Privacy notices

This Privacy Notice is designed to help you understand how and why the Port Health processes your personal data. This notice should be read in conjunction with the Council’s Corporate Privacy Notice.

Who are we?

Redcar and Cleveland Borough Council is a ‘Data Controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).

The Port Health Service monitors imports of food and feed through the port, inspects food businesses operating in the port, monitors emissions to air and investigates infectious diseases of ship crew.

Carries out potable water sampling on vessels and at points around the port that supply vessels, monitors the permitted processes at the port, and carries out ship sanitation inspections on request from vessels.

The Council has an internal Data Protection Officer. Their contact details are:

Data Protection Officer

Redcar and Cleveland House

Kirkleatham Street

Redcar

TS10 1RT

You can also email the team informationgovernance@redcar-cleveland.gov.uk or by calling 01642 444573.

What personal information do we collect?

• basic details about you, for example, name, address, date of birth,
• unique identifiers (such as your NI number),
• contact we have had with you, for example, appointments & letters of correspondence,
• notes and reports about your relevant circumstances,
• details and records about the service you have received,
• relevant information from other people that we have been in contact with, in relation to the service that you have received.

Why do we collect your personal information?

We collect personal information in order to release containers for import, investigate complaints and infectious diseases, to inspect your food business and monitor the permitted processes.

Who do we obtain your information from?

• UK Health Security Agency for infectious disease identification and control.
• Food Standards Agency for notification of a prohibited person.
• UK Border Force.
• Harbour Police.
• Animal and Plant Health Agency.
• Department for Environment, Food and Rural Affairs.
• Environment Agency.
• Northumbrian Water.

Information will only be shared where it is necessary, proportionate and justified to do so, for example;

• The investigation needs to be dealt with jointly or solely by another agency.
• Where the health and safety of others is at risk.
• Where a legal gateway to share the information exists and is relevant proportionate, and necessary to do so.
• Where the law requires us to pass on information under certain circumstances.
• For the prevention and detection of crime.

How long do we keep your information for?

What is our lawful basis for processing your information?

Redcar and Cleveland Borough Council relies on the following lawful basis to process your personal data:

• UK GDPR Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject
• UK GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

For the processing of personal data relating to criminal convictions and offences, processing meets Schedule 1, Part 2 of the Data Protection Act 2018 as below:

• (6) Statutory and Government Purposes

When processing special category data, the Council will rely on the following lawful basis:

• UK GDPR Article 9 (2) (g) – processing is necessary for reasons of substantial public interest with processing meeting Schedule 1, Part 2 of the Data Protection Act 2018 as below:
• (6) Statutory and Government Purposes

The legislations, policies and guidance that relate to this service includes, but is not limited to:

• The Food Safety Act 1990
• The Public Health (Control of Diseases) Act 1984
• Health Act 2006

Your rights

There are a number of rights that you may exercise depending on the legal basis for processing your personal data.

• Request a copy of the personal information the Council holds about you
• To have any inaccuracies corrected
• To have your personal data erased
• To place a restriction on the Council’s processing of your data
• To object to processing
• To request your data to be ported (data portability)
• To object to any automated decision-making including profiling.

In most cases, these rights are not absolute and there may be compelling or overriding legal reasons why we cannot meet these rights in full. This will be explained to you in more detail should you contact us for any of the reasons detailed above.

For more information about how the Council uses your data, including your privacy rights and the complaints process, please see our Corporate Privacy Notice.