2.1 How the Norfolk and Suffolk Nature Recovery Partnership Collects Personal Information
Personal information that we collect from you will be handled and stored by the partner organisation representing your geographic area, and is subject to that organisations Privacy Policy.
Suffolk County Council Privacy PolicyNorfolk County Council Privacy PolicyApart from as mentioned about the use of Cookies above, aAll data is stored at a destination within the UK or European Economic Area (‘EEA’) and retained for the duration of the Local Nature Recovery Strategy project, which is due for completion in autumn/winter 2025.
GDPR requires us to rely on one or more lawful bases to process your personal information. We consider the grounds listed below to be relevant:
a. Right of access – you can write to us to ask for confirmation of what personal information we hold about you and to request a copy of that information. Provided we are satisfied that you are entitled to see the information requested and we have successfully confirmed your identity, we will provide you with your personal information subject to any exemptions that apply. To action this right, please contact your county’s Data Protection Officer using the details in section 3.1 of this policy.
b. Right of erasure – at your request and where you are entitled to, we will delete your personal information from our records as far as we are required to do so. In many cases we would propose to suppress further communications with you, rather than delete it.
c. Right of rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. You can also ask us to check the personal information we hold about you if you are unsure whether it is accurate/ up to date.d. Right to restrict processing – you have the right to ask for processing of your personal information to be restricted if there is disagreement about its accuracy or legitimate usage.
e. Right to object – you have the right to object to processing where we are (i) processing your personal information on the basis of the legitimate interests ground, (ii) using your personal information for direct marketing or (iii) using your information for research or statistical purposes.
f. Right to data portability – to the extent required by GDPR, where we are processing your personal information by automated means and either (i) because we have obtained your consent, or (ii) because such processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contact, you may ask us to provide your personal information to you – or another service provider – in a machine-readable format. To request this, please
contact your county’s LNRS team.g. Rights related to automated decision-making – you have the right not to be subject to a decision based solely on automated based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (i) is necessary to enter into/ perform a contract between you and us/ another data controller; (ii) is authorised by Law to which organisations in the Partnership are subject (as long as that law offers you sufficient protection); or (iii) is based on your explicit consent. We may ask you for additional information to confirm your identity and for security purposes, before disclosing personal information requested to you.
