Somerset COVID-19 Helpline and Web Service Privacy Notice

What we do with the information you give us when you use the Somerset COVID-19 helpline and Web Service.

Data Controllers

Somerset County Council - ICO Registration Z5957592
Mendip District Council - ICO Registration Z7552163
Sedgemoor District Council - ICO Registration Z5968381
South Somerset District Council - ICO Registration Z7228012
Somerset West and Taunton Council - ICO Registration ZA508925

Data Protection Officer contacts

informationgovernance@somerset.gov.uk
DPO@mendip.gov.uk
FOI@sedgemoor.gov.uk
DPO@southsomerset.gov.uk
DPO@somersetwestandtaunton.gov.uk

Purpose for processing

The personal data that you provide is used for the operation of the joint Somerset single COVID-19 telephone helpline and equivalent web service.  The helpline/web service is a joint service between Somerset County and District Councils and provides signposting, advice and support in matters relating to the COVID-19 (Coronavirus) pandemic.  The Helpline will use information supplied by Central Government and held by all Somerset Councils to identify individuals/households which may require additional support during the crisis and will contact those individuals/households assess and support need.

Categories of personal data

The personal data processed will depend on the nature of the transaction, but will include name and contact details and may include special category data (data which requires an additional level of protection due to the sensitivity of it), such as information about your health conditions.

Legal basis for processing

General personal data:
Article 6(1)(e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Special category data:
Article 9(2)(g) - processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
Article 9(2)(i) - processing is necessary for reasons of public interest in the area of public health

Data sharing

The COVID-19 helpline and web service is operated in Somerset as a joint venture between the County and District Councils.  Information will be shared between partners where it is necessary to do so in fulfil the above stated purpose.  Information provided to the helpline or online will be passed to the appropriate council for action or shared with other public service partners (e.g. health providers) or voluntary services where they are appropriate to meet the need.

Your personal information may also be shared where there is a statutory obligation to do so - for example, to safeguard someone from harm or for the prevention or detection of crime or fraud.

Transfers abroad 

Your data will not be transferred abroad unless you are specifically informed at the point your data is collected.

Data retention

This data will be retained for a period of 3 years.  Data may be used during this period for training, quality control and analytics.

Your rights

You have a number of rights in relation your personal data, including the the right to ask for a copy of your data.  Please refer to the relevant council website for further details:

Somerset County Council

Mendip District Council

Sedgemoor District Council

South Somerset District Council

Somerset West and Taunton Council

It should be noted that not all rights apply in all cases and that these rights are only applicable if the Council has no other legal obligation concerning that data.

More information about your rights.

You also have the right to complain to the regulator.