- Privacy notice
This privacy notice relates to the Rugby Borough Council website and Customer Relationship Management (CRM) system. It applies to information provided by post, email, and telephone as well as the online ("Self") account accessible via www.rugby.gov.uk.
The data controller
The data controller for the Rugby Borough Council website and CRM system is:Rugby Borough Council, Town Hall, Evreux Way, Rugby CV21 2RR, United Kingdom.
We will store the data in our CRM system and restrict access according to our data security policies.
The personal data we would like to collect from you is your web identifier, and any details requested through the website or CRM system. This may include your name, address and contact details, and details of any service that you request. We will use this data for the following purposes:
- To provide a self-service account for you to access council services;
- To create a customer record that allows us to link details of service requests to your information;
- To provide you with the service that you have requested.
The processing is necessary so that we can create a self-service account at your request; or in order for us to provide a service that you have requested. Data protection law describes this legal basis as in the council's legitimate interests. If you request a service from us we may process your data using an alternative legal basis, either because the processing is necessary for the performance of a contract or because the processing is in the public interest.
If you do not provide the information we ask for we may not be able to provide the service that you need.
We do not collect special categories of personal data in relation to the Customer Relationship Management system.
We do not need your consent to collect or process your personal information in relation to the council's website or CRM system. This is because we need the information to provide you with the services that you have requested.
Rugby Borough Council may pass on your personal data to third parties for the purposes of detecting or preventing fraud or other crime, or if it is necessary to provide the service that you have requested. These organisations may include:
Warwickshire County Council, Warwickshire Police, the Department of Work and Pensions, or any other organisation where we are required by law to share information.
We will also share details about how you use our website with Google analytics, for the purposes of monitoring and improving our web systems. Your IP address is anonymised within the Google Analytics system and we do not have access to any personally identifying information.
The council has a data processing contract with Jadu, who provide our website and related support services. They subcontract Positive Internet who host a backup server in the UK and Rackspace Ltd who host our website on UK-based servers and provide support, along with staff from Alert Logic UK Ltd. Both Rackspace and Alert Logic provide round-the-clock support from locations in the UK and the US. Where it is necessary to access personal data to provide technical support, all of our contractors comply with all applicable laws to protect your privacy.
The council also has a data processing contract with Firmstep whose CRM systems will hold your data in a secure location in the UK, hosted by trusted partners. They are only permitted to process your data in accordance with our written instructions in order to provide you with the services you need.
Rugby Borough Council will process personal data for the period it takes to provide you with the service that you have requested and for as long as we use the CRM system and you are a resident of the borough of Rugby. We will store personal data within our CRM system for as long as you are a resident of the borough of Rugby.
Your rights as a data subject
You have the right:
- to request a copy of the information that we hold about you;
- to correct data that we hold about you that is inaccurate or incomplete;
- in certain circumstances you can ask for the data we hold about you to be erased from our records;
- where certain conditions apply to have a right to restrict the processing;
- in some circumstances, to have the data we hold about you transferred to another organisation;
- to object to certain types of processing such as direct marketing;
- to complain if we refuse a request you may make using these rights and you are not happy with our reason.
We may refer any request you may make using these rights to another organisation, if they have been involved in processing your personal data.
If you are unhappy about how we are handling your personal data you can complain to the Data Protection Officer. You can also complain to the Information Commissioner's Office.
The details for each of these contacts are:Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow SK9 5AF, United Kingdom Data Protection Officer, Rugby Borough Council, Town Hall, Evreux Way, Rugby CV21 2RR
This notice was last updated on 12 April 2018.