How we use your information - Cleveland Police and Crime Commissioner

Introduction

The Office of the Police and Crime Commissioner (OPCC) for Cleveland is the data controller for any personal information the organisation holds about you. The OPCC respects your privacy. In addition, it is committed to keeping your personal data safe at all times.

This Privacy Notice describes how and why the OPCC processes your data, who we share it with and the steps we take to ensure your information is kept safe. It also explains what rights you have in relation to your personal information. The Notice also tells you what steps you can take if you have concerns about how we have handled your data.

Who are we?

The OPCC for Cleveland is an independent body, led by a directly-elected Police and Crime Commissioner (PCC). The office supports the PCC with his responsibility for the totality of policing in the former county of Cleveland in the north east of England.

The PCC is the ‘Data Controller.’ Together with the Chief Executive and Monitoring Officer, the PCC exercises overall responsibility for the lawful processing of all personal data processed by the Office of the Police and Crime Commissioner. He is advised and assisted by the ‘Data Protection Officer’ who provides professional support and guidance in relation to data protection law.

Our data protection number is ZA000699 which is renewed annually.

Police and Crime Commissioner (Data Controller)

Matt Storey
c/o St Marks House
St Marks Court
Thornaby
Stockton-On-Tees
TS17 6QW

Interim Data Protection Officer

Hannah Smith
c/o St Marks House
St Marks Court
Thornaby
Stockton-On-Tees
TS17 6QW

Data Protection Principles

The OPCC complies with data protection law and best practice guidance. This means your data will be the following:

Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that have been clearly explained to you and not used in any way beyond those purposes.
Relevant to the purposes you have been told about and only limited to those purposes.
Accurate and kept up to date.
Kept only as long as necessary for the purposes, which you have been told about.
Kept and destroyed securely. As a result, the appropriate technical and security measures are in place to protect data from loss, misuse, unauthorised access and disclosure.

The personal information we hold, how we collect it and the purposes for which we use it

Personal data, or personal information, is any information about an individual from which that person can be identified. This could be a name or email address.

In addition, personal information may indirectly identify a person, potentially when combined with other information we hold about that person. This could be information like their gender or date of birth. It does not include data where the identity has been removed (anonymous data).

Personal data is held in order to assist the OPCC in carrying out its role in support of the Police and Crime Commissioner’s core statutory functions as follows:

Strategic planning;
Holding the Chief Constable to account and having access to Force information in line with all enactments, including the Policing Protocol Order 2011
Service recovering, logging and recording of expressions of dissatisfaction (complaints and conduct) against Cleveland Police force, including handling of complaints against the Chief Constable and conducting statutory reviews of the outcome and handling of complaints and conduct investigations by Cleveland Police
Appointment of OPCC statutory officers;
Partnership working;
Appointment, suspension and removal of the Chief Constable;
Commissioning of services;
Communication and engagement with the public and wider partners;
Budgetary responsibilities.

Privacy Notice

This notice is layered so, if you wish, you can easily select the reason why we process your personal information and see what we do with it. To do so, just click on the links below to get started.

A downloadable version of this Privacy Notice is also available in PDF format:

OPCC Privacy Notice – Updated 29.07.2022

Click below for the following Privacy Notices for specific uses for your personal data:

Your Information Rights

What are my information rights?

Individuals’ rights are one of the most important changes in the new Data Protection Act. The law makes some changes to existing rights by extending or clarifying them as well as introducing new rights.
GDPR gives you the following information rights:

Right to be Informed

The OPCC must describe how we obtain, use and store your information and who we share it with.

As a result, we have developed a Privacy Notice to explain how we use your personal information and to tell you about your legal rights.

Right of Access

Commonly known as subject access, this gives you access to your personal data and any supplementary information. However, there are some restrictions to this right.

Right to Rectification

You have the right to have inaccurate personal data rectified, or completed if it is incomplete

Right to Erasure

This right is also known as ‘the right to be forgotten’. You are entitled to request that your personal data is deleted or removed when there is no longer a lawful basis to continue to process it.

Right to Restrict Processing

You have the right to ‘block’ or suppress the processing of personal data. When processing is restricted, we are permitted to store your personal data, but not use it.

Right to Data Portability

The right to data portability allows you to obtain and re-use your personal data for your own purposes across different services

Right to Object

This gives you the right to object to the processing of personal data. In effect, this allows you to ask organisations to stop processing your personal data.

You have the absolute right to object to the processing of your personal data if it is for direct marketing purposes.

You can also object if processing is for the following reasons:

A task carried out in the public interest or based on legitimate interests;
The exercise of official authority vested in the organisation; or
Scientific or historical research, or statistical purposes.

Rights Relating to Automated Decision Making

Automated decision-making are decisions made by automated means without human involvement. You have the right to object to profiling in certain circumstances.

If you want to find out more about your information rights or how to make an Information Rights Request please follow the below links:

Information Rights
Making an Information Rights Request

Making a complaint about the handling of your personal data

Contact the OPCC Data Protection Officer

If you are concerned about how your personal data has been collected, stored, shared or handled by the OPCC, you can contact our Data Protection Officer using the following details:

Interim Data Protection Officer
Hannah Smith– Interim Data Protection Officer

Tel: 01642 302211

Email: [email protected]

Postal:
c/o St Marks House
St Marks Court
Thornaby
Stockton-On-Tees
TS17 6QW

How to make a complaint to the Information Commissioner

The Information Commissioner’s Office (ICO) is the UK’s independent body set up to protect information rights.

In addition, it makes sure organisations comply with data protection legislation.

You have the right to lodge a complaint with the ICO if you have concerns about how we have used your personal information.

You can contact the ICO in the following ways:

ICO Helpline: 0303 123 1113

ICO Address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Changes to the our Privacy Notice

We keep our privacy policy under regular review and we will place any updates on this webpage.

This privacy policy was last updated on 29 July 2022.