PRIVACY POLICY AND TERMS & CONDITIONS

Heart of the City, Sheffield is a regeneration development project that is being delivered and funded by Sheffield City Council. Heart of the City is a development funded and delivered by Sheffield City Council. (We” or “our” or “us”) Sheffield City Council are committed to protecting and respecting your privacy. 

This policy (and any other documents referred to herein) sets out the basis on which any personal data we collect from you from our website (www.heartofsheffield.uk) (“Website”), or that you provide to us by other means or will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. 
 

For the purpose of the Data Protection Act 2018 (the Act) and the General Data Protection Regulations (GDPR), the data controller is Sheffield City Council.

1. Information we may collect from you

1.1 We may collect and process the following data about you: 

  1. If you contact us, wewillkeep a record of that correspondence. 
  2. We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
  3. Details of transactions you carry out through ourwebsite.
  4. Details of your visits to the Website including, but not limited to, traffic data, location data,weblogsand other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access. 

 

2. IP addresses and cookies

2.1 We may collect information about your device, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. 

2.2 For the same reason, we may obtain information about your usage of our Website by using a cookie which is stored on the hard drive of your device. Cookies are used to make our Website work and to deliver a better and more personalised service. They enable us: 

  1. To estimate our audience size and usage pattern.
  2. To store information about yourpreferences, andso allow us to customise our Website according to your individual interests. 
  3. To speed up your searches.
  4. To recognise you when you return to our Website.

 

2.3 The cookies used on our Website are: 

Essential cookies: These cookies are essential for recording whether you have accepted the use of Google Analytics cookies on the www.heartofsheffield.uk. This cookie is deleted when you close your browser. 

Analytics cookies: These cookies are used by Google Analytics to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. To opt out of being tracked by Google Analytics across all websites visit https://tools.google.com/dlpage/gaoptout. 

  1. To find out more about cookies, including how to see what cookies have been set and how to manage anddeletethem, visit www.allaboutcookies.org 

 

2.4 This privacy policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit. 

2.5 We may embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your device once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. To find out more please visit YouTube’s embedding videos information page: https://www.google.com/support/youtube/bin/answer.py?hl=en-GB&answer=171780. 

2.6 We may display either (or both) of the following widgets: 

  1. Feed widgets (widgets that display a feed from our social network page). These widgets do not create a cookie.
  2. Sharing widgets (widgets such as Facebook Like, Twitter Share orAddThis) which enable you to share content of www.heartofsheffield.uk to your friends or followers. Bydefault these do not create a cookie until you have clicked on the graphic or icon representing the sharing network you would like to use. By clicking the graphic or icon you consent to transmitting data to the respective social network. 

 

3. Where we store your personal data

3.1 As our servers are located in the United Kingdom, the data that we collect from you is obtained, processed, stored and transmitted in compliance with data protection legislation. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and UK GDPR. 

3.2 All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. 

3.3 The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access 

 

4. Purpose of the processing, legal basis for the processing and retention periods

4.1 We use information held about you in the following ways: 

  1. To ensure that content from ourWebsiteis presented in the most effective manner for you and for your device. 
  2. To provide you with information,productsor services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes. 
  3. To carry out our obligations arising from any contractsentered intothrough our Website. 
  4. To allow you toparticipatein interactive features of our service, when you choose to do so. 
  5. Tonotify youabout changes to our service. 
  6. To regularly update you about our services and promotions in Newsletters.

 

4.2 We may also use your data to provide you with information about goods and services which may be of interest to you and we may contact you about these by email, text, post or telephone 

4.3 Where we permit our affiliates to use your data, we (or they) will contact you only if you have consented to this. 

4.4 We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in SW1). We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience. 

4.5 Our lawful bases for processing personal data: 

  1. Viewing ourwebsiteand sending us enquiries – Necessary for the public task performed in the public interest or for our official functions. This is Article 6(1)(e) of UK GDPR.  
  2. Bookings (with review requests) and eShop orders – Necessary for the performance of a contract.This is Article6(1)(b) of UK GDPR. 
  3. Marketing/eNewsletters–Consent under This is Article 6(1)(a) of UK GDPR. Please note, you are free to withdraw your consent for this activity at any time.  

 

4.6 Our retention periods for your personal data: 

  1. Operational Database records will bedeletedafter 18 months of last use, e.g. checking out of accommodation. 
  2. eMarketing Database records will bedeletedafter 24 months of last use, e.g. an email being sent. 

 

4.7 Business records storage and publishing: 

  1. For storing and publishing business records on this website, our lawful basis for processing this data is “Public task”.The ICO websitestates the following, “the processing is necessary for you to perform a task in the public interest or for your official functions”. 
  2. We store accommodation,venueand other business details (Trade Data) in our database to facilitate publishing them on this website. Our legal basis for this processing is part of our public task. Business details are, by their nature, already in the public domain and we are using them in a way the businesses would reasonably expect and could benefit from.

 

5. Disclosure of your information.

5.1 We may disclose your personal information to third parties: 

If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions and other agreements; or to protect the rights, property, confidential information or safety of our Website, customers, affiliates or others and in particular if we are required to prevent any fraud or fraudulent transactions. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. 

The Council can share information on an ad-hoc, one-off basis where a Data Protection Exemption applies, for example when sharing information with the Police. Where an exemption applies, we do not need to explain this to the individual 

5.2 Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. 

 

6. Your rights

6.1 You have the right to ask us not to process your personal data for marketing purposes. We operate an optional choice for receiving marketing communications and will clearly name any other organisations who may process your personal data. You can exercise your right to prevent such processing at any time by using the unsubscribe function on a received marketing email or by contacting us at Sheffield City Council propertyservices@sheffield.gov.uk 

6.2 The Act gives you the right to access information held about you, this is called a Subject Access Request or SAR.  

Your right of access can be exercised in accordance with UK data protection law. 

You can make a SAR to Sheffield City Council via this link: Subject Access Requests | Sheffield City Council 

You may request that your personal data is corrected or deleted. Corrections will be made as soon as possible. It is not always possible to carry out a request to delete personal data as we may have obligations to retain it for legal or regulatory purposes. We will inform you of this if you make a deletion request. Please note that if we comply with a deletion request, this may be affected any outstanding bookings or orders in progress. 

6.3 If you are not satisfied with our response, please contact DataProtectionOfficer@sheffield.gov.uk in the first instance and make a compliant to the Data Protection Officer. You may also contact the UK regulatory authority, the Information Commissioner’s Office, https://ico.org.uk to report your concern. 

 

7. Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. 

 

8. Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Sheffield City Council at propertyservices@sheffield.gov.uk