We collect your information to:
- respond to your Subject Access Request and provide you with the information you are entitled to under the law
When you submit your request, we’ll set up an electronic case file containing the details of your request. This normally includes your contact details and any other information you have given us. We’ll also store on this case file a copy of the information that falls within the scope of your request.
If you're making a request about your personal data, or acting on behalf of someone else, then we’ll ask for information to satisfy us of your identity. If it’s relevant, we’ll also ask for information to show you have authority to act on someone else’s behalf.
If the request is about information we have received from another organisation such as a referral, we’ll usually ask them for their views on disclosure of the information.
What type(s) of information do we use?
- personal information you provide in your Subject Access Request application, such as your name, contact details, ID documents and details of your request
- information held by Stockport Council that relates to you, which may include records from services you have received
What is the legal basis for using your information?
The lawful basis for this is:
- Article 6(1)(C) of the UK General Data Protection Regulation (GDPR), processing is necessary to comply with a legal obligation under the UK GDPR and the Data Protection Act 2018
If any of the information you provide us in relation to your information request contains special category data, such as health, religious or ethnic information, the lawful basis we rely on to process it is:
- Article 9(2)(g) of the UK GDPR, which also relates to our public task and the safeguarding of your fundamental rights
- Schedule 1 part 2(6) of the Data Protection Act 2018 which relates to statutory and government purposes
Where do we get your information?
- directly from you, when you submit your Subject Access Request application
- from council records, following reasonable and proportionate searches across our systems
- a service: if your request relates to a service you have received, we may need to contact that service to obtain the relevant information, where applicable
Who do we share your information with?
Your information is only shared internally with relevant council departments to locate and provide the information you have requested.
We do not share your application or the information you request with external parties unless required by law.
We may use third-party data processors who are under contract and act only on our instruction. They do not share your personal information with any other parties.
How long will we keep your information?
Personal information collected is subject to Stockport Metropolitan Borough Council’s records management policies and procedures and will be held in accordance with the council’s records retention schedule.
Generally, we will retain Subject Access Request records for 3 years after your request is completed.
Transferring your information outside of the European Union (EU)
We will not transfer your information outside of the EU.
Automated decisions using your information?
For this service all the decisions we make about you involve human intervention.
Your rights
In our guide on exercising your rights you can find information about how to:
- exercise your rights
- contact our Data Protection Officer
- raise a concern with us
- make a complaint to the Information Commissioner
You can find out what information we hold about you, and ask us not to use any of the information we collect.
Further information
If you would like further information about this privacy notice, please email dpa.officer@stockport.gov.uk
Updates (notice)
Our core data protection obligations and commitments are set out in our primary privacy notice.
We may update or revise this privacy notice at any time. If you are reading this as a printed copy please refer to www.stockport.gov.uk for the most up to date version.