Coronavirus (COVID-19) - Privacy Notice
Coronavirus (COVID-19) - Privacy Notice
Who is the Data Controller for this processing?
Melton Borough Council is the Data Controllers for this processing.
What services are covered by this privacy notice?
Covid-19 High Risk Groups
Personal data is being collected to assess and provide support to adults, children and young people who are in high-risk categories and would be considered vulnerable, if infected with Coronavirus.
Please read our Summary Covid-19 High Risk Groups Privacy Notice for further information.
Personal data is being collected in order to coordinate the community response to Covid-19.
Please read our summary Community Volunteers Privacy Notice for further information.
Support for staff
Personal data is being collected to enable the Council to identify any staff (or those closely linked to staff/dependents) who are in any of the high-risk categories and would be considered vulnerable, if infected with Coronavirus.
Please read our summary Covid-19 Employee Privacy Notice for further information.
Community Response Fund
Personal and business data is being collected in order to assess an application for funding from the Community Response Fund. The focus of the fund is to offer community organisations emergency funding to respond to issues in the community as a result of Coronavirus.
Applications will be considered from groups who show they are providing a service or initiative that benefits others in their community directly in relation to responding to this emergency.
Any group based in the Borough of Melton, Voluntary organisations, community groups, small charities and other not for profit organisations can apply for the funding.
Small Business and Retail, Hospitality and Leisure Grant and Discretionary Grant Scheme
Personal and business data is being collected in order to assess an application for funding from the above funds. The focus of the fund is to support businesses through the current Covid-19 crisis.
We are collecting your personal data including bank details for the following purposes:
- To correctly assess your eligibility to receive funding from the Coronavirus Support Fund;
- To protect public funds, including the prevention and detection of crime or fraud
Applications will be considered from eligible applicants who are able to demonstrate they are entitled to receive a grant form the grant funds as per the Guidance as set out by Central Government.
To ensure only those businesses who are entitle to receive the funding are doing so the local authority will undertake a series of due diligence checks with the information provided, Where relevant these checks will include but not be limited to; companies house checks, VAT registration checks and use of government systems such as the Spotlight service to ensure that the applications received
The Secretary of State for Health & Social Care has given notice under Regulation 3(4) of the Health Service Control of Patient Information Regulations 2002 that the Council is required to process and share necessary health and social care data for the following purposes:
- understanding Covid-19 and risks to public health, trends in Covid-19 and such risks, and controlling and preventing the spread of Covid-19 and such risks;
- identifying and understanding information about patients or potential patients with or at risk of Covid-19, information about incidents of patient exposure to Covid-19 and the management of patients with or at risk of Covid-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from Covid-19;
- understanding information about patient access to health services and adult social care services and the need for wider care of patients and vulnerable groups as a direct or indirect result of Covid-19 and the availability and capacity of those services or that care;
- monitoring and managing the response to Covid-19 by health and social care bodies and the Government including providing information to the public about Covid-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and adult social care services;
- monitoring and managing the response to Covid-19 by health and social care bodies and the Government including providing information to the public about Covid-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and adult social care services
- delivering services to patients, clinicians, the health services and adult social care services workforce and the public about and in connection with Covid-19, including the provision of information, fit notes and the provision of health care and adult social care services; and
- research and planning in relation to Covid-19
What personal information do we hold?
We only collect and use the minimum amount of personal information required when delivering a service to you.
Wherever possible we use non-identifiable personal information.
The Service may use some or all of the personal information below:
- Information about you, this could include your name, address, date of birth.
- National identifiers such as NHS number, National Insurance number etc.
- Information about your family.
- Details about your lifestyle and social circumstances.
- Physical or mental health details
- Social Care support outcomes
We get most of this information from you, but we may also get some of this data from:
- Central Government Agencies
- Other Local Authorities
- Health and social care providers
- Police and probation services
- Members of the public (referrer)
- Commissioned partners
- Family members
How do we use your personal information?
We use your information for one or more of the following reasons:
- Deliver the service, or handle your query
- To plan and improve the services we offer
- For research, however this would be in anonymised form unless we ask for your consent to use your personal information for this purpose
Who else might we share your personal information with?
Sometimes we may need to share your information, but we will only do so where it is necessary or required by law. We will only share the minimum information for each circumstance.
We may sometimes need to share some of your information with:
- Health service providers including NHS Agencies (GPs, Hospitals, Ambulance, Health Visitor, Mental Health Services)
- Education providers
- Care providers, e.g. day care, domiciliary, residential
- Government Agencies (e.g. Department of Health, Department of Work and Pensions, Secretary of State for Health & Social Care etc.)
- Support groups for people with disabilities
- Local Government
- Prepaid card providers
- Direct Payment Support Services
- Housing associations
- Technology assistance providers
What is the legal basis for our use of your personal information?
Most of the personal information we process is provided to us directly by you, under the General Data Protection Regulation (GDPR), the lawful bases we rely on for using your personal information are:
- We need to protect your vital interests (GDPR Article 6 (d))
- We need it to perform a public task (GDPR Article 6 (e))
When we collect data about your health, we also rely on the following lawful basis:
- We need to collect it for public health (GDPR Article 9 (2) (i))
- We need to analyse your information (GDPR Article 9 (2) (j))
Where will we store your information?
Your information will be securely stored on our network.
How long will we keep your personal information?
We will only use your personal information whilst delivering the service to you and to deal with any questions or complaints that we may receive about this, unless the law requires us to keep it for a longer period.
If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (hand written or typed) during any consultation sessions will be securely destroyed.
The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
To make a request follow the instructions on the Data Protection for you page below.
How to complain if you are unhappy about how your data is used
You can complain directly to the Council by email or post.
- Email: firstname.lastname@example.org
- By post: Data Protection Officer, Melton Borough Council, Station Approach, Melton Mowbray, LE13 1GH
You also have the right to complain to the Information Commissioner’s Office using the following details:
- Information Commissioner's Office (ICO) website
- By post: The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Telephone: 0303 123 1113
Further advice and guidance from the ICO on this issue can be found on the ICO website.
Will my personal information be accessible outside the UK?
Should the transfer of personal information outside of the UK become necessary, it will only take place if permitted by law, and then only where there are appropriate safeguards in place to protect the personal information.