Privacy policy.

Introduction

This notice is provided within the context of the changes required by the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA).

This document will therefore be subject to ongoing review to ensure it continues to align with the requirements of all applicable legislation.

Service description

In order for the Alistair Chisholm to receive and process your request for assistance or respond to your enquiry, it is necessary to collect, store and process personal data necessary to provide you with relevant information, services or support.

What information I hold

In order to provide this service, I may need to process some personal information. This will generally include your name, address and contact information together with details of your problem or concern.

It may be necessary to collect what GDPR has classed as special category of data including race or ethnic group, sexuality and sexual life, religious or philosophical beliefs, trade union membership, genetic and biometric data, physical or mental health, as well as criminal convictions.

Where we get your information from

I get your personal information from you, other constituents, groups or members of the public in relation to matters which they have been asked to pursue in the interests of individuals and groups who live in their ward.

How will your personal information be used

Your personal information will be included as part of details of cases of interest, as part of information provided by signatories on petitions, responses to questionnaires and contact details for the purpose of communicating news and updates.

Who I will share your personal information with

If you have contacted me about a personal or policy issue, I may pass your personal data on to a third-party in the course of dealing with your request or query. This could be local authorities, government agencies, public bodies, health trusts and regulators. They may also pass your information to council officers in Newcastle City Council in order to allow them to investigate the matter.

Any third parties with whom I may share your data are obliged to keep your details securely, and to only use your data for purposes already communicated to you.

If you specifically ask me not to disclose information identifying you to other third parties it is necessary for me to contact, they will try to respect that. However, it must be noted that it may not be possible to progress a matter for you on an anonymous basis.

I will not pass personal details of residents who contact me to anyone else unless required to do so by law or where this is in connection with a criminal investigation.

I will never sell your data. However, I may share some of your personal information with third parties to:

  • help prevent fraud

  • help business partners, suppliers and sub-contractors to deliver any contract I enter with them or you, on your behalf

  • help me if I need additional professional or legal advice on a matter relating to you

  • improve and optimise the performance of my websites and social media accounts. Analytics and search engine providers that I use can collect your data when interacting online. However, they will aggregate and anonymise the information, meaning individuals will not be personally identifiable

The lawful basis for collecting and processing your information

I may use your information in dealing with your requests when you ask me to pursue a matter on your behalf. Local authorities’ councillors can process your personal information to carry out tasks under the lawful bases of ‘legitimate interests’ basis and/or ‘consent’ (Article 6 of GDPR).

The legal bases relied on for processing personal information in relation to responding to requests from constituents are:

  • consent or explicit consent of the constituent making the request (or any other relevant persons where this is appropriate)

  • necessary in pursuit of the councillor’s legitimate interests as an elected representative and those of their constituents; and it is assessed these interests override any privacy intrusion involved in processing personal data about other individuals

  • discharging functions as an elected representative for the purpose of responding to requests from constituents where this is permissible, without explicit consent

Additional lawful basis for processing other categories of data

Some of the information that is collected is classified as special category personal data or personal data consisting of criminal convictions and offences (including alleged offences).

In order to process special category of data, I need to have an additional lawful basis to those listed above. In this instance, special category of data is processed for exercising specific rights of the council under the Data Protection (Processing of Sensitive Personal Data) (Elected Representatives) Order 2002.

If you provided personal information about someone other than yourself, I may need to check the facts with that other person. If you ask me to take action on behalf of a friend or relative, I may need to contact that person to confirm that they are happy for me to act on their behalf. If you feel it would not be appropriate for me to contact the other person, you should discuss this at the point of giving this other person’s information.

Ward news and events

I would like to send you information about ward news and events, but I will not use your contact details to do this unless you have said that you would like to be sent this information.

If you have said that you would like this information, but later change your mind, you have a right at any time to let us know if you no longer wish to be sent this information.

If you wish to receive or stop receiving this information, please contact your me.

How long do I keep your personal information

I will process your personal data until your matter has been resolved and will store electronic data and paper records for a period of 3 years or 6 months after your complaint has been finalised.

This is to allow me to build up case history and to return to your records should further matters arise.

Your rights

The Data Protection Act 2018 in conjunction with the General Data Protection Regulation (GDPR) grant you a number of rights including the right to:

  • ask me to provide you with copies of personal information I hold about you at any time, known as a Subject Access Request

  • object to the use of your personal information for certain type of processing, such as direct marketing or automated processing, including profiling

  • ask me to delete, update and correct any out-of-date or incorrect personal information that Ihold about you free of charge

  • opt-out at any time where you have given consent and to have your data erased where you have given consent

You are entitled to receive a copy of your records free of charge and within a month. For more information on how I process your personal information and how to make a subject access request, please contact me directly.

In certain circumstances access to your records may be limited, for example, if the records you have asked for contain information relating to another person.

If you wish to exercise any of these rights, you should contact me using the contact details provided below.

You have the right to be told if I have made a mistake whilst processing your data and I will self-report breaches to the Information Commissioner.

Further information

If you would like to know more about how I use your information, please contact me directly.

Complaints

You also have the right to complain to the Information Commissioner’s Office, at:

The Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone number: 0303 123 1113 or 01625 545745

Make a complaint on the website