CPD Online privacy notice
This page explains what information will be held about you on our database and how it will be processed by service units within Bournemouth, Christchurch and Poole Council who use the online booking service known as ‘CPD Online’ that can be found on the BCP Workforce Development website.
These service units are Inclusion and Family Learning, Adult Social Care Services, Adult Social Care Commissioning and Improvement, Children’s Social Care Services, Quality and Commissioning, Communities, Organisational Development, Strategy Directorate.
You can also find out about the General Data Protection Regulation and Data Protection Act 2018 and your rights.
This page contains information about:
- who we are
- why we collect your personal information
- the legal basis for using your information
- who we may share your information with
- how you can access the information we hold about you
- how long we keep information about you
- further information and Data Protection Officer
Who we are
Bournemouth, Christchurch and Poole Council will be the Data Controller for the personal information you provide. Personal information can be anything that identifies and relates to a living person. This could be your name or email address. As the Data Controller the Council will use your information to enable you to hold a user account and access our online booking service for courses.
Why we collect your personal information
We will collect enough personal information in order to provide you with services for the following purposes:
- to have a user account
- provide an online record of courses attended/not attended
We are not permitted to collect information we do not need or will not use. This document covers information you have provided direct to the Council and information which has been shared with us by other organisations such as your employer.
If we don’t need your personal information we won’t ask you for it. If we use your personal information for research or analysis, we will always keep your details anonymous or use a fake name.
We don’t sell your personal information to anyone else.
The legal basis for using your information
According to the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, we must have a reason to collect and use your information.
This will be:
- to identify you as a user
- to enable you to hold accurate training records and book places on advertised courses
- to enable us to manage the services we provide
- to investigate any worries or complaints you may have about our services
- to check the quality of our services
- to help with research and planning of new services
There are a number of legal reasons why an organisation needs to collect and use your personal information. For CPD Online these are:
- Legitimate interests: the processing is necessary for your legitimate interests to be able to book places on a course or access your training records and the legitimate interests of a third party such as your employer/s unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
Our service does not need to use sensitive personal data also called “special category data” which requires more protection to keep it safe. This is often information you would not want to be widely known and is very personal to you. It includes:
- sexuality or sexual health
- religious or spiritual or philosophical beliefs
- physical or mental health
- genetic or biometric data
- criminal history
- family history
- people who are connected to a child or family
Sensitive personal data is not collected or used within CPD Online.
Who we may share your information with
We have no legal duty to provide your personal information to other organisations. We may however share your personal information with organisations who may wish to promote their training courses to you as a user which will include:
Other Local Authorities, Schools and Teaching Schools.
Other organisations that provide training courses and who wish to advertise them via CPD Online may request to access your information. Any permission granted by us would result in this notice being updated to include their details. We will only share your details with organisations that we believe provide for your legitimate interests.
Accessing the information we hold about you
You have the right to request, in writing, details of the information that is held about you and also the right to access a copy of the information. This may be by the Council providing copies of documents or by inviting you to view the records at one of its offices, if appropriate. Please see our webpage for further information about how to make a subject access request.
Bournemouth, Christchurch and Poole Council will not charge a fee to access your information.
You may also ask us to:
- stop processing your information if this causes or might cause damage or distress
- stop processing your information for direct marketing
- amend any of your data which is factually inaccurate. You can also ask for information to be blocked, erased or destroyed at any time
- consider a claim for compensation for any damages caused by a breach of the Data Protection regulations
How long we keep information about you
We will retain this information for a period of 6 years following no active use of your user account. Alternatively you can email us to request an earlier deletion of your information.
If you have a concern about how we are using your information, we would ask you to contact us in the first instance by emailing firstname.lastname@example.org.
Data Protection Officer
If you are not satisfied with a response to your concerns from the Service, our Data Protection Officer can review any issues regarding Information Rights legislation if necessary. The Data Protection Officer can be contacted at the address below:
Data Protection Officer
BCP Information Governance Team
For further information about Information Rights legislation, please contact the Information Commissioner’s Office at www.ico.org.uk or by telephone 0303 123 1113.