Skip to main content

Coronavirus privacy statement

This privacy notice applies to the support and services that Bracknell Forest Council and its partners are providing in response to coronavirus (COVID-19) and emergency planning services. The council is committed to protecting and respecting your privacy.

This privacy notice covers contact with the council and its officers directly (face to face), through email, telephone and the website. This privacy notice will continue to be monitored and updated. You are advised to check this page from time to time.

Categories of personal data we collect

When you contact us by phone, email or through the council’s website, we may need to collect personal information about you or your family so that the appropriate support and services can be provided. The information we require from you may include personal data and special categories of personal data, such as:

  • contact details – for example, title, full name, address, email address, telephone number
  • date of birth or age
  • proof of identity – this will only be collected where required
  • next of kin details
  • NHS number or other identification numbers
  • date of travel or last visit to high risk countries
  • health details relating to your physical or mental health
  • financial details for purposes of receiving or making payments
  • housing information relating to your council tenancy
  • details regarding whether you hold a driver’s licence
  • details regarding whether you have a current DBS
  • IP address (if using our website)
  • location data

The above list is not exhaustive. It will only be necessary to collect this type of information where it is of relevance to the support and services you require. We will only process data that is absolutely necessary. Any information we collect about you will be strictly in compliance with the data protection law including the General Data Protection Regulations (GDPR).

The information we use about you can be given to us directly by you, a family member or in some cases can be shared with us by another organisation. This includes organisations such as central government, national and local NHS bodies, the Office for National Statistics, NHS Digital, other local authorities and schools.

Why we need your information (purposes of processing)

Under the Health Service Control of Patient Information Regulations 2002, the council is required to share confidential patient information in order to:

  • understand COVID-19 and risks to public health, trends and such risks, and control and prevent the spread of the virus and such risks
  • identify and understand information about patients or potential patients with or at risk of the virus, information about incidents of patient exposure and the management of patients with or at risk of COVID-19 including:
    • locating
    • contacting
    • screening
    • flagging
    • monitoring
    • collecting information about and providing services in relation to:
      • testing
      • diagnosis
      • self-isolation
      • fitness to work
      • treatment
      • medical and social interventions
      • recovery
  • understand information about patient access to health services and adult social care services and the need for wider care of patients and vulnerable groups, as a direct or indirect result of COVID-19 and the availability and capacity of those services or that care
  • monitor and manage the response to COVID-19 by health and social care bodies and the government including providing information to the public about the virus and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and adult social care services
  • deliver services to patients, clinicians, the health services and adult social care services workforce and the public about and in connection with the virus, including the provision of information, fit notes and the provision of health care and adult social care services
  • research and planning in relation to COVID-19

The council may use new or existing information that it holds in order to:

  • best support and protect children and individuals at risk
  • exercise our health and social care functions
  • exercise our public health functions
  • carry out future epidemiological analysis
  • register individuals as a volunteer

The council will check the information you provide, which may be used to direct you to a suitable voluntary organisation. Your details will be passed to a suitable voluntary organisation who may contact you and request further details.

Our lawful basis for processing your information

Our lawful basis under GDPR when supporting children and individuals at risk, in relation to this pandemic, include:

  • necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller – Article 6 (1)(e)
  • necessary for reasons of substantial public interest - Article 9 (2)(g)
  • necessary for reasons of public interest in the area of public health, such as making sure of high standards of quality and safety of health care and of medical products or medical devices – Article 9 (2)(i)
  • providing health or social care treatment or the management of health or social care systems and services – Article 9 (2)(h)
  • necessary for compliance with a legal obligation – Article 6 (1)(c) and Article 9 (2)(b), including, but not limited to:
    • Coronavirus Act 2020
    • Care Act 2014
    • Children Act 1989
    • Children and Families Act 2017
    • Homelessness Reduction Act 2017
    • Health Service Control of Patient Information Regulations 2002

Our lawful basis under GDPR when using your information to exercise our public health functions are:

  • performance of a task carried out in the public interest – article 6 (1)(e)
  • reasons of public interest in the area of public health – article 9 (2)(i)
  • protect vital interests of a person
    • article 6 (1)(d) and 9 (2)(c)
    • article 6 (1)(c)
  • necessary for compliance with a legal obligation – article 6 (1)(c) and article 9 (2)(b)

If there is a significant threat to health of the public, for instance an outbreak of an infectious disease, the council has the legal right to use identifiable data under:

  • Coronavirus Act 2020
  • section 287 of the Health and Social Care Act 2012
  • regulation 3 of the Health Service (Control of Patient Information) Regulations 2002

Our lawful basis under GDPR when you register to volunteer are:

  • consent – article 6(1)(a) and explicit consent 9 (2)(a)

You can revoke your consent at any time by contacting the council.

Who we may share your information with and receive your information from (internally or externally)

If we are required to, we will only share your information with internal departments and other service providers, contractors or partner bodies, but only where it is necessary and as described above, such as:

  • Public Health England
  • NHS
  • GP practices
  • central government
  • other local authorities
  • local voluntary partners
  • emergency services
  • care providers
  • contracted suppliers who have been procured or are contracted to provide support and services to our residents
  • family, associates or representatives of the person whose personal data we are processing
  • healthcare, social and welfare organisations
  • healthcare professionals
  • mental health care assessors

The above list is not exhaustive.

We will strive to make sure that any personal data in our care will be kept safe and that where your information is disclosed to a third party, they make sure that they to do the same. We will not use your personal data for third party marketing purposes.

How to contact us

If you have any enquiries about this privacy notice, you can contact the council’s Data Protection Officer (DPO) by emailing or by phone 01344 352000.

Alternatively, you can write to:

Data Protection Officer
Bracknell Forest Council
Delivery – Legal
Time Square
Market Street
RG12 1JD

Please see the council’s corporate privacy statement for more information.

Contact details of the Information Commissioner’s Office

If you are unhappy with how your data has been processed by the Council, or you feel your data protection rights have been breached, you have the right to complain to the Information Commissioner’s Office at or at:

Information Commissioner’s Office
Wycliffe House
Water Lane

Please note that the Information Commissioner’s Office will expect you to raise any data protection issues with the council for us to resolve in the first instance, before you contact them.

Contact information

Legal Team

Make an enquiry