Privacy notice for Red Balloon
Communities – health and wellbeing – Red Balloon
Identity and contact details of the data controller
Epping Forest District Council is a data controller pursuant to the general data protection regulation (GDPR). This means that the council decides how your personal data is processed and for what purposes. The contact details for the council’s data protection officer are:
Data Protection Officer
Epping Forest District Council
323 High Street
Epping CM16 4BZ
- Call 01992 564000
- Email email@example.com
Personal data we collect about you
- School year
Why we collect this information and how will it be used
Your details are required in order to deliver (through the Red Balloon Family Foundation) services to young people within our district to develop and support emotional health and wellbeing (MiLife project). Delivered to all state secondary schools within the district.
The information that you have provided will be securely held by the council and will only be accessed by authorised persons with the appropriate access controls. The council will only use the information that you have provided for the purpose above and will not use it for any other purpose, unless you have given your consent, or this is otherwise required or permitted by law.
The legal basis for processing your personal data
- 6(1)(a) consent. The data subject has given clear consent for the processing of their personal data for a specific purpose. The data subject has given explicit consent to the processing.
Special category data includes information about race; ethnic origin; politics; religion; trade union membership; genetics; biometrics (where used for ID purposes); health; sex life; or sexual orientation and where applicable the additional legal basis for doing so is:
- Article 9(2)(a). The data subject has given explicit consent to the processing of those personal data for one or more specified purposes.
Criminal offence data includes personal data relating to criminal convictions and offences, or related security measure and where applicable the additional legal basis for doing so is:
Who we share your personal data with
In order to fulfil the function outlined above your personal data will be shared with Mailchimp and members of the J9 Group.
Transfers to third countries and safeguards in place
In order to fulfil the function outlined above your personal data will be transferred to the United States of America.
MailChimp is certified to both the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield regimes, and lawfully transfers EU/EEA personal data to the U.S. pursuant to this certification. They also complete a SOC II Type 2 examination on an annual basis for the Trust Principal Criteria of security, processing integrity, confidentiality and availability.
How long we keep your personal data
The council will keep your personal information in line with our retention policy:
Under the General Data Protection Regulation (GDPR), you have various rights as an individual that you can exercise in relation to the information that the council holds about you. Information about these rights is available in our data protection policy.
How to make a complaint
If you are unhappy with the way in which your personal data is processed by Epping Forest District Council you should contact the Data Protection Officer in the first instance:
If you remain dissatisfied with the council’s processing of your personal data, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
The ICO’s address:
Information Commissioner’s Office
Cheshire SK9 5AF
- Helpline number 0303 123 1113
- ICO website