Amazon Alexa skill privacy notice
This privacy notice applies to anyone who is using Lichfield District Council’s skills on the Amazon Alexa platform.
Background
Lichfield District Council uses the Amazon Alexa skill technology to allow access to information such as the next date of a rubbish collection.
The personal data we collect from you to facilitate this skill includes:
- Address
The personal data the skill will collect from you, in order to function properly, will include:
- Address
The personal data that will be transmitted by the skill from your device (e.g. Amazon Echo) will include:
- Address
The legal basis for processing this data is Public Task.
The data may be recorded for the purpose of locating your property. The following information will be collected:
- Address
The legal basis for processing this data is Consent.
As both the transmission and recording of data can reveal information about them, the following special category data may also be collected:
- None
The legal basis for recording the data is Consent.
Why we need your data
We require your data in order to enable the skill to be able to locate the correct information.
What we do with your data
To be able to process your query your address will be shared with Ordnance Survey Data Hub to retrieve a UPRN (Unique Property Reference Number). This is required in order to be able to return information on your upcoming waste collections from Lichfield's waste management system, with which your address will also be shared.
The UPRN for an address is already publicly available from sites such as find my address.
Amazon may also access and analyse your use of Lichfield Skills and to the extent that any of that information is personal data, Amazon are an independent data controller of that personal data. You can find out more by reading Amazon’s Privacy Notice and you can see more details in Amazon's Terms of Use.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we’re required to do so by law – for example, by court order, or to prevent fraud or other crime.
Tools used (data processors)
- Amazon web services
- Ordnance Survey
- Bartec Waste Management
- Microsoft Power Automate
Activity processed by the data processor
Amazon web services collects the address from your device.
Ordnance Survey converts the address to a UPRN.
Bartec Waste Management holds the list of UPRNs and future waste collection dates.
Microsoft Power Automate transports the data between the other data processors.
How long we keep your data
We will only keep your personal data for as long as:
- the law requires us to
- we need for the purposes listed above
This means that we will only hold your address for a maximum of 28 days.
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.
Your personal data may be transferred outside the European Economic Area (EEA) while being processed by Lichfield District Council and/or the data processors. If this happens, we’ll make sure you’re given the same level of technical and legal protection as you are within the EEA.
Who we share your data with
In some cases we might share the personal data defined in this privacy notice with external organisations, such as data processors who provide us with online surveys and IT software.
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We set up systems and processes to prevent unauthorised access to or disclosure of the data we collect about you – for example, we protect your data using varying levels of encryption. All third parties that process personal data for Lichfield District Council are required to keep that data secure.
Your rights
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data - this copy will be provided in a structured, commonly used and machine-readable format
- that anything inaccurate in your personal data is corrected immediately
- You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that we only process your data in certain circumstances
If you have any of these requests, get in contact with our Data Protection Officer - you can find their contact details below.
If you gave your consent for us to collect and process your data, you have the right to:
- withdraw your consent - this can be done at any time
- request a copy of your personal data - this copy will be provided in a structured, commonly used and machine-readable format
The data controller is Lichfield District Council – a data controller determines how and why personal data can be processed. Read the Lichfield District Council’s entry in the Data Protection Public Register for more information.
Changes to this notice
We may change this privacy notice. When we make changes to this notice, the ‘last updated’ date at the top of this page will also change. Any changes to this privacy notice will apply to you and your data immediately.
If these changes affect how your personal data is processed, we will take reasonable steps to make sure you know.
Questions and complaints
Contact the Data Protection Officer if you either:
- have any questions about anything in this document
- think that your personal data has been misused or mishandled
- want to make a subject access request (SARS)
Email: dpo@lichfielddc.gov.uk
You can also complain to the Information Commissioner, who is an independent regulator.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AFEmail: casework@ico.org.uk
Telephone: 0303 123 1113
Textphone: 01625 545860