National Apprenticeship Scheme
Data Controller – Somerset Council – Information Commissioner’s Office Registration Z5957592
Data Protection Officer contact – informationgovernance@somerset.gov.uk
Purpose for processing
To enable the council to encourage learners aged 16 to 18 and, 19 to 25 with a learning difficulty, to participate in education and training in accordance with the council’s statutory duty.
Legal basis for processing
The data is processed in accordance with the General Data Protection Regulation (GDPR):
Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Article 9(2)(g) – for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
Data sharing – the personal data relating to this function is supplied to the council by the Department for Education under a data sharing agreement. The council will only share this data with external organisations where there is a legitimate business reason and lawful basis for doing so. Organisations will include (but are not limited to) the Department for Education, Careers South West and providers of further or higher education.
Transfers abroad – your data will not be transferred abroad unless you are specifically informed at the point your data is collected and received.
Data retention – this data will be retained for a period determined by UK law and regulations, or in some cases to meet specific requirements of the service being provided. You will be informed of this at the point your data is collected.
Your rights – You have the right to ask Somerset Council for a copy of your data, the right to rectify or erase your personal data, and the right to object to processing. However, these rights are only applicable if the council has no other legal obligation concerning that data.
You also have the right to complain to the regulator: Information Commissioner’s Office (IOC)