This privacy notice refers specifically to the information the council needs to set up and manage Direct Debits.

It should be read alongside the council’s main privacy notice.

Who is responsible for your information?

Chesterfield Borough Council is the data controller for the personal information collected.

Some council services use a third party processor to manage your Direct Debit. In this case, the third party is acting as a data processor on behalf of the Chesterfield Borough Council. This means that the council determines the means and purpose for the processing of you data, and controls are in place to protect your information.

Purpose of processing your personal data

We need to process your personal information in order to setup a Direct Debit for you, to monitor ongoing payments, and to cancel the Direct Debit as necessary.

Categories of personal data and lawful basis

In order to provide this service, we may need to process some or all of the following categories of personal information:

• contact details
• bank details (including account number and sort code)
• your payment history

Under data protection legislation, this processing is permitted because it forms part of the performance of a contract.

Who we share your personal data with

BACS Payment Schemes Limited (BACS) manages the Direct Debit payment scheme. Your Direct Debit mandate will be passed to BACS to organise the payments (in conjunction with your bank). BACS are the data controller for your information once it’s passed to them. This data transfer will either be done by the council or by a third party processor if they are used. You can find more information about how BACS handle your information and the Direct Debit scheme on BACS Direct Debit privacy notice.

How we collect your data

We collect information about you from the following sources:

• information you provide to us
• confirmation and reports we receive about your Direct Debit payments – either directly from BACS or from a third party processor

Further information

Please get in touch if you would like more information about how the council processes your personal data:

• contact the council's data protection officer