Before we process personal information, we must have a valid legal footing. These legal footings are called Lawful Basis. A valid lawful basis will be required for processing personal information or special category personal information.
Depending on the purpose for collecting your information, our lawful basis might be;
- Consent
- Contract
- Where you have made the information public,
- When the law says we must
- To protect you or others when you or others are not in a position to provide consent.
- If the information is important for the public good and this reason is supported by specific law
- Because of our role as a Childrens Trust responsible for provision of social care and protection
- For reasons of public health
- Preventative or occupational medicine
- Preserving the record for the future and to study patterns that will help us provide better services.
Processing of data can mean using the personal information in any way, such as:
- Collecting / obtaining / recording
- Storing (including holding on someone else’s behalf)
- Reading / viewing
- Sharing and disclosing
- Amending or altering
- Analysing
- Deleting / destroying
- Adapting
Everything the Trust does with your personal information will be classed as processing.
Personal Data
To process personal data we must have a lawful basis under Article 6 of the UK GDPR. Those the Trust may rely on are:
- Consent: the individual has given clear consent for us to process their personal data for a specific purpose.
- Contract: the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Vital interests: the processing is necessary to protect someone’s life.
- Public task: the processing is necessary for us to perform a task in the public interest or for our official functions.
If you have provided us with your consent to use your personal information, you can withdraw your consent at any time by contacting us using the contact details in Section 11.
Special Category Information
Special category data is personal data which is more sensitive and has the potential to cause more harm if processed inappropriately. The following types of information are special category data that the Trust may process about you:
- race
- ethnic origin
- nationality
- politics
- religion
- trade union membership
- genetics
- biometrics (where used for ID purposes)
- health
- sex life
- sexual orientation
- criminal history
To process special category data we also need a lawful basis under Article 9 of the UK GDPR. The ones which the Trust may rely on are:
- The data subject has given explicit consent to the processing.
- Processing is necessary for the purposes of employment and social security and social protection law.
- Processing is necessary to protect the vital interests of the data subject.
- Processing relates to personal data which are manifestly made public by the data subject.
- Processing is necessary for the establishment, exercise or defence of legal claims.
- Processing is necessary for reasons of substantial public interest.
- Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.
- Processing is necessary for reasons of public interest in the area of public health.
- Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
If you have provided us with your consent to use your special category personal information, you can withdraw your consent at any time by contacting us using the contact details in Section 11.