Privacy Statement

The Norfolk and Suffolk Nature Recovery Partnership are commited to respecting your privacy.

1. Website Data

1.1 Browser Cookies

This website (NSNRP.org) does not currently collect or use personal information or user data. This includes data relating to the analysis of website performance. No third-party products are used to collect or process personal information or user data.

1.2 Online Events and Surveys

This website will be used to publicise opportunities to get involved with the Local Nature Recovery Strategy.

These opportunties could be online or offline events, or online surveys. Where personal data is collected, this will be done by the organisation representing a specific geographic area of the partnership, and covered by their privacy and data handling policies.

Examples:

An online survey relating to Local Nature Recovery Strategy in Norfolk would be published and managed by Norfolk County Council, and subject to Norfolk County Council's Privacy Policy.
Registration for an offline event for stakeholders based in Suffolk, would be managed by Suffolk County Council and subject to Suffolk County Council's Privacy Policy.

1.3 Contact Form

This website does not currently use a contact form. In the future, a contact form may be added and this privacy statement will be updated to explain how the form will process and store data , your rights as a user and what action to take if you have any concerns or queries about the handling of your personal data.

1.4. Links and Third Party Websites

We link our website directly to other sites. This statement does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy notices of any external websites you visit via links on our website.

2. Personal Information

2.1 How the Norfolk and Suffolk Nature Recovery Partnership Collects Personal Information

When you give it to us directly. For example, personal information that you share with us when you contact us by email.
When we obtain it indirectly. For example, your contact details may be shared with us by your employer or by a relevant third-party organisation who wishes to recommend your involvement with the Local Nature Recovery Strategy.
When it is available publicly. Your personal information may be available to us from external publicly available sources. For example, depending on your privacy settings for social media services, we may access information from those accounts or services.

Personal information that we collect from you will be handled and stored by the partner organisation representing your geographic area, and is subject to that organisations Privacy Policy.

Suffolk County Council Privacy Policy Norfolk County Council Privacy Policy
All data is stored at a destination within the UK or European Economic Area (‘EEA’).

2.2 Lawful Bases

GDPR requires us to rely on one or more lawful bases to process your personal information. We consider the grounds listed below to be relevant:

Public Task: Processing is necessary for the performance of a task carried out in the public interest, specifically the delivery oLocal Nature Recovery Strategies for Norfolk and Suffolk
Consent: Where you have provided your consent for us to use your personal information in a certain way, for example to register for an event or sign-up for a newsletter.
Legal Obligation: Where necessary so that we can comply with a legal obligation to which we are subject (for example, where we are obliged to share your personal information with regulatory bodies which govern our work and services).

2.3 Your Rights

a. Right of access – you can write to us to ask for confirmation of what personal information we hold about you and to request a copy of that information. Provided we are satisfied that you are entitled to see the information requested and we have successfully confirmed your identity, we will provide you with your personal information subject to any exemptions that apply.

b. Right of erasure – at your request and where you are entitled to, we will delete your personal information from our records as far as we are required to do so. In many cases we would propose to suppress further communications with you, rather than delete it.

c. Right of rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. You can also ask us to check the personal information we hold about you if you are unsure whether it is accurate/ up to date.d. Right to restrict processing – you have the right to ask for processing of your personal information to be restricted if there is disagreement about its accuracy or legitimate usage.

e. Right to object – you have the right to object to processing where we are (i) processing your personal information on the basis of the legitimate interests ground, (ii) using your personal information for direct marketing or (iii) using your information for research or statistical purposes.

f. Right to data portability – to the extent required by GDPR, where we are processing your personal information by automated means and either (i) because we have obtained your consent, or (ii) because such processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contact, you may ask us to provide your personal information to you – or another service provider – in a machine-readable format.

g. Rights related to automated decision-making – you have the right not to be subject to a decision based solely on automated based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (i) is necessary to enter into/ perform a contract between you and us/ another data controller; (ii) is authorised by Law to which organisations in the Partnership are subject (as long as that law offers you sufficient protection); or (iii) is based on your explicit consent. We may ask you for additional information to confirm your identity and for security purposes, before disclosing personal information requested to you.

3. Contact Information

3.1 Information Commissioners Office

For assistance with complaints regarding your personal data, please contact the Information Commissioner’s Office:

Postal Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Email: casework@ico.org.uk
Telephone: 0303 123 1113

3.2 How to contact us about your data

You can contact the Suffolk County Council Data Protection Officer at:

Email: data.protection@suffolk.gov.uk
Postal address: Information Governance Team, Suffolk County Council, Constantine House, Constantine Road, Ipswich, IP1 2DH
Telephone: 01473 265323.

You can contact the Norfolk County Council Data Protection Officer at:

Email: dpo@norfolk.gov.uk
Postal Address: DPO, Norfolk County Council, County Hall, Martineau Lane, Norwich NR1 2DH