This document provides information on how Norfolk County Council’s Corporate Property team uses your personal information to manage Norfolk County Council’s property estate. Please note we have a separate notice for County Farms.
By ‘use’ we mean the various ways your personal information may be processed including storing and sharing the information.
We also provide further details regarding:
You can see this information in our General Privacy Notice or you can ask us for a copy of this information.
We use your personal information primarily to manage Norfolk County Council’s property estate including:
We also use this information to assess the quality of our services and evaluate and improve our policies and procedures.
We may also use information in other ways compatible with the above.
The information we may collect and use may include your:
We also collect health information including any disabilities and medical conditions you may have. Health information is classed as “special category data” under the GDPR.
The information we hold includes information you have provided to us. We may also receive information from:
We have legal grounds to process this information because it is necessary to comply with a legal duty or fulfil a public task. This includes under the:
We also process personal information where it is necessary for the performance of a contract (eg lease, licence, service and maintenance contract).
We have legal grounds to process special category data where it is necessary for reasons in the substantial public interest. This will include where it is necessary to carry out any of our statutory functions. The statutory functions are as set out above.
The GDPR includes safeguards to protect the use of your special category data. Further details can be found on our website in Special category data and criminal offences data policy, which sets out our procedures for compliance with the principles of the GDPR and the retention and erasure of this information.
We may also share your personal information with other organisations and public bodies, in particular:
We share this information without your specific consent as it is reasonable and necessary to do so to fulfil our public tasks or it is otherwise in the substantial public interest to do so. The law imposes safeguards to protect your privacy in these circumstances.
We will also share your information, subject to contractual and other legal safeguards, with organisations contracted by Norfolk County Council to provide a service to the council or directly to you. These service providers are known as data processors and have a legal obligation under GDPR and to Norfolk County Council to look after your personal information and only use it for providing that service. These organisations include:
Finally, we may also share your information across different departments of the Norfolk County Council, where it is necessary for our public tasks or functions to do so.
We do not make automated decisions about you and your family.
The information is stored electronically, on the Norfolk County Council’s records management system. Additionally, information is securely stored in other mediums, including email accounts and in paper files. We do not process your information outside of the European Economic Area.
This notice was updated in January 2019.