Who is the data controller for the information we collect
Leeds City Council is the data controller for the purposes of the Data Protection Act 2018 and other regulations including the UK General Data Protection Regulation, which means it determines what your data is used for and why it is collected. The purpose of this privacy notice is to tell you about what information we collect about you when you use our service, how we use that information and who we may share it with. The contact details of the data controller are Leeds City Council, Merrion House, 110 Merrion Way, Leeds, LS2 8BB.
The data we will collect
To deliver the Customer Contact , we will process data on:
Personal data:
- Name
- Address
- Contact details
- DOB
- Account numbers
- Financial information
- Employment history
Special category data:
How do we collect information about you
We collect information about you from you directly (for example, by asking you to complete one of our forms, via phone, through our contact centre or face-to-face). We may also obtain your information from other sources such as:
- your family members, carers or other persons acting on your behalf
- internal council departments
- other public authorities
- NHS Trusts
Why we process your data
We use your information for service delivery in regards to the service that you have requested, included but not limited to the following:
- job shops
- welfare rights
- Blue Badge applications
- service delivery (including but not limited to highways, housing, waste, Council Tax, public health and safeguarding)
- service improvement and planning
- statutory requirements (for example, reporting to and administration on behalf of central government)
- prevention and detection of crime
All the data collected will be treated in strict confidence and in accordance with the requirements of the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR). The data provided by you will only be used for the purposes specified.
Lawful basis for processing
We will process your data in accordance with UK GDPR Article 6(1). The processing shall be lawful only if and to the extent that the following applies:
- Article 6(1)(a) - Your consent
- Article 6(1)(c) -We have a legal obligation
- Article 6(1)(e) -We need it to perform a public task
We will process your data in accordance with UK GDPR Article9(2). The processing shall be lawful only if and to the extent that the following applies:
- Article 9(2)(a) - Your explicit consent
- Article 9(2)(b) -To carry out our the obligations and specific functions in the field of employment and social security and social protection as laid out in law
- DPA 2018 Schedule 1, part 1(1) - Employment, social security and social protection
- Article 9(2)(g) -Substantial public interest laid out in law
- DPA 2018 Schedule 1
This is in order for us to fulfil our statutory obligations under various UK laws, including but not limited to the following legislation:
- Data Protection Act 2018
- The Human Rights Act 1998
- Housing Benefit Regulations 2006
- Disabled Persons' Parking Badges Act 2013
- Local Welfare Support Scheme
- The Equality Act 2010
- Localism Act 2011
- The Local Government Finance Act 1992
- The Highways Act 1980
- Crime and Disorder Act 1998
- Health and Safety at Work Act 1974
Withdrawing your consent
You have the right to withdraw your consent from participating in the scheme / service at any time. Withdrawing your consent will not affect any services or benefits you receive from the council. However, it may mean you will not be eligible for scheme or service you have agreed to participate in. If you decide that you no longer wish to participate in the scheme, please contact the appropriate service.
Data retention, storage and destruction
Our data retention policies and procedures are designed to help ensure that we comply with our legal obligations in relation to the retention. This means that your information will be kept for 6 years after we cease to provide a service to you unless the law says that we need to hold it for longer or if there is a business requirement to do so. After this, your information will be deleted or archived.
Who can we share your data with
We share your data with agencies shown below as follows:
- elected members and MPs (as your representative)
- other council departments (please see service specific privacy notices for information about how those departments use your data)
- Police
- other local authorities
- central government departments
- Public Health England
- Microsoft (for account authentication purposes only)
In addition, we will share your personal data:
- where such disclosure is necessary for compliance with a legal obligation to which we are subject
- in order to protect your vital interests or the vital interests of another natural person
- for the purposes of security and prevention of fraud and other criminal activity
- where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure
Automated decision making
Your data will not be used for any automated decision making, including profiling.
Your rights
The following rights under data protection law are applicable for this processing:
- the right to access - you can ask for copies of your personal data
- the right to rectification - you can ask us to rectify inaccurate personal data and to complete incomplete personal data
- the right to erasure - you can ask us to erase your personal data
- the right to restrict processing - you can ask us to restrict the processing of your personal data
- the right to data portability - you can ask that we transfer your personal data to another organisation or to you
- the right to object to processing - you can object to the processing of your personal data
- the right to complain to a supervisory authority - you can complain about our processing of your personal data
- the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent
Where we process data under consent the following will not apply:
- the right to object to processing - you can object to the processing of your personal data
Where we process data under contractual obligation the following will not apply
- the right to object to processing - you can object to the processing of your personal data
- the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent
Where we process data under public task the following will not apply:
- the right to erasure - you can ask us to erase your personal data
- the right to data portability - you can ask that we transfer your personal data to another organisation or to you
- the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent
All the rights are subject to certain limitations and exceptions. You can learn more about your rights through the
your rights and how to exercise them page, and the
Information Commissioner's Office website. You may exercise any of the above rights in relation to your personal data by writing to us, using the contact details provided below.
Contact us
Any queries in relation to this privacy notice should be forwarded to:
Phone: 0113 222 4444
Email:
general.enquiries@leeds.gov.uk
Data Protection Officer
Aaron Linden
Head of Information Management and Governance - Data Protection Officer
Leeds City Council
Merrion House
110 Merrion Way
Leeds
LS2 8BB
DPO@leeds.gov.uk
The council privacy notice is available to view online.
If you are unhappy with the way in which your information has been handled you should speak with the specific service in the first instance.
Any data protection complaints about how the council has processed your personal data, will be handled in accordance with the council's complaints policy. You can find out how to submit a complaint online.
You can refer to the Information Commissioner if you consider that there has been an infringement of data protection legislation.
Further details can be found on the Information Commissioner's website.
Changes to this privacy notice
We keep our privacy notice under regular review. We will notify you of significant changes to this notice by email or other means as appropriate. This privacy notice was last updated on 4 November 2024.
