Privacy Notice

This privacy notice is published in accordance with the General Data Protection Regulations (GDPR) and the Data Protection Act 2018. The notice provides information on the way in which the personal information you provide is managed and processed by Bassetlaw Museum run by Bassetlaw District Council (the ‘data controller’).

Depending on which council services you use, you may be asked to review more detailed privacy notices specific to that service.

The data controller and contact details

Bassetlaw District Council is the Data Controller for the personal data you provide to the museum. The contact details for you to exercise any of your data protection rights or to raise any concerns you may have regarding your personal data are:

Information Service Manager, Bassetlaw District Council, Queen’s Building, Potter Street, Worksop, S80 2AH

Email: dpo@bassetlaw.gov.uk

Tel: 01909 533 533

Information we collect about you

We may collect and process the following data about you:
•Information provided voluntarily by you. For example, when you register for information, apply for a particular service or make a comment or complaint
•Information that you provide when you communicate with us by any means such as email, letter, online form, social media or telephone call
•Information collected using cookies on your computer about how you browse our website

Use of your personal data

The information you have provided to the Council will be used by us to comply with our legal requirements, including enforcement action if required.

We are legally able to handle your personal data:
•when you have freely and explicitly provided your consent to this processing or
•when we have a legal requirement to collect and process this information to provide the requested service or provide a service we are legally required to deliver
•when your personal data forms part of a contract between you and the council

The consequence of you not providing personal information to us is that we will be unable to process your enquiry, assessment or application.

Sharing of personal data

The personal information you provide will not be shared for any other purpose unless required by law, eg. to prevent or detect crime or to protect public funds.

Additionally we must make public certain details in the form of a public register where it has a legal requirement to do so. For example, registers of private hire drivers. These registers and anything we release to the public will not contain personal data, unless we have received your explicit consent eg. electoral register.

Where necessary, we may share your information with other organisations and partners. These can include:
•Nottinghamshire County Council
•Other Councils
•Police
•Central Government

National Fraud Initiative

The Council participates in the Cabinet Office’s National Fraud Initiative, a data matching exercise to assist in the prevention and detection of fraud. We are required to provide particular sets of data to the Minister for the Cabinet Office for matching for each exercise.

Communications with the Council (including online transactions) may be subject to monitoring and recording only for purposes permitted by the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 in order to prevent or detect a crime, or investigate or detect the unauthorised use of the service.

The Data Matching Code of Practice can be found here

Protecting your personal data

Your personal data will be kept secure by the Council and will be kept within the UK and European Economic Union (EEU). Where we use a third party to store your personal data and it is stored outside of the UK/EEU, we will ensure that we will inform you and that appropriate safeguards are in place to keep your personal data secure.

Keeping your personal data

We will keep your personal data in accordance with our retention schedule, unless you explicitly request it to be removed. This right to have your data removed is not an absolute right, for example, we will need to retain your data if this information forms part of a legal requirement, public registry or an existing contract.

Further details of our retention periods can be viewed in our RPSI Information Asset Register.