Privacy Notice
This privacy notice is intended to inform you of how your personal data will be used in our organisation. We take your data protection rights seriously, and we will only use your personal data in the ways we describe here.
Who we are and what we do?
- We are Illogan Parish Council a council in England. Our contact details are Illogan Parish Council, Illogan Parish Council Community Office, Trevelyan Road, Illogan, TR16 4RG.
- We are a data controller for personal data as defined by all applicable data protection and privacy laws including, but not limited to, the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (the “UK GDPR”), as it forms part of the law of England and Wales, Scotland, and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 as amended, and any successor legislation (the “Data Protection Legislation”).
- We are not required to have a Data Protection Officer as defined by Article 37 of the UK GDPR.
- We process your personal data to enable us to manage our organisation and provide a service to you and others
Your data protection rights
- Under the data protection legislation, you have rights including:
- Your right to be informed – You have the right to be informed of our use of your personal data. This notice is designed to give you that information. If you require further information, please contact us using the details below.
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
- Your right in relation to automated decision making including profiling – We do not process personal data in this way.
- You are not required to pay any charge for exercising your rights. If you make a request, the law gives us one month to respond to you, but we have undertaken to respond as soon as possible and in any case 28 days.
- Please contact us using the details in Section 1 above if you wish to make a request.
What data does the data protection legislation cover?
- Data protection legislation is to protect the data privacy of individuals and uphold your rights over your own personal data.
- Definitions:
- Personal Data – means any information relating to an identified or identifiable person (‘data subject’); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
- Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Data Controller – means the person or organisation which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- Data Processor – means a person or organisation which processes personal data on behalf of the Data Controller.
- Third Country – means a country or territory outside the United Kingdom.
- Lawful Basis – means one of the six lawful reasons to process personal data as set out in Article 6 of the UK GDPR. At least one of these will apply whenever we process your personal data.
Why do we have your information and how long will we keep it?
- We take your data privacy seriously and will only use your personal data for the purpose for which it was collected.
- For every activity that we undertake using personal data we must be clear what our purpose is for that activity and have a Lawful Basis to process your data.
- Where we process personal data that reveals special category data (article 9 UK GDPR) or personal data relating to criminal convictions and offences (article 10 UK GDPR) we require an additional condition to process.
- We collect and process your personal data for the following purposes for which we collect certain categories of data and in order to lawfully process your data for those purposes we rely on these lawful bases and additional conditions.
| Purpose | Lawful basis | Additional Condition to Process | Categories of data |
| Minutes | Legal obligation | N/a | Identity
Contact information |
| Accounts | Legal obligation | N/a | Identity
Contact information Bank details |
| Correspondence and casework | Public task | Substantial public interest – statutory etc and government purposes | Identity
Contact information Special category data |
| Planning process | Public task | N/a | Identity
Contact information |
| All councillor details | Legal obligation | Substantial public interest – statutory etc and government purposes | Identity
Contact information Special category data Financial information |
| Register of interests | Legal obligation | Substantial public interest – statutory etc and government purposes | Identity
Contact information Financial information Special category data |
| Payroll and pension | Legal obligation | Employment | Identity
Contact information Bank details Financial information Special category data |
| Hire of venue | Contract | N/a | Identity
Contact information Bank details |
| Contract tenders and management | Contract | N/a | Identity
Contact information Bank details |
| Invitations email | Consent | N/a | Identity
Contact information |
| Invitations postal | Legitimate interest | N/a | Identity
Contact information |
| Photos of individuals and small groups | Consent | Explicit consent | Image
Identity |
| Photos of large groups | Legitimate interest | Made public by data subject | Image
Identity |
| Agendas and reports | Legal obligation | N/a | Identity |
| HR and recruitment | Contract | N/a | Identity
Contact information Bank details Education and employment history Special category data |
| CCTV | Legitimate interest | Public interest – preventing and detecting crime | Image
Voice |
| News articles | Legitimate interest | N/a | Identity
Contact information |
| FOI/UK GDPR requests | Legal obligation | N/a | Identity
Contact information |
| Suppliers | Contract | N/a | Identity
Contact information Bank details |
| Councillor code of conduct | Public task | N/a | Identity
Contact information |
- If we have relied on ‘consent’ to process your personal data, you are able to withdraw that consent at any time and we will be happy to assist you.
- We collect data in the following ways
| Categories of data | How we collect your data |
| Bank details | Direct from you |
| Contact information | Direct from you from Cornwall councilFrom find a tender service (fts) Via a community group |
| Education and employment history | Direct from you |
| Financial information | Direct from you |
| Identity | Direct from you
From Cornwall council From find a tender service (fts) Via a community group |
| Image | Direct from you |
| Special category data | Direct from you |
| Voice | Direct from you |
- How long we intend to keep your data
| Purpose | How long we will keep your data |
| Minutes | Indefinitely |
| Accounts | 7 years after current |
| Correspondence and casework | 1 year after completion of case |
| Planning process | Indefinitely |
| All councillor details | Indefinitely |
| Register of interests | Until councillor replaced by another |
| Payroll and pension | 7 years after employment |
| Hire of venue | 7 years after hire |
| Contract tenders and management | 7 years after end of tender or contract and 2 years after unsuccessful contract or tender |
| Invitations email | Until unsubscribe, or no contact for 2 years |
| Invitations postal | Until unsubscribe, or no contact for 2 years |
| Photos of individuals and small groups | 20 years unless historically significant |
| Photos of large groups | 20 years unless historically significant |
| Agendas and reports | Indefinitely |
| HR and recruitment | 7 years after employment or application |
| CCTV | 30 days |
| News articles | Indefinitely |
| FOI/UK GDPR requests | 2 years |
| Suppliers | 7 years after last use of supplier |
| Councillor code of conduct | Indefinitely |
- When we no longer need your personal data to undertake our stated purpose we will delete it or anonymise it so that it no longer permits the identification of you.
- Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with UK GDPR Article 89(1).
- In some cases, we may be allowed to use your personal data to contact you with news about our activities, products or services. We will always offer an opt out and we will always comply with the data protection legislation.
Sharing this information with other data controllers
- We may share your data with another data controller if that controller takes over the purpose for which we collected your data.
- We may be required to share your personal data for legal, judicial, law enforcement or government reasons.
- We routinely share personal data with other data controllers for the following reasons.
| Receiving Data Controller | Reason | Data Controller Location |
| Banks | Payroll and pension | UK / EU |
| Contractors and suppliers | Correspondence and casework | UK / EU |
| Cornwall council | Planning process
Register of interests All councillor details |
UK / EU |
| HMRC | Payroll and pension
HR and recruitment |
UK / EU |
| Law enforcement and similar competent authorities | CCTV
Correspondence and casework |
UK / EU |
| Other local authority | Correspondence and casework | UK / EU |
| Pension provider | Payroll and pension | UK / EU |
| Training providers | All councillor details
HR and recruitment |
UK / EU |
- We may share your personal data with other data controllers to enable us to fulfil our obligations to you or to provide a product or service, in that event we will tell you who we are going to share your data with.
- We take your data protection rights seriously and will take steps to ensure that those we share data with process it responsibly.
Data processors working on our behalf
- We may send your data to a data processor to undertake data processing activities on our behalf.
- We send personal data to data processors for the following reasons.
| Categories of data processor | Reason | Data Controller Location |
| Auditor | Accounts
All Councillor Details Contract Tenders and Management Payroll and Pension |
UK / EU
|
| Cloud IT provider | Accounts
Agendas and reports All Councillor Details Contract Tenders and Management Correspondence and Casework Councillor Code of Conduct FOI/GDPR Requests HR and Recruitment Invitations Email Invitations Postal Minutes News articles Photos of Individuals and Small Groups Photos of large Groups Planning Process Register of interests Suppliers
|
UK / EU / USA
|
| Kresen Kernow (archive) | Minutes | UK |
| MailChimp | Invitations Email | USA |
| Moneysoft | HR and Recruitment | UK / EU |
| Printers | News articles
Photos of Individuals and Small Groups Photos of large Groups |
UK / EU |
| Scribe | Accounts
All Councillor Details Contract Tenders and Management HR and Recruitment Suppliers Hire of venue |
UK / EU |
| Social media | All Councillor Details
Photos of Individuals and Small Groups Photos of large Groups |
UK / EU |
| Webhost | Agendas and reports
All Councillor Details HR and Recruitment Minutes News articles Photos of Individuals and Small Groups Photos of large Groups Planning Process Register of interests |
UK / EU |
Where do we store and process your personal data?
- Most of your personal data will be stored and processed here in the UK.
- Some data may be stored or processed in other third countries. We have made sure that safeguards are in place or such transfers to ensure that an equivalent standard of data protection is in place.
- Personal data transferred to EU member states, Iceland, Norway, Liechtenstein, Gibraltar, Andorra, Argentina, Faroe Islands, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland, Uruguay, Japan (only private sector organisations) or Canada (only covers data that is subject to Canada’s Personal Information Protection and Electronic Documents Act) is transferred to those third countries on the basis of adequacy regulations.
- Personal data transferred to USA organisations certified to the “UK Extension to the EU-US Data Privacy Framework” is transferred on the basis allowed for by Article 45 of the UK General Data Protection Regulation (GDPR).
How to contact us for more information
- We hope that you will feel that we have explained our use of your personal data adequately to you, however if you have any questions, wish to exercise any of your data protection rights or have a complaint please contact us at Illogan Parish Council, Illogan Parish Council Community Office, Trevelyan Road, Illogan, TR16 4RG.
- You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline number: 0303 123 1113
- Updates to this notice
- We might have to make changes to this Privacy Notice if there are changes to how we process your personal data or the data protection legislation changes.
- Changes will be made available via updated notices on the Illogan Parish Council Website and at the Illogan Parish Council offices at the above address.
- This Privacy Notice was last updated on 09.07.2025.
