COVID 19 Community Testing Booking System Data Privacy Notice

The identity and contact details of the company

Reading Borough Council, Civic Offices, Bridge Street, Reading, Berkshire, RG1
2LU. Telephone number 0118 937 3737

Contact details of the Data Protection Officer

Ricky.gill@reading.gov.uk

What Personal Data is held

First name, Surname, gender, ethnicity, age band (15yr age bands), Organisation type (within test cohorts), email address and a contact number

How will the data be stored?

The data is stored securely in the booking system. Access to this database is restricted to users who have a responsibility to use and process the data. Data downloaded by Reading Borough Council will be held on secure servers.

What is the legal basis for the collection, use and storage of the data?

With consent of Data Subject, this data is used to communicate with the user about their appointment and verify details when they arrive for the test. Gender, Ethnicity and Age band data will only be used to understand the basic profile of those booking tests.

Give details of how long the data will be stored and criteria used to determine this?

The data will be deleted within 6 months

Who will it be shared with and for what purpose?

Data will be shared with the Council Lateral Flow Test teams for the purpose of delivering, monitoring and ensuring sufficient booking and testing capacity. Data may also be shared with other the Council’s Public Health Team.

How can the service user get access to it?

A Subject Access Request can be made.

State whether any data is to be transferred outside the EU?

The data will not be transferred outside the EU

Is processing based on consent?

Processing of the data is based on consent

You have a ‘right to be forgotten’ so you can ask for your personal information to be deleted where:

  • It is no longer needed for the reason why it was collected in the first place
  • You have removed your consent for us to use your information and we do not have to keep your information for legal reasons

We may not be able to delete your personal data if it is needed for legal reasons, for reasons of public health, public interest or for medical purposes.

What other rights does the service user have that we have to make known to them?

The right to have their data corrected, the right to have their data deleted and their right to put a complaint to the Information Commissioner’s Office (ICO)

State if there will be any automated decision making

No