Privacy Notice for Nottingham City Homes Group
Nottingham City Homes Group (referred to as ‘the Group’) collects, holds and processes a considerable amount of information, including personal information about the residents it serves, to allow it to provide services effectively. The Group recognises that this information is important to residents and that it is responsible to residents for the information it holds about them. As such, it takes seriously its responsibilities under the UK General Data Protection Regulation and the Data Protection Act 2018.
The Group is the data controller for information it collects from residents of Nottingham City Homes, Nottingham City Homes Enterprises Limited and Nottingham City Homes Registered Provider. We do this to deliver housing related services to residents.
When we process your personal information, we will comply with data protection legislation and enable you to exercise your rights contained within the legislation.
What personal information will the Group process?
The information that we collect about you to fulfil the purposes, objectives, or to deliver the services outlined above relates to your:
- Name, address details, contact information
Some personal information we collect needs more protection due to its sensitive nature. This is usually information that relates to a particular characteristic such as:
- Racial or ethnic origin
- Political opinions
- Religious beliefs or philosophical belief
- Trade union membership
- Genetic data
- Biometric data (for example fingerprint evidence)
- Sexual life
- Criminal record
- Prosecutions
- Medical data
At Nottingham City Homes’ Group, we make sure that any special data that we collect has extra protections in place to ensure that it is looked after safely and securely.
Lawful basis for processing
The basis under which we use your personal information for these purposes is that processing is necessary for the purposes of the legitimate interests pursued by the controller and processing is necessary for the performance of a contract to which the data subject is a party. This will include:
- To meet our obligations under a contract – your tenancy agreement or lease - or because you have asked us to do something with a view to entering into a contract with you.
- In order to further NCH’S’s (or a third party’s) legitimate interests. Our legitimate interests include: ensuring that we monitor, analyse, deliver and improve our services to you and your household members, to properly manage our business, and promoting our services. We will look to balance your interests with our legitimate interests where we rely on this category.
- Where the processing is necessary for us to comply with a legal obligation.
- For the performance of a task carried out in the public interest.
- With your express consent (for example in relation to special category data).
- To protect the vital interests of you, your family or others.
- To comply with the following:
-
- UK General Data Protection Regulation
- Data Protection Act 2018
- Human Rights Act 1998
Will my information be shared with other organisations or used for other purposes?
The Group only share your personal information with other organisations when it is necessary to provide the services to you and when we have a lawful reason to do so. For example, Nottingham City Council acts as the Group’s data processor in relation to the housing services the Group delivers to its residents.
The Group may also share your information when we are obliged to by law.
The information provided by you may also be used for the purpose of any other function carried out by the Group. This may include sharing your information across the Group, or with external organisations. Information about these functions and the legal basis on which information is used for them can be found at:
www.nottinghamcityhomes.org.uk
The information will only be used for another purpose where it is lawful to do so.
Do I have to provide the information?
You are not obliged by statute to provide some of the information that is specified here.
How long will the Group retain the data for?
The information that you have provided will be reviewed regularly and could be kept for a period of up to 6 years.
Information Rights
The UK General Data Protection Regulation provides for the following rights as prescribed by the legislation:
- A right to request a copy of your information
- A right to request rectification of inaccurate personal data
- A right to request erasure of your data known as ‘the right to be forgotten’
- A right to in certain circumstances to request restriction of processing
- A right in certain circumstances to request portability of your data to another provider
- A right to object to processing of data in certain circumstances
- A right regarding automated decision making including profiling
However, the Group may restrict the above rights in certain circumstances, for example, to avoid obstructing an investigation, avoid prejudicing the prevention, detection, investigation or prosecution of criminal penalties or to protect the rights and freedoms of others.
Data Protection Officer
The Data Protection Officer is George Pashley. You can contact the data protection officer at:
Loxley House,
Station Street,
Nottingham,
NG2 3NG
or at Information.Compliance@nottinghamcity.gov.uk
Information Commissioner’s Office
The Information Commissioner’s Office (ICO) website provides guidance on data protection and privacy matters, you can visit the website at www.ico.org.uk. You also have the right to complain to the ICO if you consider that the Council have processed your personal data incorrectly or that we have breached our obligations to you. You can contact the ICO at:
Wycliffe House,
Water Lane
Wilmslow,
Cheshire
SK95AF