Privacy notice - COVID-19 lateral flow testing

Middlesbrough Council are supporting the rollout of the Covid-19 lateral flow community testing programme and are responsible for managing appointment bookings and coordinating the testing process.

Middlesbrough council acts in the capacity as a data processor for the administration of the testing. All data gathered during the testing process will be held and maintained by the Department for Health and Social Care (DHSC). For more information about how your data is processed as part of the national testing programme, the legal basis for this and your data subject rights, please visit the DHSC Privacy Notice.

We use the information you provide on our online booking portal or by telephone to schedule your test appointment. This is includes, name, address and contact details.

We collect and process your personal data for ‘public tasks’ where we have a legal power.

We use your personal data to book your Covid-19 Lateral flow test appointment.

No personal information will be shared outside of the Council.

We use the following measures to ensure that your personal data is secure: data protection and security policies, information security incident reporting, data and device encryption, system and data access controls, user accounts and passwords, physical and environmental security, staff vetting practices, staff training and awareness, data back-ups, ICT network penetration testing, and business continuity and disaster recovery plans.

We will only keep details of your booking until the date your lateral flow test is due to take place.

No, the personal data is processed and stored only in the UK.

We will not use this personal data for any direct marketing purposes.

Your Information Rights are set out in law and, subject to some exceptions, you have the:

• Right to rectification - to ask for information to be corrected
• Right to erasure - to have your personal data deleted
• Right to object - to how your data is used
• Right to restriction - to request limits on how your data is used
• Right to portability - to request that we move your data to another organisation
• Right of subject access - to request a copy of data the Council holds about you

If you have a concerns about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner's Office. Visit the website of the Information Commissioner's Office.

If you would like to discuss anything in this privacy notice or your information rights, please contact:

The Data Protection Officer
Middlesbrough Council
PO Box 500, Middlesbrough, TS1 9FT
Phone: 01642 245432
Email: dataprotection@middlesbrough.gov.uk