Privacy notice for engineering, drainage and water team
Neighbourhoods – engineering, drainage and water team
Identity and contact details of the data controller
Epping Forest District Council is a data controller pursuant to the general data protection regulation (GDPR). This means that the council decides how your personal data is processed and for what purposes. The contact details for the council’s data protection officer are:
Data Protection Officer
Epping Forest District Council
323 High Street
Epping CM16 4BZ
- Call 01992 564000
- Email firstname.lastname@example.org
Personal data we collect about you
- Telephone number
- Email address
- Property, land and business interest details
- Health information
- Financial information
- Criminal offences information
Why we collect this information and how will it be used
Public task: the processing is necessary for the data controller to perform a task in the public interest or for official functions and the task or function has a clear basis in law.
Legal obligation: the processing is necessary for the data controller to comply with the law (not including contractual obligations).
Your details are required in order to ensure that the statutory services and other functions carried out by the engineering, drainage and water team can be effectively delivered in relation to: inspections and the investigation of complaints; prevention of flooding and flood mitigation purposes; implementation and enforcement of legislation; the processing of applications under the Land Drainage Act 1991 and the Council’s Land Drainage Byelaws; and enforcement of the Council’s Land Drainage Byelaws. Statutory functions require us to do this and such processing therefore will be carried out in accordance with prevailing statutory obligations.
Personal information is also collected for the purposing of recruiting officers to work in the team, through tenders to secure contractors to carry out work on behalf of the council and when commissioning consultants.
The information that you have provided will be securely held by the council and will only be accessed by authorised persons with the appropriate access controls. The council will only use the information that you have provided for the purposes above and will not use it for any other purpose, unless you have given your consent, or this is otherwise required or permitted by law.
The legal basis for processing your personal data
The processing of personal data must satisfy a condition under Article 6 of the GDPR and, for special category data, must also satisfy a condition under Article 6 and Article 9.
Article 6(1)(a) Consent: the data subject has given clear consent for the processing of their personal data for a specific purpose.
Article 6(1)(b) Contract: the processing is necessary for a contract with the data subject, or because they have asked the data controller to take specific steps before entering into a contract.
Article 6(1)(c) Legal obligation: the processing is necessary for the data controller to comply with the law (not including contractual obligations).
Article 6(1)(e) Public task: the processing is necessary for the data controller to perform a task in the public interest or for official functions and the task or function has a clear basis in law.
Article 9(2)(b) Social protection: The processing is necessary for the purpose of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law.
Article 9(2)(i) Public health: Processing is necessary for reasons of public interest in the area of public health.
Who we share your personal data with
We will only share your information with parties who we may lawfully share data with. In order to fulfil the functions outlined above your personal data may be shared with:
- Other council departments
- Contractors, consultants and companies working on behalf of the council and other regulatory bodies
Information may be disclosed to other enforcement agencies and third parties where it is necessary and lawful to do so, for example, for the prevention and detection of crime and protection of public health.
Appropriate measures will be made to ensure the records we hold on you (paper and electronic) are kept in a secure way and only those who have a right to see them and in compliance with data protection legislation will be able to see them.
How long we keep your personal data
The GDPR states that personal data must be kept no longer than is necessary for the purposes.
The neighbourhoods department will keep your personal data in line with the engineering, drainage and water team’s GDPR retention policy:
Under the General Data Protection Regulation (GDPR), you have various rights as an individual that you can exercise in relation to the information that the council holds about you. Information about these rights is available in our data protection policy.
How to make a complaint
If you are unhappy with the way in which your personal data is processed by Epping Forest District Council you should contact the Data Protection Officer in the first instance:
If you remain dissatisfied with the council’s processing of your personal data, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
The ICO’s address:
Information Commissioner’s Office
Cheshire SK9 5AF
- Helpline number 0303 123 1113
- ICO website