Mayor and Councillors privacy notice

What is the legal basis for processing (using) your information?

To collect and use your personal information, it is necessary for me to have a lawful basis.

The legal bases relied on for processing personal information when responding to requests from constituents are:

  • UK GDPR Article 6(1)(a) – where you have provided consent for us to process your information to enable us to answer your query or help with your problem
  • UK GDPR Article 6 (1) d) - to protect your vital interests – such as a life-or-death situation or to protect you from harm or to protect the vital interests of another person
  • UK GDPR Article 6(1)(e) – where processing is necessary to perform a task in the public interest, or for the official functions in us as an elected representative, where that task has a clear basis in law (public task)
  • UK GDPR Article 6 (1) (f) - where processing is necessary in pursuit of legitimate interests as an elected representative and those of constituents or third parties 

Special category data

When processing special category data, the following additional lawful bases are considered:

  • for statutory and government purposes (Schedule 1, Part 2, section 6, DPA 2018)
  • where processing is necessary for purposes relating to political activities, including casework (Schedule 1, Part 2, section 22, DPA 2018)
  • where processing is necessary for us as an elected representative to respond to a request (Schedule 1, Part 2, section 23, DPA 2018)
  • UK GDPR Article 9(2)(a) – where you have provided explicit consent (this will usually be in writing) to process your special category information to enable us to answer your query or help with your problem 
  • UK GDPR Article 9(2) c) - to protect vital interests when you are not able to give your consent and you or someone else is at risk of harm
  • UK GDPR Article 9(2)(g) – where processing is necessary for reasons of substantial public interest, specifically:
  • for the safeguarding of children and of individuals at risk (Schedule 1, Part 2, section 18, DPA 2018)
  • we may also process your information for the establishment, exercise or defence of claims or whenever courts are acting in their judicial capacity.