Privacy Statement for Health and Wellbeing Census

Last updated on Mon, 13/12/2021 - 09:35

Dundee City Council is a local authority established under the Local Government etc. (Scotland) Act 1994. Its head office is located at City Square, Dundee, DD1 3BY.

Why do we need your personal information and what do we do with it?

You are giving us your personal information to permit us to:

  • plan and deliver better policies for the benefit of all pupils, or specific groups
  • better understand some of the factors which influence pupil health and well being
  • share good practice
  • enhance the quality of research to improve the lives of people in Scotland
  • Who do we share your information with?

Once the data has been collected Dundee will share this information with the Scottish Government’s Education Analytical Services Division, which is part of the Scottish Government’s Learning Directorate.

The Scottish Government needs this information about the health and wellbeing of children and young people in order to:

  • plan and deliver better policies for the benefit of all pupils, or specific groups
  • better understand some of the factors which influence pupil attainment and achievement
  • share good practice
  • target resources better
  • enhance the quality of research to improve the lives of people in Scotland
  • provide a window on society, the economy and on the work and performance of government by publishing statistical publications and additional tables about the health and wellbeing of children and young people living in Scotland

Legal Basis for requiring information

Public Authority Task Article 6 (1) (e) gives us a lawful basis for processing where ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller'

The conditions are listed in Article 9(2) of the GDPR:

(j) processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject

The conditions are listed in Article 9(2) of the GDPR:

These are fulfilled for this data collection as the data will be used to enable us to improve the outcomes for children and young people and reduce inequalities by monitoring their health and wellbeing outcomes and analysing these by children’s characteristics. We intend to use this information to help identify specific groups (at an aggregated level) for targeted support and improve the outcomes for children and young people

Sensitive personal information (Special Category Data or information about criminal convictions etc.)

The personal data collected will be:

Child/Young person: Scottish Candidate Number, school identifier, attitude to school, perception of achievement, pressure of school work, physical activity/exercise, eating behaviours, general health, general wellbeing (life satisfaction), mental health, physical or mental health condition, sleep pattern, feeling of discrimination, relationship with peers, self-perception (body image), social media and online experience, relationships with family/environment, relationships with parents/carers, resilience, involvement in decision making, use of alcohol, use of tobacco, use of drugs, involvement in positive activities, caring responsibilities, experience of bullying, aspirations and career planning, sexual health, sedentary behaviour and places to play.

The processing satisfies Article 9(2)(j) – processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes and Article 9(2)(g) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

How long do we keep your information?

In order to facilitate longitudinal tracking we will hold data for nine years. This allows Dundee City Council to follow progress for groups of pupils from P5 through to S6.

Your Rights under Data Protection Law:

Correcting your information – we want to make sure that your personal information is accurate, complete and up to date. Therefore you may ask us to correct any personal information about you that you believe does not meet these standards.

Deleting your information – you have the right to ask us to delete personal information about you where

  • you think that we no longer need to hold the information for the purposes for which it was originally obtained.
  • you have a genuine objection to our use of your personal information – you have the right at any time to tell us to stop using your personal information for direct marketing purposes.
  • we are using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information.
  • our use of your personal information is contrary to law or our other legal obligations.

Restricting how we may use your information – In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information that we hold about you or we are assessing the objection you have made to our use of your information. This right might also apply if we no longer have a basis for using your personal information but you don't want us to delete the data. Where this right is realistically applied will mean that we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Withdrawing consent to use your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.

Please contact the Council’s Data Protection Officer by post at the above address, by email at: infogov@dundeecity.gov.uk and by telephone on 01382 434206 if you wish to exercise any of these rights.

Complaints

We aim to directly resolve all complaints about how we handle personal information. However, you also have the right to lodge a complaint with the Information Commissioner's Office, who can be contacted by post at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. By phone on 0303 123 1113 (local rate) or 01625 545 745. Visit their website for more information at https://ico.org.uk/concerns