NPALS Privacy Notice

We will use the information provided by you to provide an efficient library service under section 7 of the Museums and Libraries Act 1964. It may be necessary to share information held on our Library Management System with:

• Courier services - where a member has requested the transfer of goods, their address will be shared with a courier to enable the transfer.
• Nottingham City Council IT department – for the purposes of developing and maintaining NPALS Library Management system.

Your personal data will be shared only for the purposes of providing library services.

• NPALS group accounts require a minimum of one registered member per account.
• NPALS group accounts can have up to two members registered to each account.
• Information saved to an NPALS group account is visible to any members registered to that group account.
• Members may update their information at any time via their NPALS account.
• The information provided will be kept for the duration of membership, plus two years.
• Members may unsubscribe from the service at any time, by request.
• Membership will be retained unless otherwise requested.
• If requested, or due to inactivity (unused for two years), personal details will be erased, as long as there are no outstanding bills or items on loan.
• This data includes, but is not limited to, your name, address and e-mail; it also includes information about the items you have on loan and your loan history. 

If you do not want your information to be shared in this way, you have the right to ask for your details to be removed from the Library System. However, this will mean that you can no longer use the service.

The information provided by you may also be used for the purpose of any other function carried out by the Council.  Information about these functions and the legal basis on which information is used for them can be found here. The Data Controller is Nottingham City Council, Loxley House Station Street Nottingham NG23NG

The Data Protection Officer is Naomi Matthews. You can contact the data protection officer at the above address, or via email at data.protection@nottinghamcity.gov.uk

The General Data Protection Regulation 2016/679 provides for the following rights as prescribed by the legislation:

• A right to request a copy of your information (personal data stored by the NPALS Library management system appears on the associated membership account.)
• A right to request rectification of inaccurate personal data (personal data stored by the NPALS Library management system can be updated by members via their membership account)
• A right to request erasure of your data known as ‘the right to be forgotten’
• A right to in certain circumstances to request restriction of processing
• A right in certain circumstances to request portability of your data to another provider
• A right to object to processing of data in certain circumstances
• A right regarding automated decision making including profiling

Please note that if you are unhappy with a decision regarding the handling of your data you have the right to complain to the Information Commissioners Office at Wycliffe House Water Lane Wilmslow, Cheshire SK95AF and also see the Information Commissioners website.