Privacy Notice - Tourism Service

The General Data Protection Regulation (the GDPR), which came into force on the 25^th May 2018, governs how Neath Port Talbot Council’s (NPTCBC) Tourism Service deals with your information.

This Privacy Notice sets out how we use your information and the rights that you have in relation to the GDPR.

Neath Port Talbot County Borough Council (NPTCBC), acts as Data Controller for the personal data that the Tourism Service holds about you.

How we use your information

We will use your basic business information in the following ways;

In the compilation of a mailing list and bed stock count for the tourism industry in Neath Port Talbot
An online listing of accommodation providers, activity providers and attractions located in Neath Port Talbot which is displayed on the NTPCBC operated visitnpt.co.uk and www.afanforestpark.co.uk websites
In the delivery of any direct advice and assistance to your business in partnership with the NPTCBC Business Development Team.

In addition to the activities above we may use your information to fulfil the reporting requirements for specific projects being delivered by the Tourism Service. NPTCBC is required to record information about participants in projects which it delivers.

If requested, the above information will be shared with other departments of Neath Port Talbot Council, Welsh Government and the Welsh European Funding Office who may wish to contact you to verify your involvement in ongoing projects being delivered by the NPTCBC Tourism Service.

Your information may also be shared with other organisations where we have a legal obligation to do so.

Information we hold about you

The personal information that we hold about you depends upon how you engage with the NPTCBC Tourism Service.

The information below is stored securely in a Microsoft Excel spread sheet in addition to a secure database maintained by the NPTCBC Economic Development Service. All paper copies of documents are stored securely in locked cabinets.

Tourism Industry Mailing List & Bed Stock List- We hold a list of all tourism operators in Neath Port Talbot which contains the following information;

Business name
Personal contact name
Telephone number
Email address
Website address
Bed stock data for each individual accommodation business.

This information is held on an opt-in basis and is used to send out relevant news to the tourism industry within Neath Port Talbot in addition to calculating the area’s overall bed stock. You can opt out of the mailing list at any time by contacting tourism@npt.gov.uk, however we will continue to hold information about the bed stock of each accommodation provider in order to calculate accommodation provision in the area.

Stakeholder Meetings (Task and Finish Groups) - If you have attended a stakeholder meeting linked to the delivery of the Neath Port Talbot Destination Management Plan you will have provided the following information in order to register your attendance at the meeting;

Name
Company/ Organisation Name
Email Address
Telephone Number

Listings on visitnpt.co.uk and www.afanforestpark.co.uk - If you are an accommodation provider your website address and the address of your business (including a google map) will be added to the above websites in addition to other useful information which includes star ratings and bed spaces. If you are an activity provider or attraction your website address will be included within the relevant sections of the above websites.

Accessing NPTCBC funding – if you make an application for funding you will be required to provide the following information

Contact Name
Business/ Organisation Name
Address
Post Code
Telephone Number
Email Address
Website Address
Financial information in relation to your event
Relevant insurance certificates which may contain personal information.

In the delivery of any direct advice and assistance to your business - If you have received, or intend to receive, advice and assistance from any member of the NPTCBC Tourism Team or Business Development Team please refer to the NPTCBC Economic Development Services Privacy Statement on NPT Business Website.

Sense of Place Events - If you have attended a Sense of Place Event you will be asked to provide the following information;

Name
Address
Telephone number
Gender
Whether you are a welsh speaker
The name of your business/ organisation and the wards operated in.

Business Development Mapping Exercise – If you have completed a questionnaire with the Tourism Service you will be asked to provide the following information;

Name
Address
Telephone number
Gender
Your age range
Whether you are a welsh speaker
The name of your business/ organisation and the wards operated in.
Detailed information about the operation of your business

Photography Bank

In order to access the Neath Port Talbot Tourism Photography Bank you will be required to complete a simple agreement which protects NPTCBC from any losses associated with the illegal reproduction of the photography. As part of this agreement you will provide us with the following business information;

Contact Name
Business/ Organisation Name
Address
Post Code
Telephone Number
Email Address
Website Address

Our legal basis for using your information and how long we will keep it for

We will process your information on the legal basis that it is necessary for us to perform a public task in delivering economic development services (including Tourism).

Your information will be retained as long as your business/ organisation is located in, and operates from Neath Port Talbot County Borough.

If your business/ organisation ceases to trade, or moves out of the County Borough, your information will be retained for sufficient time to enable us to respond to any questions that may arise as a result.

Where your business/ organisation has received grant funding your information will be retained as above and for up to a further six years in line with the Council’s document retention policy.

If you have opted-in to receiving relevant tourism industry news items from Neath Port Talbot CBC via our Tourism Industry Mailing List you will have provided your consent for us to process your data. We will continue to hold your information for the lifetime of your business/ organisation or until you request to be removed from the mailing list by emailing tourism@npt.gov.uk.

When your information is no longer required, it will be securely destroyed.

Please note that we are required to collect certain personal data under statutory requirements and in such cases a failure by you to provide that information to us may result in the Council being unable to provide you with a service and/or could render you liable to legal proceedings.

We would inform you that under Article 21 GDPR you have the right at any time to object to the Authority about the fact that we are processing your personal data for the purposes of carrying out a public task or exercising our official authority.
The Council will not transfer any of your personal data outside of the European Union. All processing of your personal data by us will be carried out in the United Kingdom or other European Union countries.
The Council will not use your personal data for the purposes of automated decision making.

Your rights in relation to your information

Please be advised that under GDPR individuals are given the following rights in regards to their personal data:

The right of access to their personal data held by a data controller.
The right to have inaccurate data corrected by a data controller.
The right to have their data erased (in certain limited circumstances).
The right to restrict the processing of their data by a data controller (in certain limited circumstances).
The right to object to their data being used for direct marketing.
The right to data portability (i.e. electronic transfer of data to another data controller).

Further information on all the above rights may be obtained from the Information Commissioner’s website: www.ico.org.uk.

How to contact us

If you have any questions about how NPTCBC uses your information or you wish to contact us to make a complaint about the use of your information please email the NPTCBC Data Protection Officer at the following address;

Data Protection Officer
Neath Port Talbot County Borough Council
Civic Centre
ort Talbot
SA13 1PJ