The Council Climate Action Scorecards website is run by mySociety (a registered charity in England and Wales, 1076346) on behalf of Climate Emergency UK CIC (company number 11823392). mySociety is the controller for the personal information processed on this site, unless otherwise stated.
When you visit this website, we collect and log some information about your visit, in order to analyse and fix problems with the site. Our webserver logs collect information about requests, including your IP address, data submitted (such as search terms submitted to the in-site search), request date and time, page requested, browser version and referrer. We routinely keep this information for 28 days. Note that in normal circumstances, this data is infrequently accessed by a human, and when it is, they are likely to be assessing it in bulk, in order to understand an issue with the site, rather than at a granular level of individual users.
We use Google Analytics software to collect non-personally-identifiable information about how you use the site. We do this to help make sure the site is meeting the needs of its users and to help us make improvements. We do not allow Google Analytics to store cookies on your device. IP addresses are masked (only a portion is stored) and personal information is only reported in aggregate. We do not allow Google to use or share our analytics data for any purpose besides providing us with analytics information.
We collect and display the first name and last initial of volunteers, on our About page. Volunteers were given an opt-out choice on this before publication, and any who withdrew consent did not have their names included. Consent can still be withdrawn at any time.
When you visit our site, we store data about your visit under the legal basis of GDPR 6(1)(f) Legitimate interests. We believe that our processing of our users’ data is as they would expect when they use our service, and we only store the bare minimum of data we require in order to monitor and diagnose issues on the site.
Volunteers’ names are stored and displayed under the legal basis of GDPR 6(1)(a) Consent. Volunteers are given the option to prevent their name being displayed before publication, and can later withdraw consent at any time by contacting us to request this.
Data collected in our webserver logs is retained for 28 days. Anonymised data collected by Google Analytics is retained indefinitely.
Volunteer names on the About page are stored indefinitely, unless we are requested to remove them.
Under exceptional circumstances (for example, when diagnosing abuse, or technical issues with the site), we may share the data we collect with our partners, Climate Emergency UK.
Aside from this, we don’t share personal data with any other organisation, unless you give us permission to do so, or we have to do so for legal or compliance reasons.
You may contact us at any time to ask to see what personal data we hold about you. Please contact us to request this.
You may request that we destroy the personal data that we hold about you. Please contact us to request this.
You have the right to object to our processing of your personal data. Please contact us to request this.
If you believe that we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can report a concern here (but do contact us first, so that we can try and help).