UK General Data Protection Regulation (UK GDPR)
The Welsh Government will be data controller for Welsh Government consultations and for any personal data you provide as part of your response to the consultation.
Welsh Ministers have statutory powers they will rely on to process this personal data which will enable them to make informed decisions about how they exercise their public functions. The lawful basis for processing information in this data collection exercise is our public task; that is, exercising our official authority to undertake the core role and functions of the Welsh Government. (Art 6(1)(e))
Any response you send us will be seen in full by Welsh Government staff dealing with the issues which this consultation is about or planning future consultations. In the case of joint consultations this may also include other public authorities. Where the Welsh Government undertakes further analysis of consultation responses then this work may be commissioned to be carried out by an accredited third party (e.g. a research organisation or a consultancy company). Any such work will only be undertaken under contract. Welsh Government’s standard terms and conditions for such contracts set out strict requirements for the processing and safekeeping of personal data.
In order to show that the consultation was carried out properly, the Welsh Government intends to publish a summary of the responses to this document. We may also publish responses in full. We publish responses anonymously and your name and contact details will not be included. If you would like your name or other details published alongside your response, please let us know when you submit your response, and we will include them.
You should also be aware of our responsibilities under Freedom of Information legislation and that the Welsh Government may be under a legal obligation to disclose some information.
If your details are published as part of the consultation response, then these published reports will be retained indefinitely. Any of your data held otherwise by Welsh Government will be kept for no more than three years.
Your rights
Under the data protection legislation, you have the right:
· to be informed of the personal data held about you and to access it
· to require us to rectify inaccuracies in that data
· to (in certain circumstances) object to or restrict processing
· for (in certain circumstances) your data to be ‘erased’
· to (in certain circumstances) data portability
· to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights under the UK GDPR, please see contact details below:
Data Protection Officer:
Welsh Government
Cathays Park
Cardiff
CF10 3NQ
e-mail: dataprotectionofficer@gov.wales
The contact details for the Information Commissioner’s Office are:
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: https://ico.org.uk/