|
Introduction
|
This Privacy Notice sets out how West Midlands Combined Authority (WMCA) will use and protect your personal data which is collected, handled, and processed by WMCA as part of the administration of the Net Zero Business Pledge website. WMCA is the Data Controller for this personal data.
We are supported in delivering our Net Zero Business Pledge programme by Sustainability West Midlands who are contracted to assist us.
In this privacy notice we outline our obligations and commitments to you. We also explain your rights under data protection legislation which regulates the use of personal data.
|
|
Your personal data – what is it?
|
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of data is governed by the Data Protection Act 2018.
|
|
Why do we collect personal data?
|
Personal data is collected to enable you to access Net Zero Business Pledge website, and so that we can provide you with our Net Zero services or opportunities.
|
|
How do we collect your information
|
· Directly from you, through information you provide via the Net Zero Business Pledge website.
· Through enquiries you make via the website
· From cookies, which provide us with information about your visit to the website.
· Email communications.
· Telephone.
· Face to face.
|
|
What Personal data will we collect?
|
To provide you with services and opportunities we may need to collect various types of personal data. This may include:
· Full name(s)
· Email address
· Postal address
· Phone number
· Password
· Username
· User ID
· Other information that may be required to resolve any enquiry.
|
Cookies
|
A ‘cookie’ is a small text file that’s stored on your computer, smartphone, tablet, or other device when you visit a website.
Some cookies are necessary for the functionality of the website, and they are deleted from your device once you close your browser. These are known as session cookies. Others remain on your device until they expire, or you delete them from your cache. These are known as persistent cookies and enable us to remember things about you as a returning visitor.
We use session and persistent cookies to distinguish you from other users. This information helps us to provide you with a good experience when you browse our website, and it also allows us to improve our website accordingly.
We also use analytical cookies, which allow us to recognise and count the number of visitors and to see how visitors move around the website when they are using it. This helps us to improve the way our website works.
We will not use cookies to collect personal identifiable information about you and we recommend that you allow the use of cookies. However, if you wish to restrict or block the cookies which are set on our websites, you can do this through your browser settings. The Help function within your browser should tell you how.
|
|
How the law allows us to use your information?
|
· Where WMCA have responsibilities to perform a task in the public interest or is exercising an official function which has a clear basis in law
· We have a lawful legitimate interest in processing the data.
· You have consented for your data being processed
|
|
How do we process your personal data?
|
We ensure your data is only handled in accordance with Data Protection legislation by:
· Only collecting from you what we are lawfully permitted to,
· Only using information, we collect in a lawful and fair manner,
· keeping personal data up to date,
· storing and destroying it securely,
· not collecting or retaining excessive amounts of data,
· protecting personal data from loss, misuse, unauthorised access, and disclosure,
· ensuring that appropriate organisational and technical security measures are in place to protect personal data,
· ensuring your privacy is lawfully protected.
|
|
Who do we share your information with
|
We will only share information that is necessary and permitted under the Data Protection Act 2018. Any information shared will be proportionate and limited only to what is necessary.
We will not share your information with anyone except:
a) Where we have your permission,
b) Where required for any services we are providing you,
c) If permitted to share by data protection legislation.
Sharing will only take place under strict contractual sharing agreements.
Information will be shared with our partner Sustainability West Midlands who are contracted to assist us with our Net Zero program Pledge programme.
|
|
How long do we keep your personal information?
|
In accordance with WMCA Data Retention and Disposal Policy your data will be kept for a controlled limited period and no longer than it is necessary.
|
|
What are your rights?
|
You as the Data Subject, have the following rights, subject to conditions set out in the Data Protection Act 2018.
Rights
|
Description
|
|
Access – You have a right to get access to the personal information we hold about you
|
If you would like a copy of the personal information, we hold about you please contact us at:
Email: [email protected]
Address: Data Protection Officer, 16 Summer Lane, Birmingham, B19 3SD
|
|
Rectification – You have a right to rectification of inaccurate personal information and to update incomplete personal information
|
If you believe that any information that we hold about you is inaccurate, you have a right to request that we restrict the processing of that information and rectify the inaccurate personal information.
Please note that if you request us to restrict processing your information, we may have to suspend any services we provide to you.
|
|
Erasure – You have a right to request that we delete your personal information
|
You may request that we delete your personal information if you believe that:
· we no longer need to process your information for the purposes for which it was provided,
· we have requested your permission to process your personal information and you wish to withdraw your consent, or
· we are not using your information in a lawful manner.
Please note that if you request us to restrict processing your information, we may have to suspend the services we provide to you.
|
|
Restriction – You have a right to request us to restrict the processing of your personal information
|
You may request us to restrict processing your personal information if you believe that:
· any of the information that we hold about you is inaccurate,
· we no longer need to process your information for the purposes for which it was provided, but you require the information to establish, exercise or defend legal claims, or
· we are not using your information in a lawful manner.
Please note that if you request us to restrict processing your information, we may have to suspend the services we provide to you.
|
|
Portability – You have a right to data portability
|
Where we have requested your permission to process your personal information or you have provided us with information for the purposes of entering into a contract with us, you have a right to receive the personal information you provided to us in a portable format.
|
|
Objection – You have a right to object to the processing of your personal information
|
You have a right to object to us processing your personal information (and to request us to restrict processing) unless we can demonstrate compelling and legitimate grounds for the processing, which may override your own interests, or where we need to process your information to investigate and protect us or others from legal claims.
Please note that if you request us to restrict processing your information, we may have to suspend the services we provide to you.
|
|
Withdraw consent – You have a right to withdraw your consent
|
Where we rely on your permission to process your personal information, you have a right to withdraw your consent at any time.
We will always make it clear where we need your permission to undertake specific processing activities.
|
|
Lodge complaints – You have a right to lodge a complaint with the regulator.
|
If you wish to raise a complaint on how we have handled your personal information, you can contact our Data Protection Officer who will investigate the matter.
We hope that we can address any concerns you may have, but if you remain unhappy you can contact the Information Commissioner’s Office (ICO). For more information, visit: ico.org.uk
|
|
|
How to contact us
|
For further details on how your information is used, how we maintain the security of your information, and your rights to access information we hold on you please contact [email protected] or contact the Data Protection Officer at:
Data Protection Officer
West Midlands Combined Authority
16 Summer Lane,
Birmingham,
B19 3SD
|
|
Main Privacy Policy
|
For more information you please visit our main Privacy Policy
|
