Who will own my data once I submit it?
Knowsley Metropolitan Borough Council (KMBC) and Volair Limited.
Why do you need my information?
KMBC has responsibility for improving the health of the local population under the Health and Social Care Act 2012 which requires them to commission services to deliver on a number of statutory duties and recommended services.
Adults achieving 150 minutes of moderate intensity physical activity a week helps prevent and manage over 20 chronic conditions including coronary heart disease, stroke, type 2 diabetes, cancer, obesity, mental health problems and musculoskeletal conditions. Regular participation in physical activity and sport is also an important factor for mental health and wellbeing. In October 2014, Public Health England published the national physical activity framework for England, which set out the need for action at national and local level. KMBC commissions Volair to provide the Community Wellbeing (Physical Activity) Programme to support the drive to get more Knowsley residents aged 16+ active, and to achieve / exceed the national average in accordance with PHE’s framework for England.
For the purposes of data protection legislation, KMBC and Volair are both independent Data Controllers and are separately responsible to you under the law for the processing of your information.
KMBC and Volair are both committed to ensuring that your information is handled in accordance with the principles set out in data protection legislation and guidance from the Information Commissioner’s Office (ICO).
What personal data will be processed?
In order to effectively deliver the Community Wellbeing Programme, and ensure best outcomes for service users are met, the Council will receive anonymised statistical information from Volair. We ask that you:
- Provide accurate information.
- Provide updates as soon as possible about any changes.
- Provide notification as soon as possible if you notice any mistakes in the information held about you.
We will only ask for the information that is necessary for the service that we are providing to you. The types of personal data processed for the Community Wellbeing Programme include, but not are limited to the following:
- Name (forename and surname).
- Address.
- Contact details (email address, telephone number).
- Date of birth.
- Username.
- Gender.
- Ethnicity.
- SEND / Learning Disability status.
What allows you to use my information?
KMBC’s Public Health Service has responsibility for improving the health of the local population under the Health and Social Care Act 2012 which requires them to commission services to deliver on a number of statutory duties and recommendations.
The conditions used to process the personal data under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 vary depending on purpose of the data shared.
The relevant lawful bases for KMBC’s processing of any personal data and special category personal data shared between the partners are as follows:
- Article 6(1)(e) Public task.
- Article 9(2)(g), Substantial public interest.
- Article 9(2)(h), Health or social care.
- Article 9(2)(i), Public Health
The relevant lawful conditions under the Data Protection Act 2018 are as follows:
- Sch 1, P2 (6), Statutory and government purposes.
- Sch 1, P1 (2), Health and social care.
The legislation underpinning this processing is: Health and Social Care Act 2012 (Regulated Activities) Regulations 2014.
Who will my information be shared with?
Health partners such as your GP, The Healthy Knowsley Service and possibly some other healthcare professionals will share your information with Volair Limited when they refer you to the Community Wellbeing (Physical Activity) Programme.
Volair Limited will provide KMBC with feedback on numbers of referrals and individuals’ progress throughout the 24-week course. This feedback will be anonymised.
Do I have to provide this information and what will happen if I don’t?
KMBC has a statutory duty to commission public health services. Engaging with the service provided by Volair Limited is voluntary however failure to provide the required information may result in Volair being unable to accept your referral onto the Community Wellbeing [physical activity] programme, or a delay in referral onto the programme.
How long will you keep this data for and why?
KMBC will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.
The retention of information, for legal or statutory purposes, is in line with The Records Management Code of Practice for Health and Social Care 2016, namely this is 8 years for adults and 25 to 26 years for children services.
Typically, Volair acting as an independent controller, will retain any non-anonymised personal data for 7 years. Volair has a Record Retention Schedule and an automated process to delete records once the 7-year retention period has ended.
How will my information be stored?
KMBC and Volair Limited will process (store, share etc.) personal data using secure software and systems. Staff at both organisations complete mandatory data protection training on an annual basis.
Will this information be used to take automated decisions about me?
No.
Will my data be transferred abroad and why?
No.
What rights do I have when it comes to my data?
Under the Data Protection Act (DPA) 2018/ UK General Data Protection Regulation (UK GDPR), you have the following rights with regards to your personal data: -
- The right to subject access – you have the right to see a copy of the personal data that the council holds about you and find out what it is used for.
- The right to rectification – you have the right to ask the council to correct or remove any inaccurate data that we hold about you.
- The right to erasure (right to be forgotten) you have the right to ask the council to remove data that we hold about you
- The right to restriction – you have the right to ask for your information to be restricted (locked down) on council systems.
- The right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request.
- The right to object – you have the right to ask the council to stop using your personal data or to stop sending you marketing information or complain about how your data is used.
- The right to prevent automated decision making – you have the right to ask the council to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable).
To find out more about your rights under the DPA 2018/UK GDPR, please visit the Information Commissioner’s website.
To request a copy of your data or ask questions about how it is used, please write to: -
Data Protection Officer
Knowsley Council
Municipal Building
Archway Road
Huyton
Liverpool
L36 9YU
Or email: Inforights@knowsley.gov.uk
Who can I complain to if I am unhappy about how my data is used?
You can complain directly to the Council’s Data Protection Team by writing to: -
Data Protection Officer
Knowsley Council
Municipal Building
Archway Road
Huyton
Liverpool
L36 9YU
Or email: data.protection.officer@knowsley.gov.uk
You also have the right to complain to the Information Commissioner’s Office using the following details: -
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 08456 30 60 60 or 01625 54 57 45
Website: www.ico.org.uk