2. General privacy notice
You will find the LDNPA’s General privacy notice here on our privacy and cookie notice webpage.
In the General privacy notice, you will find general information on how the LDNPA uses personal data.
Please read the following sections of the General privacy notice, as this Privacy Notice for FiPL applicants is a supplement to it, specialising in our use of FiPL applicants’ personal data:
- Section 2 Important information with all subsections.
- Section 4 The data we collect about you with all subsections.
- Section 5 How your personal data is collected with all subsections.
- Section 6 How we use your personal data with all subsections.
- Section 7 Disclosures of your personal data with all subsections.
- Section 8 International transfers.
- Section 9 Data security.
- Section 10 Data retention with all subsections.
- Section 11 Your legal rights with all subsections.
- Please note that your legal rights under the UK GDPR are explained in detail in the General privacy notice.
3. Questions, complaints, and Subject Access Requests
If you want to:
- Ask questions about this privacy notice or our General privacy notice,
- Ask us what personal data we hold about you and ask about getting access to it (a Subject Data Request),
- Raise a complaint about our use of your personal data, or
- Otherwise comment on our use of your personal data,
please contact our Data Protection Officer in writing:
- Full name of legal entity: Lake District National Park Authority
- Data Protection Officer: Julie Wood, LDNPA Solicitor
- Email: Julie.Wood@lakedistrict.gov.uk (opens email)
- Postal address: LDNPA, Murley Moss, Oxenholme Road, Kendal, Cumbria, LA9 7RL
- Telephone Number: 01539 724555
4. Specific privacy notice
The rest of this document is a specific privacy notice for FiPL applicants and supplements the General privacy notice referred to above.
4.1. The data we collect about you
Please see section 4, The data we collect about you, in our General privacy notice, as this section supplements the general text.
In relation to your FiPL application, the following must be added:
Financial data includes details of previous grant funding received, including but not limited to Environmental Stewardship; Countryside Stewardship Schemes; Protected Landscape; Growth Programme; LEADER; Countryside Productivity; and Green Recovery Challenge Fund.
Transaction data includes details about payments to and from you and other details of grant funding you have received from us.
4.1.1 Particularly sensitive personal information
We do not collect any “special categories” of personal data in relation to your FiPL application. “Special categories” of personal data include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
Nor do we collect any information about criminal convictions and offences.
4.2 How your personal data is collected
Please see section 5, How your personal data is collected, in our General privacy notice, as this section supplements the general text.
In relation to your FiPL application, the following must be added:
We collect personal data about you through direct interaction when you apply to the FiPL programme.
4.3. How we use your personal data
Please see section 6, How we use your personal data, in our General privacy notice, as this section supplements the general text.
In relation to your FiPL application, the following must be added:
4.3.1. Registering you as a new applicant
Purpose/activity
- To register you as a new applicant under the FiPL programme.
Type of data
- Identity
- Contact
Lawful basis for processing
- Contractual obligation
4.3.2. Processing your application
Purpose/activity
To process and determine your application for grant funding, deal with any appeal
against such decisions and process any complaint you may make under our complaints
procedure including:
- Sharing data with members of the decision-making panel, Defra, statutory
undertakers such as Natural England and any auditors appointed by such bodies. - Managing payments, fees and charges including the collection and recovery of
money owed to us or third parties under the terms of the Grant Agreement - Checking details of previous funding received.
Type of data
- Identity
- Contact
- Financial
- Transaction
- Communications
Lawful basis for processing
- Contractual obligation
- Legal obligation
- Legitimate interests
4.3.3. Exercising our functions or providing advice
Purpose/activity
- To exercise our functions or provide advice in respect of our functions under the
FiPL programme. - This includes monitoring, evaluation, and publicity activities as required by Defra
and described in the Grant Agreement.
Type of data
- Identity
- Contact
- Financial
Lawful basis for processing
- Legal obligation
- Contractual obligation
- Performance a public task
4.3.4. The use of Legitimate interests as lawful basis for processing
We have found that we have legitimate interests in using your personal data for the following purposes:
- 4.3.2 Processing your application (to keep our records updated and to study how customers use our products/services). We have considered that the processing is necessary, that there isn’t a less intrusive alternative, and that your interests, rights, and freedoms don’t outweigh our legitimate interests.
4.4. If you fail to provide personal information
Where we need to collect personal data by law, or under the terms of a contract or grant agreement we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with advice on FiPL or your application). In this case, we may be unable to process your funding application, but we will notify you at that time.
4.5. Automated decision-making
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.
We do not envisage that any decisions will be taken about you using automated means. However, we will notify you in writing if this position changes.
4.6. Disclosures of your personal data
Please see section 7, Disclosures of your personal data, in our General privacy notice, as this section supplements the general text.
In relation to your FiPL application, the following must be added:
4.6.1. Why might we share your personal data with third parties?
We may share your personal information with third parties
- where required by law,
- where it is necessary to administer the working relationship with you, or
- where we have another legitimate interest in doing so.
4.6.2. Third-party service providers
Your personal data may be stored in ICT systems hosted externally, where use of these systems is necessary to administer your FiPL application.
The service providers are data processors as defined under the UK GDPR and are required to maintain the security of your personal data and process it in accordance with our policies and the law.
We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.
4.6.3. Data sharing obligations specific to the FiPL programme
The LDNPA has an obligation to use your personal data to comply with Defra’s monitoring, evaluation, and publicity requirements.
The publicity requirements include annual publication of successful grants on our website. We are also encouraged to publish FiPL success stories on other public channels, such as our website, newsletters, and social media.
4.7. For how long will we use your personal data?
Please see section 10, Data retention, in our General privacy notice, as this section supplements the general text.
In relation to your FiPL application, the following must be added:
We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including satisfying any legal, accounting, or reporting requirements.
