Privacy notice - leisure management

Identity and contact details of the data controller

Epping Forest District Council is a data controller pursuant to the General Data Protection Regulation. This means that the Council decides how your personal data is processed and for what purposes. The contact details for the Council’s Data Protection Officer are:

Data Protection Officer
Epping Forest District Council
Civic Offices
High Street
Essex CM16 4BZ

Telephone 01992 564180

What personal information do we collect about you?

Name, address, telephone number, email address, accident details, medical records associated with accidents and injuries sustained as a result of EFDC or contractor activities.

In addition we have access to information regarding membership of our leisure centres.

Why do we collect this information & how will it be used?

We need to use your personal data so we can get in touch, or to ensure the public with whom you may work are safe. We can also use your personal data under many different laws. In many cases there is a law that says we must or we can process your data and we can do so without your consent or permission.

In some instances we will need to refer your data to a third party organisation. These third party organisations have to keep your details safe and secure, and use them only for this purpose.

What is the legal basis for processing your personal data?

6(1) (e) Public task. The processing is necessary for the data controller to perform a task in the public interest or for official functions and the task or function has a clear basis in law.

Special category data includes information about race; ethnic origin; politics; religion; trade union membership; genetics; biometrics (where used for ID purposes); health; sex life; or sexual orientation. Criminal offence data includes personal data relating to criminal convictions and offences, or related security measure.

Who we share your information with

In addition to the general reasons for information sharing described in the Council’s primary privacy notice, we may share your information with:

  • Essex Police
  • The Health and Safety Executive
  • Internal Council Departments
  • Other Local Authorities
  • HM Revenue and Customs
  • Central Government Departments
  • Insurance Companies
  • Other Organisations (where the disclosure is necessary for the purposes of the prevention and / or detection of crime)

Transfers to third countries and safeguards in place

No transfers of personal data to places outside of the European Union take place.

How long do we keep your personal data

The Council will keep your personal information in line with our retention policy.

Your rights

Under the General Data Protection Regulation, you have various rights as an individual that you can exercise in relation to the information that the Council holds about you. Information about these rights is available on the data protection page of the Council’s website:

How to make a complaint

If you are unhappy with the way in which your personal data is processed by Epping Forest District Council you should contact the Data Protection Officer in the first instance.

If you remain dissatisfied with the Council’s processing of your personal data, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Cheshire SK9 5AF