The Data Protection Act 1998 gives rights to you our customers about how your personal information is obtained and used by Birmingham City Council. The Act also places obligations on Birmingham City Council.

This guide informs you of your rights under the Data Protection Act and details how we handle your information.

What information do we hold and how do we obtain it?

Generally, the information we hold is supplied from either the data subject themselves, their carer, guardian or representative.

For what purposes do we use your information?

The information provided is processed for the purpose for which it has been given and will not be used for additional purposes without consent. 

There are, however, a number of Exemptions under the Data Protection Act 1998, whereby we may be required to disclose personal data. For further information please contact the Education Service’s Data Protection Officer.

Caring for your data

We undertake that we will have in place a level of security appropriate to the nature of the data and the harm that might result from a breech of security.

We further undertake that we will:

• Not hold information about you which is excessive in relation to the purpose for which it is processed,
• Keep any information about you accurate and where necessary up-to-date. To help us to do this, please keep us informed if any of your details change,
• Not keep data processed for any purpose or purposes longer than necessary.
• Process your information in accordance with your rights under the Data Protection Act.

Your rights

These rights are set out below:

• Access to personal data. You may request by writing to the address below, details of the information that we hold about you and the purpose(s) for which it is held. We will provide the information in a permanent form, as at the time of the request, subject to any routine processing continuing between that time and the time of response. Your request will be met within 40 days of receiving the request, or, if later, of receipt of any supplementary information needed to establish your relationship with the authority or verify your identity.
  
  
• You are entitled, by notice in writing, to require us to cease (or not to begin) processing personal data on the grounds that it is causing, or is likely to cause substantial damage or distress to you or to another and that damage or distress is, or would be, unwarranted. This does not apply where you have consented to the processing, the processing is necessary for compliance with a legal obligation, or the processing is necessary to protect your vital interests.
  
  
• You are entitled, by notice in writing, to require us to stop using information about you for the purposes of direct marketing. Direct marketing means the communication (by whatever means) of any advertising or marketing material that is directed to you.
  
  
• You are entitled, by notice in writing, to require us to ensure that no decision taken by, or on behalf of, us and which significantly affects you, is based solely on the automated processing of your information.
  
  
• You are entitled to take action to rectify, block, erase or destroy inaccurate data.
  
  
• You are entitled to take action to seek compensation if you suffer damage by any contravention of the Data Protection Act.

Contacts

For further information please refer to our Contacts page.