Bathing water designation and de-designation: privacy notice
Published 3 July 2023
Applies to England
Who collects your personal data
Defra is the controller for the personal data we collect:
Department for Environment
Food and Rural Affairs
2 Marsham Street
London
SW1P 4DF
Send questions about how Defra uses your personal data, and your associated rights, to the Defra Data Protection Manager at data.protection@defra.gov.uk or:
Department for Environment, Food and Rural Affairs
Nobel House
17 Smith Square
London
SW1P 3JR
The Data Protection Officer for Defra is responsible for checking that Defra complies with the legislation.
You can contact them at DefraGroupDataProtectionOfficer@defra.gov.uk or:
Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF
What personal data we collect and how it is used
Defra collects:
- your name
- your contact details
- the name and contact details of each landowner
- the name and contact details of the person at the local authority who signed your letter of support
We will use your information to assess your application to designate or de-designate a bathing water.
Legal basis for processing your personal data
The legal basis for processing your personal data is that it is necessary for the performance of a task carried out in the public interest, which is laid down by law in the Bathing Water Regulations 2013.
Consent to process your personal data
The processing of your personal data is not based on consent. You cannot withdraw it.
Who we share your personal data with
Defra does not share the personal data collected under this privacy notice with other organisations.
Participation in this application process is of public interest. On request we may have to release the information submitted in your application. We will respect personal privacy while complying with access to information requests.
We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.
How long Defra holds personal data
Defra will keep your personal data for 6 years, in line with Defra’s retention schedule.
What happens if you do not provide the personal data
If you do not provide the personal data we will not be able to assess your application for bathing water designation or de-designation.
Use of automated decision-making or profiling
The personal data you provide is not used for:
- automated decision making (making a decision by automated means without any human involvement)
- profiling (automated processing of personal data to evaluate certain things about an individual)
Transfer of your personal data outside of the UK
Defra will only transfer your personal data to another country that is deemed adequate for data protection purposes.
Your rights
Find out about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Complaints
You have the right to make a complaint to the Information Commissioner’s Office at any time.
Defra’s personal information charter
Defra’s personal information charter explains more about your rights over your personal data.