Privacy Notice

Introduction

Public Sector Open Data Portal is maintained and operated by the Digital Shared Services directorate (DSS), a part of Enterprise Shared Services division within the Department of Finance (DoF).

DSS is a data controller within the meaning of the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) that supersedes that act with effect from 25th May 2018; DSS processes personal data where it has been provided by the site’s users with the site user’s express consent and/or where the law requires or allows us to.

Your personal data and why we are processing it

DSS is tasked with promoting and facilitating the publication of and re-use of Open Data from the Public Sector Departments and related non-departmental public bodies.

Establishment and operation of an Open Data portal forms a key strand of that strategy, and it is a significant part of DSS’ public task to ensure that Open Data Birmingham City Observatory data is published as open data and is freely accessible by users of the site, for re-use without commercial or other restrictions.

Where provided by you, the site user, Personal data of the following kinds are held by the website:

• Name:
• E-mail address:

This information is held for so long as your account is active/open. You have the right to request closure of your account and deletion of your data upon request; to do so, you should contact the Open Data Team (by e-mail to OpenData@Birmingham.gov.uk, or via our Contact Form, from the e-mail address you had provided at registration).

For each registered account, there is also held a log of activity for your account (vis a vis, dataset suggestions submitted, as well as any changes enacted by you on your account {such as password reset}). Account activity for the 12 months to date is held, with data on activity being deleted upon the earlier of 12 months in age, or deletion of the account.

The website does not collect, request or require any special categories (as defined in Article 9 of GDPR) of information.

Personal data of the kinds outlined above is held by the website so as to enable access to specific functions of the site, for the purposes of:

• Accessing dataset API end-points;
• Submitting a suggestion for data publication via the ‘Suggest Data’ function;
• Giving feedback on published datasets or on dataset suggestions via the Disqus comment engine;
• And, in the case of public sector data publisher accounts, to enable publication and update of datasets on the portal.

Additionally, from time to time, we may use the personal data you provide in order to:

• Contact you about any significant updates or changes to the Terms and Conditions of use for the site (see here);
• Contact you in relation to your usage of the site, in the event that we need to clarify whether that usage is at odds with our published site Code of conduct (see here);
• Contact you periodically to survey our site users about the site and how we may improve the service it provides;
• In the case of data publisher accounts, Contact you to notify you of queries received about your published datasets as well as to notify you about datasets which require update or other attention.

Any personal information you provide to us will only be used by us, our agents and service providers for the purposes outlined above, and will not be disclosed without your consent or unless we are obliged or permitted by law to do so.

However, if you post or send offensive, inappropriate or objectionable content anywhere on this site, we may use whatever information about you as is available to us in order to investigate and cease such behaviour.

Where do we get your personal data from?

All personal data we obtain about you is supplied by you only if/when you register an account on the site. That data is not checked for accuracy or in any other way and is held exactly as you have provided it.

If you wish to obtain a copy of the personal data we hold on you, you should contact the Open Data Team (by e-mail to OpenData@Birmingham.gov.uk, or via the site’s Contact Form) and we will provide you with all information provided on your account.

Do we share your personal data with anyone else?

We do not share your data with anyone else for any form of processing or analysis. The site is hosted by our partners Datopian, and it is only in that context that your data is held by any party other than DSS.

Do we transfer your personal data to other countries?

The data we hold remains within the hosted site and is only ever transferred to other countries as part of this site-hosting. Any and all transfers are conducted solely for the purpose of maintaining site operation, and is in full compliance with all aspects of the GDPR.

How long do we keep your personal data?

We only retain your data for as long as is necessary in order to process it:

• For information provided by you at registration, that data is held for as long as you keep your account active/open, so as to enable you to log in and access full functionality of the site;
• For activity log data, the data is held to ensure the smooth operation of the site for registered users for a maximum of 12 months, and is deleted at that point or earlier if the account holder has requested deletion of the account.

What rights do I have?

• You have the right to obtain confirmation that your data is being processed, and access to your personal data
• You are entitled to have personal data rectified if it is inaccurate or incompleteYou are entitled to have personal data rectified if it is inaccurate or incomplete
• You have a right to have personal data erased and to prevent processing, in specific circumstances
• You have the right to ‘block’ or suppress processing of personal data, in specific circumstances
• You have the right to data portability, in specific circumstances
• You have the right to object to the processing, in specific circumstances
• You have rights in relation to automated decision making and profiling

How do I complain if I am not happy?

If you are unhappy with how any aspect of this privacy notice, or how your personal information is being processed, please contact the Data Protection Officer for the Department of Finance, Joseph McCanny at:
E-mail: DataProtectionOfficer@Birmingham.gov.uk

If you are still not happy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow Cheshire
SK9 5AF

Tel: 0303 123 1113
E-mail: casework@ico.org.uk
https://ico.org.uk/global/contact-us/

Links to other websites

This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

Changes to this privacy policy

If this privacy policy changes in any way, we will place an updated version on this page. This page will present itself each time you successfully log in to the site. Regularly reviewing this page ensures that you are always aware of what information we collect, how we use it and under what circumstances, if any, we may share it with other parties. Where there are changes to what information is collected, how it is used and/or with whom it is shared, we will contact all registered site-users about whom we hold data, and whom have consented to our processing of the data for the purposes outlined above.