Covid-19 Privacy Notice

Covid-19 privacy notice - Care home and residential home vacination 

Covid-19 privacy notice - Supporting vulnerable people


How the Council uses your personal data during the COVID-19 Pandemic.

This privacy notice explains how Gwynedd Council will collect, use and protect personal data specfically with regard to the COVID-19 (coronavirus) Pandemic.

The council holds data regarding residents, employees and service users. The use of these data are covered in the Council’s Privacy Notice. Under normal circumstances, the Council would provide you with information about any new uses of your personal data. However, due to the current Pandemic, it may not always be possible to reflect all the new or changed uses of personal data that may happen as a response to the COVID-19 Pandemic.

Additionally we may in this current crisis need to ask you or be provided with personal information including sensitive personal information for example your age or if you have any underlying illnesses or are vulnerable, that you have not already supplied. This is so the Council can assist you and prioritise its services.

 

Your personal data

Personal data relates to a living individual who can be identified from that data.

Some of your personal data is classed by data protection legislation as 'special categories of personal data' because it is considered to be more sensitive in nature and therefore requires additional protection.

 

The personal data we collect about you

We may collect, use, store and transfer some or all of the following personal data, which may include special category (sensitive) data:

  • Basic personal information, e.g. your name, address and date of birth
  • Email address
  • National identifier such as NHS number, National Insurance Number, etc.
  • Information about your family
  • Details about your lifestyle and social circumstances
  • Physical and mental health details

Why we may use your personal data

We may use your personal data in order to:

  • Manage public health risks
  • Understand how COVID-19 behaves
  • Control the spread of infection
  • Provide support and health protection
  • Prevent illness
  • Monitor public safety
  • Assess the availability and capacity of health and social care services
  • Identify and safeguard individuals who are high risk and vulnerable
  • Provide information to the public, partner agencies and Welsh Government about COVID-19
  • Collaborate with partner agencies, so that essential service provision is identified and supported
  • Conduct research and emergency planning

Legal basis for processing your personal data

How we process your personal data will determine the legal basis for processing. The legal bases for processing by the council as a public authority will be:

  1. Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)GDPR)
  2. Where disclosure is in the vital interests of yourself or another person (Article 6(1)(d) and 9(2)(c) GDPR)
  3. Where it is necessary for the reasons of substantial public interest Article 9(2)(g)
  4. Where it is in the interest of public health Article 9(2)(i)

Sharing your personal data

During the COVID—19 Pandemic, we may share your information with other public authorities, emergency services, and other stakeholders where necessary. This will done in a way that complies with data protection legislation.

 

How long we keep your personal data

We will only keep your personal data for as long as is necessary for the purpose for which we are processing it, unless we have a legitimate reason for keeping it, for example, any legal requirement to keep the data for a set time period. When it is no longer necessary to continue to process your personal data we will destroy it in a secure way.

 

Your rights and your personal data

View information