Nottingham City Council is a data controller for the purposes of the General Data Protection Regulation (GDPR) 2018. Nottingham City Council will process the Citizen’s data in accordance with GDPR and will use the Customer’s data for the following purposes:

• To provide the Customer with the service they applied for and for ongoing administration of the service;
• To ensure that Nottingham City Council follow the Customer’s instructions correctly and to improve Customer service, Nottingham City Council may monitor and/or record any communication between the Customer and Nottingham City Council, including telephone conversations and emails.

In the following information Nottingham City Council will detail:

• how we use your data;
• what personal data we collect;
• how we ensure your privacy is maintained; and
• your legal rights relating to your personal data.

Types of Data

Website Cookies

Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognize you and make your next visit easier and the Service more useful to you.

Cookies can be “persistent” or “session” cookies.

When you use and access the Service, we may place a number of cookies files in your web browser.
We use cookies for the following purposes: to enable certain functions of the Service, to provide analytics, to store your preferences.
We use both session and persistent cookies on the Service and we use different types of cookies to run the Service:
Essential cookies. We may use essential cookies to authenticate users and prevent fraudulent use of user accounts.

Google Analytics
When someone visits robinhoodnetwork.co.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Ticketing Data
If you join the Robin Hood Ticketing Scheme we require certain personal data in order to manage the service for you and provide support. This includes name, address and date of birth for identification. You can register via the website and see what information we hold for you and update it yourself at any time.

Sharing information
When you register online you will be asked to opt in if you want to hear from us or other operators in the scheme regarding offers and updates.

When you register for the Robin Hood scheme you will need to opt in for terms and conditions and scheme updates. This relates only to the operation of the scheme.

Access to your personal information

Under GDPR, the data subject has the right to access and amend any of their personal data that you hold. Make it easy for them by including a name and contact email.
You are entitled to view, amend, or delete the personal information that we hold. Email your request to our data protection officer at data.protection@nottinghamcity.gov.uk
Should you wish to have your details removed from the system for the Robin Hood Scheme we will require the return of your card and you will be removed from the ticketing scheme.

Legal and Statutory
To enable Nottingham City Council to comply with our legal and regulatory obligations;

To prevent and/or detect potential fraud and crime, by both conducting our own Data Matching as well as sharing this information with other public bodies such as; the Cabinet Office, the Department for Work and Pensions, other Local Authorities, HM Revenues and Customs, the Police as well as utility companies, credit reference agencies and service providers/contractors and/or partner bodies, where the disclosure of information is either:
Necessary for the purposes of the prevention and/or detection of crime; and/or Is otherwise necessary to comply with any other legal obligation.

Data Matching
Computerised data matching allows potentially fraudulent activity to be identified. No assumption can be made as to whether inconsistencies or duplications are down to fraud, error or other explanation until an investigation is carried out. The data matching process is a proven way of helping to ensure that records are up to date and accurate. The Cabinet Office currently requires local authorities to participate in a data matching exercise called the NFI (National Fraud Initiative) to assist in the prevention and/or detection of fraud. We are legally required to provide certain data sets to the Cabinet Office for matching every two years. These are set out in the Cabinet Office Guidance. https://www.gov.uk/government/collections/national-fraud-initiative

The use of data by the Cabinet Office in this data matching exercise is carried out with statutory authority under the powers given to the Minister for the Cabinet Office by Part 6 of the Local Audit and Accountability Act 2014. It does not require consent of the individuals concerned under the Data Protection Act 1998.

Retention
Nottingham City Council will remove personal information from the live system on closure of an account. For compliance with the national scheme some data is securely archived for seven years.