Confidentiality in this context is all about limiting access to who can see and process the information you provide. As a data controller, Cornwall IFCA can process the information you provide securely.
If you select ‘yes’ to the response remaining confidential we won’t be able to use your response in any report or summary of findings but Cornwall IFCA will be aware of your responses. However, Cornwall IFCA may be legally obliged to provide your response under an EIR/FOI request but we will remove your personal data, unless we are have an obligation to share that data with another organisation, at which time you will be notified of who your data will be shared with when you provide your data (this is particularly the case when you respond to a byelaw being made and the personal data is shared with Defra).
Bear in mind that one of the 6 lawful bases for using data is ‘public task’ where we can legally use the data to fulfil a public task. The 6 tasks are listed below:
What are the lawful bases for processing?
The lawful bases for processing are set out in Article 6 of the UK GDPR. At least one of these must apply whenever you process personal data:
(a) Consent:
the individual has given clear consent for you to process their personal data for a specific purpose.
(b) Contract:
the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
(c) Legal obligation:
the processing is necessary for you to comply with the law (not including contractual obligations).
(d) Vital interests:
the processing is necessary to protect someone’s life.
(e) Public task:
the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
(f) Legitimate interests:
the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)