Somerset Domestic Abuse Service Privacy Notice
Somerset Council (SC) provides a wide range of services to the people of Somerset including the Somerset Domestic Abuse Service. In order to provide those services, we process large amounts of your personal data. Personal information is any information which identifies and relates to a living person.
We are registered as a data controller for the data we collect, process, and hold, and our Data Protection Notification (registration number Z5957592) includes generic information about the types of personal data we process, what we use it for, and who we share it with.
Contact details
Somerset Council
County Hall
Taunton
TA1 4DY
Telephone: 0300 123 2224
Email: generalenquiries@somerset.gov.uk
Data Protection Officer (DPO)
Lucy Wilkins
Contact the DPO by email at informationgovernance@somerset.gov.uk
Purpose for processing
We collect, use and hold personal information so that we are able to effectively deliver our services.
We will use your information to support us with one or more of the following:
- Safeguarding policy
- Community safety
- Delivering services and support to you or your family;
- Managing services we provide to you or your family;
- Training and managing the employment of our workers who deliver our services;
- Investigating any worries or complaints you have about our services;
- Checking the quality of services, and researching and planning new services.
- Provide expert public health advice and intelligence to the Health & Wellbeing system;
- Improve outcomes and narrow inequalities through influencing public policy and commissioning;
- Commission high quality, effective and efficient public health services; and Protect the population’s health
Categories of personal data
We collect information in a variety of ways including paper forms, web forms, in a face-to-face meeting with you, by telephone, email or letter. We also sometimes receive information about you from people you know if they are concerned about you, or if you have given them permission to represent you.
The information we collect will depend on the services delivered but may include:
- personal details
- family details
- lifestyle and social circumstances
- financial details
- employment and education details
- housing needs
- case file information
For some services, we may also require information that falls under the following special categories (sensitive information):
- physical or mental health details
- racial or ethnic origin
- offences (including alleged offences)
- religious or other beliefs of a similar nature
- criminal proceedings, outcomes and sentences
- biometric information
Legal basis for processing
To process your personal data, we must have a lawful basis under Article 6 of the GDPR, and under Article 9 if we are processing special category data.
Some of our services are required by law or we have a public duty to deliver them. In other cases, services may be non-statutory but available on request. The lawful basis on which we rely for processing your personal data is:
Article 6(1)(e) – Processing is necessary for the performance of a task conducted in the public interest or in the exercise of official authority vested in the controller.
For the processing of special category data:
Article 9(2)(g) – Processing is necessary for the purpose of substantial public interest.
The legislation which underpins our relevant public duties are:
- Crime and Disorder Act 1998
- Domestic Abuse Act 2021
- Domestic Violence Crime and Victims 2004
- Children Act 2004
- Health and Social Care Act 2012
- Local Authorities Regulations 2013; Regulations 3,4,5,6,7,8
- NHS Bodies and Local Authorities Regulations 2012
- Regulations under Section 6C of the NHS Act 2006
- Social Value Act 2012
- Civil Contingencies Act 2004
Legitimate interests (Article 6(1)(F) – Somerset Domestic Abuse Service uses your personal data to support its legitimate interests to audit financial transactions, ensure the quality of services, correspond with customers, answer enquiries and deal with complaints.
Data sharing
The personal data provided to Somerset Domestic Abuse Service will be shared with a range of partners when providing services including the NHS. When Somerset Domestic Abuse Service is required to share your personal data, you will be informed at the point your data is collected. Somerset Domestic Abuse Service may also, from time to time, share data with partner organisations in order to inform service improvement. Where possible, data shared for this purpose will be pseudonymised.
Safeguarding
In cases where you or another member of the public may be at risk your personal information will be shared.
Other statutory obligations
In cases where the Council is legally obliged to disclose your personal information in cases such as prevention or detection of crime or fraud, your personal information will be shared.
Transfers abroad
Your data will not be transferred abroad unless you are specifically informed at the point where your data is collected.
Data retention
This data will be retained for a period determined by UK law and regulations, or in some cases to meet specific requirements of the service being provided. This will be in accordance with the Council’s published retention schedule and you will be informed of this at the point your data is collected.
Your rights
You have the right to ask Somerset Council for a copy of your data, the right to rectify or erase your personal data, and the right to object to processing. However, these rights are only applicable if the Council has no other legal obligation concerning that data.
More information
Your rights on the information we hold about you (somerset.gov.uk)
You also have the right to complain to the regulator, ico.org.uk/
Consequences
In some cases, if you do not supply your information to us, we will not be able to provide you with the services we are obliged to provide by law or any supplementary service you have asked for.