Coventry City Council complies with the Data Protection Act and UK GDPR and is registered with the Information Commissioner's Office (ICO) as a Data Controller.
This Privacy Notice explains how personal information is going to be used, what for, who it will be shared with and why.
We will collect and hold personal information about so that we can operate the Council’s response to the Coronavirus (COVID-19) pandemic. We use this information to fulfil the local authority’s role as part of the NHS Test and Trace service.
Your personal data will also be combined with other data to undertake statistical analysis for the purposes of:
Our lawful basis for processing the data is that it is part of our Public Task and official authority under the Health and Social Care Act (2012), Care Act 2014, Children Act 1989 and the notices issued under the Health Service (Control of Patient Information) Regulations 2002 for the duration of the pandemic and the reset and recovery phase. This is a task in the Substantial Public Interest in the area of public health and in line with government requirements.
Where necessary and proportionate, your personal data may be shared with other public bodies, including:
We will only share relevant information where necessary to respond to the Covid-19 outbreak. All sharing will be in line with the requirements of the Health Service (Control of Patient Information) Regulations 2002 (COPI) and Data Protection Act 2018.
We will only keep your information for the purposes of this privacy notice so we can give you the service you need, unless we must keep it for legal reasons. Personal data pertaining to contact information held by Test and Trace is kept for five years. Other retention period is set out in the Records Management Code of Practice for Health and Social Care 2016.
You have the right to:
To exercise any of these rights please contact [email protected].
You have the right to submit a complaint if you are unhappy with the way your request is handled or disagree with a decision made by the council regarding your data. In these circumstances, you can contact the Data Protection Team (DPO) and request a review of the decision. [email protected]
If you are not satisfied with any outcome from the DPO you may wish to apply to the Information Commissioner's Office at:
The Information Commissioner's Office,
Date of last review: March 2021