COVID-19 privacy notice

Who do you keep information about?

We keep information about those who are clinically extremely vulnerable to COVID-19, their representatives, volunteers, members of volunteer’s households and residents of Darlington.

Why do you keep information about me?

We keep information about you to enable the Council to deliver its Public Health functions and discharge our duties as a Category One responder in accordance with the Civil Contingencies Act 2004.

This includes providing services to those who are clinically extremely vulnerable to COVID-19 and to co-ordinating volunteers as part of The Hub, communicating important public health messages, making and maintaining plans, warning and informing and business continuity during an emergency. 

The lawful basis we are relying on to process the personal data is processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 

In relation to special categories of personal data the condition for processing we are relying on is processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of healthcare and of medicinal products or medical devices. 

Who can see my information?

Darlington Borough Council may share your information with members of the Local Resilience Forum (LRF) including the NHS, emergency services and with food industry partners and the voluntary and community sector (VCS).

How do you store the information you keep about me?

We hold the information securely in a system called Lagan, on the Council’s network and on SnapSurvey’s [external link] UK based servers which are ISO27001 certified. We do not store your bank details, these are processed in accordance with the Payment Card Industry (PCI) Standards.

How long do you keep information about me?

The information which we already held will be kept in line with our retention schedules. Where we collect/process information directly as a result of COVID-19 we will only keep it as long as is necessary to respond to the current pandemic. This is likely to be at least a year after the situation is less critical.

How did the Council get my personal data?

With regard to volunteers who do not have a current Disclosure and Barring Service (DBS) check we obtained your personal data regarding any criminal convictions and offences from the Police. 

In relation to residents of Darlington we obtained your contact details from other Council services.

In cases where your personal data was obtained from a source other than yourself or your representative, we will inform you of the origin of the information within 1 month, unless that information is being used to contact you, in which case, that information should be provided to you at the latest, upon first communication with you. However, it is not necessary to provide that information in cases where you already possess the information, where recording or disclosure is expressly laid down in law or where provision of the information proves impossible or would involve disproportionate effort. 

What sort of information do you keep?

We may use the following information about you to make sure that we provide you with the right service, advice or support. We will only use the minimum amount of information necessary to do so and will take every reasonable step to ensure the information is accurate. 

Individuals who are clinically extremely vulnerable to COVID-19 and their representatives

Personal data:

  • Name
  • Identification number
  • Location data
  • One or more factors specific to the physical identity of a natural person
  • One or more factors specific to the economic identity of a person
  • One or more factors specific to the cultural identity of a person
  • One or more factors specific to the social identity of a person

Special categories of personal data:

  • Racial or ethnic origins
  • Religious or philosophical beliefs
  • Data concerning health

Volunteers

Personal data:

  • Name
  • D.O.B.
  • Identification number
  • Location data inc. place of birth
  • One or more factors specific to the economic identity of a person
  • One or more factors specific to the cultural identity of a person
  • One or more factors specific to the social identity of a person

Special categories of personal data:

  • Racial or ethnic origin
  • Religious or philosophical beliefs
  • Data concerning health
  • Criminal convictions and offence

Residents of Darlington

Personal data:

  • Name
  • Location
  • Email address