Essential Website Maintenance – Thursday 9th January 2020

We will be carrying out essential website maintenance in the afternoon which will affect some functionality. We apologise in advance for any inconvenience the work may cause and will do all we can to keep disruption to an absolute minimum.
Home Council Access to Information Data Protection Complaints

Data Protection Complaints


Summary (optional)
start content

Conwy County Borough Council collects, processes and stores a wide range of information, including some personal information, to deliver services to benefit you.

We are responsible for managing the information we hold and recognise that this information is important to you.  We take our responsibilities seriously and will use personal information fairly, correctly and safely in line with the legal requirements set out by current Data Protection legislation. 

Under the UK-GDPR and Data Protection Act (2018), organisations that collect and use personal information have to follow rules of good practice for handling such data. The legislation also gives rights to individuals whose information they keep. These rights include the right to complain should you believe your personal data has been processed inappropriately.

What you can complain about

You can complain to us if you have been denied any of your rights under the Data Protection Act. This includes your right to see the information an organisation holds about you, or if the information about you is used, held or disclosed:

  • unfairly
  • for a reason that is not the one it was collected for
  • without proper security

Or, if the information about you is:

  • inadequate, irrelevant or excessive
  • inaccurate or out of date
  • kept for longer than is necessary

You can also complain if you feel we have not provided you with all relevant information as part of a subject access request.

How to make a complaint about data protection

Make it clear that the matter concerns data protection and provide as much detail as you can. Tell us your name and how to contact you.

You can:

What happens next

Your complaint will be treated confidentially, and we will acknowledge receipt within 30 days. We will carry out a full investigation and let you know the outcome of our decision. We will aim to respond promptly but, in any case, within one month. Where it is apparent that determination of the complaint and any subsequent response will take longer than the timescales referred to (for example due to the complexity or nature of the particular case), you will be informed and provided with an explanation for the delay.

If you are not happy with our response

If you are not satisfied with our response, you may wish to refer it to the Information Commission.

end content