Waste Management privacy notice

Waste Management Privacy Notice                                                      

When you are accessing or applying for services provided by Waste Management you will need to provide us with some personal data or information.

As the 'data controller' for the personal information - or data - we hold about you, South Ayrshire Council decides how your personal information is used/processed, and what it is used for.

This statement provides more details about this and provides information on how to get in touch with us if you need to know more.

Your personal data - what is it?

Personal data is information relating to a living person who can be identified from that data. Identification can be based on the information alone, or in conjunction with any other information. The processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR) and supplemented by the Data Protection Act 2018.

What Personal Data will we collect from you?

We will only collect the personal information we need to provide you with relevant information, services and support. The personal data we will collect includes: 

• Name
• Date of Birth/Age
• Address
• Telephone Number
• Email Address
• Signature

The personal data we may collect, depending on the nature of the service includes: 

• National Insurance number
• Council tax reference number
• Composition of Household
• Benefit Awards
• Medical Information
• Disability
• Heath conditions

How will we use your information?

The information will be used to manage all waste management related matters. We will collect personal data in order to oversee the provision of waste management services.  We will also use your information for the purpose of assessing your eligibility for any additional service that you have requested.  Where your application is approved, details of your address will be passed to relevant waste management personnel for the purposes of providing the service.

What is the legal basis for using/sharing your information?

The legal basis is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller as per Article 6(1) (e) of the UK GDPR, and the task or function has a clear basis in law. The main laws relating to Waste Management are:

• The Waste (Scotland) Regulations 2012
• European Landfill Directive 199/31/EC
• Environmental Protection Act 1990

Special category data

For some activities, we also need to process more sensitive personal information about you known as special category data, for example health information. Processing is necessary for reasons of substantial public interest as set out in Article 9(2) (g) of the GDPR and meets a condition in Part 2 of Schedule 1 of the Data Protection Act 2018.

Who will we share your information with?

We will share your information with South Ayrshire Council Customer Services to enable them to process missed bin enquiries. 

We have a duty to manage public funds, prevent and detect fraud so we may share information you have provided with relevant bodies as is permitted by law.

How long do we keep hold of your information?

We keep your personal data for no longer than reasonably necessary.  Your information will be retained in line with our Corporate Records Retention Schedule as follows:

What are your rights?

The lawful basis for processing/using your personal data directly impacts which rights are available to you. For example, some rights will not apply, if we are processing your data under public task (Article 6 (1) (e)) we are not required to:

• erase your personal information in certain circumstances.
• enable the right to data portability

However, you do have the following rights and you can ask us to:

•  correct your personal information if it is inaccurate;
• complete your personal information if it is incomplete; and
• restrict the processing of your personal information in certain circumstances.

You also have the right to object to the processing of your personal information.

What are the consequences of failing to provide personal information?

Consequences of failing to provide the personal data required:

• invalidate your application
• Unable to provide you with  requested services

What about Automated Decision-Making?

The Council does not use profiling or automated decision-making. Some processes are semi-automated (such as data matching for the prevention or detection of fraud), but an actual person will always be involved before any decision is reached affecting any individual.

Do you require this statement in a different format?

Please contact us if you require this information in an alternative format.

How can you get in touch with us?

If you wish to obtain any records held by the Council relating to you, or if you have any general data protection queries, please contact the Council's Data Protection Service at:

Data Protection Officer
South Ayrshire Council
County Buildings
Wellington Square
Ayr
KA7 1DR

Email: DataProtection@south-ayrshire.gov.uk
Telephone: 01292 612 223

Are you dissatisfied with the way your Personal Information has been handled?

If you are unhappy with the way we have dealt with your personal information, you can complain to the Council's Data Protection Officer using the contact details noted above.

If you remain dissatisfied after contacting us, you have the right to complain to the Information Commissioner (https://ico.org.uk/for-the-public/):

Information Commissioner's Office - Scotland

Queen Elizabeth House

Sibbald Walk
Edinburgh

EH8 8FT

Email: Scotland@ico.org.uk
Telephone: 0303 123 1115