22 July 2022
This privacy notice updates the way the Council processes personal data for the purposes of the Covid-19 (coronavirus) Pandemic and is supported by our overarching Privacy Notice which explains how Merton Council (as a Data Controller) will collect, use and protect personal data.
The council processed data already held regarding residents, employees and stakeholders, in particular information regarding vulnerability. This information was shared for emergency planning purposes or to protect your vital interests by sharing with services both inside and outside the council.
The Council will retain all of this data and may obtain new data from you or other public bodies (e.g. NHS) for the purposes of monitoring and managing local outbreaks of Covid-19. This may include sensitive personal information, for example your age, or if you have any underlying illnesses or are vulnerable This is so that the council can assist and prioritise services.
Further information can be found on the ICO's data protection and coronavirus information hub.
Your personal data
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller's possession or likely to come into such possession. Some of your personal data is classed as 'special category data' because it is the information that is considered to be more sensitive and therefore requires more protection. This includes your medical data.
Legal basis for processing your personal data
How we are processing your personal data will determine the legal basis for processing. The legal bases for processing by the council as a public authority will be:
- Where disclosure is in the vital interests of yourself or another person (Article 6(1)(d) and 9(2)(c) GDPR)
- Where it is necessary in the public interest (Article 6(1)(e))
- Where it is necessary for reasons of substantial public interest - Article 9(2)(g)
- Where it is in the interest of public health - Article 9(2)(i)
- Where it is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
Sharing your personal data
We may share your information with other public authorities, emergency services, and other stakeholders as necessary and where it is proportionate to do so.
Changes to this privacy notice
We will keep this privacy notice under regular review and if we make any changes, we will publish the updated version on our website.
Data Protection Officer contact information
Data Protection Officer, Merton Civic Centre, London Road, Morden, SM4 5DX – data.protection@merton.gov.uk