Guidance

Bathing water designation and de-designation: privacy notice

Published 3 July 2023

Applies to England

Who collects your personal data

Defra is the controller for the personal data we collect:

Department for Environment
Food and Rural Affairs
2 Marsham Street
London
SW1P 4DF

Send questions about how Defra uses your personal data, and your associated rights, to the Defra Data Protection Manager at data.protection@defra.gov.uk or:

Department for Environment, Food and Rural Affairs
Nobel House
17 Smith Square
London
SW1P 3JR

The Data Protection Officer for Defra is responsible for checking that Defra complies with the legislation.

You can contact them at DefraGroupDataProtectionOfficer@defra.gov.uk or:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

What personal data we collect and how it is used

Defra collects:

  • your name
  • your contact details
  • the name and contact details of each landowner
  • the name and contact details of the person at the local authority who signed your letter of support

We will use your information to assess your application to designate or de-designate a bathing water.

The legal basis for processing your personal data is that it is necessary for the performance of a task carried out in the public interest, which is laid down by law in the Bathing Water Regulations 2013.

The processing of your personal data is not based on consent. You cannot withdraw it.

Who we share your personal data with

Defra does not share the personal data collected under this privacy notice with other organisations.

Participation in this application process is of public interest. On request we may have to release the information submitted in your application. We will respect personal privacy while complying with access to information requests.

We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.

How long Defra holds personal data

Defra will keep your personal data for 6 years, in line with Defra’s retention schedule.

What happens if you do not provide the personal data

If you do not provide the personal data we will not be able to assess your application for bathing water designation or de-designation.

Use of automated decision-making or profiling

The personal data you provide is not used for:

  • automated decision making (making a decision by automated means without any human involvement)
  • profiling (automated processing of personal data to evaluate certain things about an individual)

Transfer of your personal data outside of the UK

Defra will only transfer your personal data to another country that is deemed adequate for data protection purposes.

Your rights

Find out about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

Defra’s personal information charter

Defra’s personal information charter explains more about your rights over your personal data.