your consent, unless we are obliged or permitted by law to disclose it.
We will hold your personal information on our systems for as long as you are in receipt of the service you have requested, and remove it in the event that the purpose has been met or you request us to do so, unless we are obliged by law to retain it. Retention of data is governed by the Authority’s Retention and Disposal Policy.
In addition you have the following rights under data protection law:
- The right to be informed – when we collect your data we will tell you why and how we intend to use it
- The right of access – Under the GDPR, you have the right to obtain:
- confirmation that your data is being processed; and
- access to your personal data.
Details on how to obtain your personal data can be found on our website: https://www.southdowns.gov.uk/national-park-authority/transparency/freedom-of-information/
- The right to rectification – You are entitled to have personal data rectified if it is inaccurate or incomplete.
- The right to erasure – You have the right is to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
- Right to restrict processing – you have a right to ‘block’ or suppress processing of personal data. When processing is restricted, we are permitted to store the personal data, but not further process it. We can retain enough information about the individual to ensure that the restriction is respected in future.
- The right to data portability – You are able to obtain and reuse their personal data for their own purposes across different services. This right allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability
- The right to object – You have the right to object to:
- processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- direct marketing (including profiling); and
- Processing for purposes of scientific/historical research and statistics
- Rights in relation to automated decision making and profiling. – The law provides safeguards for you against the risk that a potentially damaging decision is taken without human intervention.
To exercise any of the above rights please contact our Data Protection Officer, on the contact details below.
Where we are processing data with your consent you have a right to withdraw your consent at any time. You can do this by e-mailing us at email@example.com
You also may lodge a complaint about how we are processing your data with the Information Commissioners Office. Details of how to make a complaint are available on www.ico.org.uk
Events, E-Newsletter and Online Surveys
We use a third party provider (mail chimp) to deliver our monthly e-newsletter. We gather statistics around e-mail opening and clicks using industry standard technologies. For further information please see https://mailchimp.com/legal/privacy/
Where it is compatible with the stated use of your data we may also process this via a third party provider of online survey tools. Please see https://www.surveymonkey.com/mp/policy/privacy-policy/ for further information
We also use a thrid party provider to manage data in relation to events organised by the Park Authority. please see https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_GB for further information
Users 16 and under
If you are aged 16 or under, please get your parent/guardian’s permission beforehand whenever you provide personal information to the South Downs National Park’s website. Users without this permission are not allowed to provide us with personal information.
Contact for further information about data processing
The South Downs National Park Authority is the responsible body (Data Controller) for information provided to us. Our contact details are
South Downs National Park Authority, South Downs Centre, North Street, Midhurst. GU29 9DH
Our Data Protection Officer is the Head of Governance who can contacted on: Robin.firstname.lastname@example.org or 01730 819207