Data Controller
Grayshott Parish Council is the data controller for personal data processed for council business. For questions or to exercise your rights, email info@grayshott-pc.gov.uk or write to the Council Office, Grayshott Sports Pavilion, Beech Hanger Road, Grayshott GU26 6LS.
What we collect and how we use it
Types of data: names, contact details, photos, demographic information (where relevant), financial details for payments, and CCTV where used.
Uses: delivering and improving public services; confirming identity; contacting you about services, events and consultations; processing payments and grants; maintaining records and accounts; crime prevention via CCTV.
Legal basis for processing
We process data to comply with legal obligations and to carry out our public functions. We may also process data to perform contracts, where necessary, or with your consent for specific purposes.
Sharing and transfers
We share data only when necessary with other public bodies, community groups, contractors and partners who must protect your data. Transfers outside the EEA occur only to systems with equivalent protections under applicable law or contractual safeguards.
Retention and security
We keep data only as long as needed to meet legal, statutory or business requirements (for example financial records are normally kept for at least 8 years). We apply appropriate technical and organisational measures to protect personal data from loss, misuse or unauthorised access.
Your rights
You have the right to access, correct, erase, restrict or object to processing, request portability, withdraw consent, and to lodge a complaint with the Information Commissioner’s Office. We may need to verify your identity before responding to requests.
Review
This notice is reviewed regularly and updated as required by law.
