Data protection policy

 Data protection legislation provides individuals with the right to:

• access their data
• be informed
• port their data
• erase their data
• object to the processing
• rectify their data
• restrict the processing
• rights in relation to automated decision making and profiling

The rights set out above are not absolute rights and may be dependent upon the lawful processing ground used. Furthermore, they may be subject to an exception or an exemption as set out under Data Protection Legislation.

We will take reasonable authentication steps to verify your identity. We will ordinarily request to see two original forms of identification as detailed on our Subject Access Request Form.

Where one of the rights detailed above are exercised, these will be actioned by the Council without undue delay and ordinarily within one calendar month. This time may, on occasion, be extended by up to two months, in compliance with data protection legislation. Where it is necessary to extend this time we will the data subject of the reasons for this delay.

The Data Protection Officer

The Data Protection Officer and team can be contacted by e-mail at gdpr@great-yarmouth.gov.uk.

Subject access request

A subject access request made in electronic form will ordinarily be responded to in the same format, unless otherwise requested.

A charge will not usually be made for a subject access request. Data protection legislation prescribes that a charge could only be made whereby further copies of personal data are requested by a data subject or where a request is manifestly unfounded or excessive. In these circumstances, the Council will make an assessment as to whether we have the resources to deal with the request in line with Article 12 (5) of the UK GDPR or whether this will be refused under Article 12(5)(b).

Automated decision making

In order to improve the efficiency of services, we may use automated decision-making processes in compliance with Article 22(2) of the UK GDPR. If an automated decision is made about you that is significant (one that has a legal effect, or otherwise significantly affects you), you will be notified of this, together with your rights to challenge this decision.

The privacy notices displayed in the Privacy notices and statements section of our website detail where and how the Council carries out automated decisions.