Snowdonia National Park Authority is the controller and responsible for your personal data (referred to as “SNPA”, “we”, “us” or “our” in this privacy statement).
Use and storage of your personal information
When you supply any personal information to us we have legal obligations towards you in the way we deal with that data. We must collect the information fairly, that is, we must explain the purpose and legal basis for us using it (this will be set out on the webpages where information may be requested or any form you are asked to complete). In general we process personal data in relation to the delivery of our services (our public task) or in relation to the legitimate interests of the individual or the SNPA (as data controller). Further information on the legal basis for processing of any data you have provided the SNPA can be obtained from our Data Protection Officer on the contact details below.
Any personal information provided by you is stored in databases owned by either SNPA or an organisation used by the SNPA to provide online services on its behalf. We must tell you if we want to pass the information on to anyone else. In general, any information you provide will only be used within the SNPA and by its service providers. It will never be supplied to anyone outside SNPA without first obtaining your consent, unless we are obliged or permitted by law to disclose it.
We will hold your personal information on our systems for as long as you are in receipt of the service you have requested, and remove it in the event that the purpose has been met or you request us to do so, unless we are obliged by law to retain it. Retention of data is governed by the SNPA’s Retention and Disposal Policy.
In addition, you have the following rights under data protection law:
- The right to be informed – when we collect your data we will tell you why and how we intend to use it
- The right of access – Under the GDPR, you have the right to obtain:
- confirmation that your data is being processed; and
- access to your personal data
Details on how to obtain your personal data can be found on our website: Freedom of Information Act 2000.
- The right to rectification – You are entitled to have personal data rectified if it is inaccurate or incomplete.
- The right to erasure – You have the right is to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
- Right to restrict processing – you have a right to ‘block’ or suppress processing of personal data. When processing is restricted, we are permitted to store the personal data, but not further process it. We can retain enough information about the individual to ensure that the restriction is respected in future.
- The right to data portability – You are able to obtain and reuse your personal data for your own purposes across different services. This right allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
- The right to object – You have the right to object to:
- processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- direct marketing (including profiling); and
- Processing for purposes of scientific/historical research and statistics;
- Rights in relation to automated decision making and profiling. – The law provides safeguards for you against the risk that a potentially damaging decision is taken without human intervention.
To exercise any of the above rights please contact our Data Protection Officer, on the contact details below.
Where we are processing data with your consent you have a right to withdraw your consent at any time. You can do this by e-mailing us at DPO@snowdonia.gov.wales.
You also may lodge a complaint about how we are processing your data with the Information Commissioners Office. Details of how to make a complaint are available on www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Events, E-Newsletter and Online Surveys
We use a third party provider (mail chimp) to deliver our monthly e-newsletter. We gather statistics around e-mail opening and clicks using industry standard technologies. For further information please see https://mailchimp.com/legal/privacy/
Where it is compatible with the stated use of your data we may also process this via a third party provider of online survey tools. Please see https://www.surveymonkey.com/mp/policy/privacy-policy/ for further information.
Cookies
Information on our use of cookies is available in our Terms and Conditions.
Users 16 and under
Eryri National Park Authority will from time to time collect personal data from children under 16 as part of the project or planning collaboration with young children. In accordance with the Information Commissioner’s Office (ICO) guidelines, children over the age of 13 can provide their own consent and do not require parental consent.
If you are 13 years old or over, please provide your consent when you provide Eryri National Park Authority with personal information. If you are under 13 years old, please provide your parent / guardian’s consent when you provide Eryri National Park Authority with your personal information. Users are not permitted to provide us with personal information without this permission.
Contact for further information about data processing
The Eryri National Park Authority is the responsible body (Data Controller) for information provided to us. Our contact details are:
Eryri National Park Authority
National Park Offices
Penrhyndeudraeth
Gwynedd
LL48 6LF
DPO@snowdonia.gov.wales