Coronavirus (COVID-19) privacy notice

What Information are we collecting?

We will only collect the minimum amount of data necessary in order to book a symptom free test.

Why are we collecting your data?

For the purpose of booking your appointment to attend at a testing centre to take a symptom-free coronavirus (COVID-19) test.

How we will use this data?

Collected personal data is used to register you on the booking system and contact you about your booking.

Find out more about how the NHS Test and Trace service will use your data (opens new window).

What is the legal basis for processing the data?

The council's processing of personal data for the purposes described above is on the lawful basis of public task in Article 6(1)(e) in the General Data Protection Regulation (GDPR): processing is "necessary for the performance of a task carried out in the public interest or in the exercise of official authority".

If we are sharing your data with others who are we sharing it with?

The council will share your data with government partner organisations who will be processing your personal information on behalf of Wiltshire Council for the purposes of booking a test.

How long is your data kept for?

We will only keep your personal data for as long as is necessary for the purposes for which we are processing it unless we are under a legal obligation or have another legitimate reason for keeping it longer.

It is not possible at this stage to estimate the duration of the pandemic or how long the council may need to keep your data. We will take account of guidance from the government to ensure a coordinated approach with other organisations.

Personal data held by the council and government partner organisations will be securely deleted or destroyed once we no longer have a legitimate reason to keep it.

What rights do you have in relation to our use of your data?

You have a number of rights that you may exercise in relation to your personal data. Some of the rights do not apply automatically and may not be available in certain circumstances where a lawful exception applies.

• You have a right to access your personal data. You can request a copy of the personal data that we hold about you and ask us to explain how we use your data.
• You have a right to object to processing of your personal data. You have an absolute right to stop your data being used for direct marketing. In other cases where the right to object applies, we may be able to continue using your data if we have a compelling reason for doing so.
• You have a right to request the restriction or suppression of your personal data.
• You have a right to have your personal data erased, if we no longer have a legitimate use for it. This right is sometimes called the 'right to be forgotten'.
• You have a right to rectification of your personal data if the information we hold in relation to you is inaccurate or incomplete.
• You have a right not to be subject to any decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. You can request human intervention or challenge any solely automated decision-making that significantly affects you.

Where can you get advice or make a complaint?

At all times, Wiltshire Council will comply with the legal requirements set out by the UK General Data Protection Regulation in relation to the collection, holding and processing of your personal data.

If you would like to know more or have any concerns about how your information is being processed please contact InformationGovernance@wiltshire.gov.uk (opens new window).

If you require general information about the GDPR, information is available from the Information Commissioner (opens new window).