This privacy notice is to let you know how we will look after your personal information. This notice explains how we do this and tells you about your privacy rights and how the law protects you.

This Communications and Engagement privacy notice should be read in conjunction with the our privacy notice.

This privacy notice covers the following areas of the communications and engagement team:

• digital communications and social media
• marketing and campaigns
• design and creative
• press and media
• partnerships and engagement
• photography and filming

What information do we collect?

The type of information we collect will depend on why you have got in touch with us.

The information may include some, or all, of the following:

• your name, address, contact details including email address, mobile phone number and/or social media user name
• correspondence (including emails, social media posts)
• photographs and videos

Who uses this information?

The communications and engagement team.

Why do we use this information?

We use this information so we may communicate with you:

• for example with email newsletter, printed mail-out or magazine. You have consented to receive about subjects that you have consented to hear about
• on social media in line with the terms and conditions of those social media sites
• about matters of public interest such as emergency situations affecting the Waverley area
• about a matter where there is another lawful basis for doing so, and where it is justified and fair under powers given to local authorities or under other legitimate interest
• in the case of photos and videos, with your consent, we may use this to create communications products such as social media posts, advertising, leaflets, digital marketing and printed marketing materials

What authority do we have to collect and use this information?

We have authority to collect and use this information when processing is necessary:

• for the performance of a task carried out in the public interest or in the exercise of official authority
• for the performance of a contract with the data subject or to take steps to enter into a contract
• for compliance with a legal obligation
• to protect the vital interests of a data subject or another person
• for carrying out obligations under employment, social security or social protection law, or a collective agreement
• to protect the vital interests of a data subject or another individual where the data subject is physically or legally incapable of giving consent
• when relates to personal data manifestly made public by the data subject
• for reasons of public interest in the area of public health
• for the prevention and detection of fraud

Who will we share this information with?

We may sometimes share the information that we have collected about you where it is necessary, lawful, and fair to do so.

Within Waverley Borough Council:

• information may be shared with other Waverley Borough Council departments where necessary to follow up a service request, complaint or to take other action requested by or agreed with you.

With other organisations or companies (either with your consent, or where the law allows us):

• the names and addresses of individual people may be shared with a third party print distribution company in order to distribute information you have requested or agreed to receive, or we have a lawful reason for sending you. We have strict processes to ensure that the information is deleted once it has been used and cannot be used or shared in any way other than for the specific mail-out for which it was provided.
• social media user names and correspondence, including any additional personal information you include in your social media correspondence with us (such as your address) may be shared with our social media management system suppliers in the course of our using these systems. Any data shared in this way is bound by our contracts with our suppliers which ensure information is correctly handled in accordance with data protection laws.
• information may also be shared with other council departments or third parties where legal to do so - for full details please see our main privacy notice.
• we have a duty to protect public funds and may use information you provide us with to prevent and detect fraud and share it with other bodies responsible for public funds or auditing them.

How do we keep your information secure?

Information which is held electronically is either held in files retained on the council's servers or dedicated databases. These systems are password protected and only accessible to people who need access to them.

Information which is held on paper is either stored in offices which are subject to access controls or in the dedicated archive provision for the council. Where information is removed from the office for operational purposes, the amount of this is minimised and staff are trained to ensure that this is kept secure at all times.

Will computers make any decisions about you?

The communications and engagement team does not make or use any automated decisions.

Will your data be sent to other countries?

We do not send any information we collect about you outside the United Kingdom.

How long do we keep your information?

Data you share(d) with us on social media is stored on those sites. You are advised to check the privacy notices or terms and conditions of your chosen social media sites for more information.

Information you voluntarily supply to us, in order for us to communicate with you, will be kept until the matter about which we are communicating with you concludes, expires or ceases to be relevant, or, you ask us to stop communicating with you.

Any photos or videos of you, which you have consented for us to use, will be stored on our internal servers for a maximum of three years. At the end of three years we may seek additional consent to continue to use the images or video for a further three years. If we do not seek additional consent, the images or video will be deleted. You can request your photo or video to be deleted at any point before this expiry date.

Photos and videos used on social media and other digital formats are deemed 'published' and in the public domain. Where reasonable and practical we will endeavour to delete such published personal information on request, however we cannot be responsible for any copies of the material which are created and shared by a third party.

What are my rights?

You have the right to request Waverley Borough Council to stop processing your personal data in relation to any council service. Please see our main privacy notice for details.

If you wish to exercise your information rights, please contact the Data Protection Officer at DPO@waverley.gov.uk or alternatively write to: DPO, Waverley Borough Council, 1 The Burys, Godalming, Surrey. GU7 1HR.

You also have the right to request a copy of the personal information council holds about you. To learn more about these rights please see the Information Commissioner's Office website. If something goes wrong with your personal information, or you have questions about how we use it, please contact the Data Protection Officer at DPO@waverley.gov.uk.

If we have not been able to deal with your complaint, you can also contact: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF, or call them.