Data Protection Privacy Notice: CCTV
Service: Property Services
Processing Activity: CCTV and Surveillance
The Data Controller, Mid Devon District Council, Phoenix House, Phoenix Lane, Tiverton, EX16 6PP.
Tel: 01884 255255
Email: customerservices@middevon.gov.uk
Mid Devon District Council (MDDC) is registered as a data controller with the Information Commission (registration number Z5826451).
The Data Protection Officer: Contactable by emailing dpo@middevon.gov.uk
What we collect and why
MDDC uses CCTV and Surveillance for the purposes of reducing crime, disorder, anti -social behaviour and fear of crime.
MDDC currently has CCTV (Close Circuit Television) cameras installed at Phoenix House, Carlu, Old Road Depot and at our Active Mid Devon Leisure sites. MDDC also control CCTV at various locations across the district area. MDDC enforcement officers, when necessary, where overt Body Worn Cameras and will when practical, will make a verbal announcement that they are turned on. Relevant fleet vehicles use, when necessary, Dash Cam equipment.
Generally, signs are displayed in all locations, notifying you that overt CCTV is in operation and providing details of who to contact for further information about the scheme.
There may be occasions where the council needs to use covert CCTV and therefore there will be no signs displayed notifying you that CCTV is in operation. On such occasions The Council will comply with all relevant legislation, including the Regulation of Investigatory Powers Act (RIPA).
Lawful basis for processing surveillance
Surveillance is processed under, Legal Obligation, Public Task, Vital Interest and Legitimate Interests. Legal Obligations include but are not limited to:
- Section 163 of the Criminal Justice and Public Order Act 1994
- Crime and Disorder Act 1998
- Protection of Freedoms Act 2012
- In certain Circumstances, RIPA
Who will receive and see the personal data
We will only disclose CCTV recordings or images to third parties such as the police t comply with legal obligation, or where legally permitted, such as for crime prevention and detection.
We may share information with:
- MDDC Staff when appropriate
- Internal or External Enforcement Agents: including but not limited to: Trading Standards, HMRC or Immigration
- Police Forces
- Fire and Rescue Services,
- Members of the public under strict Data protection or Freedom of Information conditions
- Insurance Companies, but only when authorised by Data Protection
Your personal information will be stored securely and will not be accessible to anyone else, including other services within the Council, unless detailed above.
For more details of how we process special category data please read our Appropriate Policy document: here.
Retention
All your personal information will be held by us only for as long as is necessary and then in accordance with any legal requirements imposed upon us and the MDDC’s retention schedule. For more information please go to our website to view our Retention Schedule.
Transferring personal information outside of the EU
Your personal information will not be transferred outside the EU or to any international organisations by the Council. It should be noted that the Council has no control over those accessing its online public registers nor what someone does with any information they obtain from them.
Your rights
Whatever our use of your personal information you have the right of access to that personal information (this means confirmation that we are using your personal information, access to it as well as other detail) and the right to seek rectification if the information is inaccurate.
As we are processing your personal data on the basis of public task and legal obligation, you have the right to object and to restrict processing.
Also, if you object to our use of your personal information and there is no overriding legitimate interest for us to continue using it or we have used your personal information unlawfully or it is no longer necessary for us to have the personal information, the right to erasure is also available to you.
Details on each of these rights and to how you exercise can be found on our website Here.
Complaints
If you are dissatisfied with the way the Council has used your personal information then you may wish in the first instance to make a complaint to the Data Protection Officer. This can be done by;
Writing to: Data Protection Officer, Mid Devon District Council, Phoenix House, Phoenix Lane, Tiverton, EX16 6PP.
You can also email: DPO@middevon.gov.uk .
Alternatively, or if you remain dissatisfied following your complaint to the Data Protection Officer, you may lodge a complaint with The Information Commissioner. The Information Commissioner is the UK’s independent body set up to uphold information rights. The IC can help and advise you on all matters relating to data protection.
Information Commission
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Email: casework@ico.org.uk