The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these must apply whenever you process personal data:
(A) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
(B) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
(C) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).
(D) Vital interests: the processing is necessary to protect someone’s life.
(E) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)
Tees Valley Museum Group information and the legal basis for processing:
Area of Organisation: Archives and Collections
Data Source: Enquiries
Type of data: Name, address, email; occasionally personal information relating to enquiry
Lawful basis for processing: A
Area of Organisation: Archives and Collections
Data Source: Items in collections
Type of data: Consortium partners collect this data and it is potentially shared within the Tees Valley Museums Group. Data collected covers all types of personal data. GDPR permits “the processing of personal data (inluding sensitive personal data) without consent, where necessary for archiving purposes in the public interest”, subject to appropriate safeguards.
Lawful basis for processing: E
Area of Organisation: Family Learning and Access
Data Source: Mailing lists
Type of data: Name, contact details
Lawful basis for processing: A
Area of Organisation: Surveys/questionnaires
Data Source: various; online, face to face, paper based
Type of data: Varies according to survey – at the moment we collect no identifiable personal data. In future information could cover; name, address, email, contact details, disability and access information.
Lawful basis for processing: A
Area of Organisation: Photos/videos/audio
Data Source: verbal consent andor standard forms
Type of data: Name, contact details
Lawful basis for processing: A
To find out more about the lawful basis for requesting your personal information, please contact:
teesvalleymuseums@stockton.gov.uk