Document
Privacy Notice - Tourism Service (1)
1. The General Data Protection Regulation (the GDPR), which came into force on the 25th May 2018, governs how Neath Port Talbot Council’s (NPTCBC) Tourism Service deals with your information.
This Privacy Notice sets out how we use your information and the rights that you have in relation to the GDPR.
2. Neath Port Talbot County Borough Council (NPTCBC), acts as Data Controller for the personal data that the Tourism Service holds about you.
3. We will use your basic business information in the following ways;
- In the compilation of a mailing list and bed stock count for the tourism industry in Neath Port Talbot
- An online listing of accommodation providers, activity providers and attractions located in Neath Port Talbot which is displayed on the NTPCBC operated visitnpt.co.uk and www.afanforestpark.co.uk websites
- In the delivery of any direct advice and assistance to your business in partnership with the NPTCBC Business Development Team.
4. In addition to the activities above we may use your information to fulfil the reporting requirements for specific projects being delivered by the Tourism Service. NPTCBC is required to record information about participants in projects which it delivers.
- If requested, the above information will be shared with other departments of Neath Port Talbot Council, Welsh Government and the Welsh European Funding Office who may wish to contact you to verify your involvement in ongoing projects being delivered by the NPTCBC Tourism Service.
- Your information may also be shared with other organisations where we have a legal obligation to do so.
5. The personal information that we hold about you depends upon how you engage with the NPTCBC Tourism Service.
The information below is stored securely in a Microsoft Excel spread sheet in addition to a secure database maintained by the NPTCBC Economic Development Service. All paper copies of documents are stored securely in locked cabinets.
Tourism Industry Mailing List & Bed Stock List
We hold a list of all tourism operators in Neath Port Talbot which contains the following information;
- Business name
- Personal contact name
- Telephone number
- Email address
- Website addressBed stock data for each individual accommodation business.
This information is held on an opt-in basis and is used to send out relevant news to the tourism industry within Neath Port Talbot in addition to calculating the area’s overall bed stock. You can opt out of the mailing list at any time by contacting tourism@npt.gov.uk, however we will continue to hold information about the bed stock of each accommodation provider in order to calculate accommodation provision in the area.
Stakeholder Meetings (Task and Finish Groups)
If you have attended a stakeholder meeting linked to the delivery of the Neath Port Talbot Destination Management Plan you will have provided the following information in order to register your attendance at the meeting;
- Name
- Company/ Organisation Name
- Email Address
- Telephone Number
Listings on visitnpt.co.uk and www.afanforestpark.co.uk
If you are an accommodation provider your website address and the address of your business (including a google map) will be added to the above websites in addition to other useful information which includes star ratings and bed spaces. If you are an activity provider or attraction your website address will be included within the relevant sections of the above websites
Accessing NPTCBC funding
If you make an application for funding you will be required to provide the following information
- Contact Name
- Business/ Organisation Name
- Address
- Post Code
- Telephone Number
- Email Address
- Website Address
- Financial information in relation to your event
- Relevant insurance certificates which may contain personal information.
In the delivery of any direct advice and assistance to your business
If you have received, or intend to receive, advice and assistance from any member of the NPTCBC Tourism Team or Business Development Team please refer to the NPTCBC Economic Development Services Privacy Statement on NPT Business Website.
Sense of Place Events
If you have attended a Sense of Place Event you will be asked to provide the following information;
- Name
- Address
- Telephone number
- Gender
- Whether you are a welsh speaker
- The name of your business/ organisation and the wards operated in
Business Development Mapping Exercise
If you have completed a questionnaire with the Tourism Service you will be asked to provide the following information;
- Name
- Address
- Telephone number
- Gender
- Your age range
- Whether you are a welsh speaker
- The name of your business/ organisation and the wards operated in
- Detailed information about the operation of your business
Photography Bank
In order to access the Neath Port Talbot Tourism Photography Bank you will be required to complete a simple agreement which protects NPTCBC from any losses associated with the illegal reproduction of the photography. As part of this agreement you will provide us with the following business information;
- Contact Name
- Business/ Organisation Name
- Address
- Post Code
- Telephone Number
- Email Address
- Website Address
6. We will process your information on the legal basis that it is necessary for us to perform a public task in delivering economic development services (including Tourism).
- Your information will be retained as long as your business/ organisation is located in, and operates from Neath Port Talbot County Borough.
- If your business/ organisation ceases to trade, or moves out of the County Borough, your information will be retained for sufficient time to enable us to respond to any questions that may arise as a result.
- Where your business/ organisation has received grant funding your information will be retained as above and for up to a further six years in line with the Council’s document retention policy.
- If you have opted-in to receiving relevant tourism industry news items from Neath Port Talbot CBC via our Tourism Industry Mailing List you will have provided your consent for us to process your data. We will continue to hold your information for the lifetime of your business/ organisation or until you request to be removed from the mailing list by emailing tourism@npt.gov.uk.
- When your information is no longer required, it will be securely destroyed.
Please note that we are required to collect certain personal data under statutory requirements and in such cases a failure by you to provide that information to us may result in the Council being unable to provide you with a service and/or could render you liable to legal proceedings.
7. We would inform you that under Article 21 GDPR you have the right at any time to object to the Authority about the fact that we are processing your personal data for the purposes of carrying out a public task or exercising our official authority.
8. The Council will not transfer any of your personal data outside of the European Union. All processing of your personal data by us will be carried out in the United Kingdom or other European Union countries.
9. The Council will not use your personal data for the purposes of automated decision making.
10. Please be advised that under GDPR individuals are given the following rights in regards to their personal data:
- The right of access to their personal data held by a data controller.
- The right to have inaccurate data corrected by a data controller.
- The right to have their data erased (in certain limited circumstances).
- The right to restrict the processing of their data by a data controller (in certain limited circumstances).
- The right to object to their data being used for direct marketing.
- The right to data portability (i.e. electronic transfer of data to another data controller).
Further information on all the above rights may be obtained from the Information Commissioner’s website: www.ico.org.uk.
11. If you have any questions about how NPTCBC uses your information or you wish to contact us to make a complaint about the use of your information please email the NPTCBC Data Protection Officer at Neath Port Talbot County Borough Council, Civic Centre, Port Talbot, SA13 1PJ
12. Please be advised that in the event that you make a request or a complaint to the Council’s Data Protection Officer (see 11 above) and you are dissatisfied with the Council’s response you are entitled to complain directly to the Information Commissioner’s Office. Details of the Commissioner’s Office contact details and further information on your rights may be obtained from the Information Commissioner’s website.