Privacy Notice
Personal data means any information which allows you to be identified. This can include contact information, information which describes you, pictures of you, or technical identifiers such as the address your computer generates when connected to the internet.
In using any website, some of this information is provided to the site-owner. You may also volunteer further information, such as your name and email address, by filling in forms on the site, or sending us content either there, on email or via social media.
Who we are
This website is owned and managed by Bradford on Avon Town Council (BOATC or ‘the Town Council’) which is the ‘data controller’ for the purposes of the Data Protection Act (DPA) 2018.
The processing described in this notice is undertaken by or on behalf of the Town Council. The Town Council is not required to appoint a Data Protection Officer, but has access to data protection advice from a qualified DPO.
What we use your data for
Bradford on Avon Town Council uses personal data to:
- Provide you with any information you request from the Town Council, or, where applicable, third parties;
- Create and administer any listings on the website, related social media accounts and on town noticeboards;
- Maintain and enhance the website, including protecting the integrity and security of the site;
- Market products, services and events.
It may do so based on:
- Legitimate purposes;
- Consent (expressed at the time of collection);
- Performance of a contract;
- Regulatory requirement;
Who we share your data with
Unless required by law, or otherwise permitted under the Data Protection Act, personal data will only be shared with third parties where you have provided consent or specifically requested that we do so. We may also share information in order to manage or resolve a complaint about the site, or services or activities you have received – you will normally be informed of this at the time.
The Town Council uses various data processors to provide the website and its content. These processors are subject to contractual and other protections as required under the DPA 2018.
If you interact with @BoATownCouncil @ExploreBoA or @GROWBradfordonAvon on Facebook, please also be aware that Facebook are also considered a Data Controller. Interactions with the @BoATownCouncil @ExploreBoA or @GROWBradfordonAvon pages will provide both Data Controllers with personal data as outlined in Facebook’s Privacy Notice. This will include a level of analytic and statistical information which @BoATownCouncil @ExploreBoA or @GROWBradfordonAvon may use to target advertising of events using Facebook’s functionality.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
In the event that you are unhappy with our processing of your data, please contact office@bradfordonavontowncouncil.gov.uk.
You can also make a complaint to the Information Commissioner’s Office – more information on this can be found at www.ico.org.uk.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
In interacting with @BoATownCouncil @ExploreBoA or @GROWBradfordonAvon via Facebook, your data may be processed in the United States of America (please see Facebook’s privacy notice for more information) and depending on your privacy settings may be accessed globally.
Bradford on Avon Town Council uses Mailchimp to create and maintain mailing lists. This information may be held or processed in the United States of America. It is subject to Mailchimp’s standard licence agreement; personal data is protected by Privacy Shield, which provides an adequate level of protection of personal data under UK/EU law.
This website uses Google products for some functionality, as outlined in our Cookie policy. This information may be held or processed in the United States of America. It is subject to Googles standard licence agreement, including their privacy terms.
Additional information
How we protect your data
Bradford on Avon Town Council employees receive regular training on data protection and information security measures applicable to them. Use of and access to personal data is restricted to those who need it do perform their tasks.
Companies processing personal data on our behalf have appropriate contractual terms in place, which include data protection and information security requirements, and they are also subject to UK/EU data protection law.
Appropriate and proportionate technical measures are in place to protect our website and other internet-connected services.
What data breach procedures we have in place
In the event of a data breach, the Town Council has access to data protection professionals that will assess and provide advice on the handling and impact, which may include informing regulators and individuals whose data has been affected.
The breach would be isolated, assessed, and impacts mitigated while a full remediation plan is put in place, including communication with relevant parties.
What third parties we receive data from
We may receive personal data from members of the public, elected Bradford on Avon Town Council Councillors, Wiltshire Council, local businesses or other parties.
What automated decision making and/or profiling we do with user data
We do not undertake any automated decision-making.
We may make use of Facebook targeting features to ensure that advertisements are reaching target audiences. These may target ads based on location, age, gender, geographic location, or specifically expressed interests.
Technical information
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
| Cookie Name | Domain | Description |
| _utma | google.com | We use Google Analytics to monitor visitors to our website. We also use Google Adwords / Doublick cookie which allows Google to monitor and measure the success of promotional ads we run on Google. |
| _utmb | ||
| _utmc | ||
| _utmz | ||
| IDE | ||
| __cfduid | addtoany.com | This cookie is used by the Add to any plugin which allows content to be shared on your social media accounts. |
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
The website uses Google Analytics to provide usage data. This may include information such as general location, internet browser and operating system, and pattern of behaviour while on the website. For more information, please see the section on Cookies.