Your privacy is important to Business Wales. This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
Please take a moment to familiarise yourself with our privacy practices.
BOSS collects certain information or data (such as that listed below) about individuals where they use the boss.businesswales.gov.wales/ and businesswales.gov.wales/boss website or other websites operated by or on behalf of BOSS and Business Wales (together, the “Websites”).
Why we collect and process the data collected
The Welsh Government will be the Data Controller for the personal data you provide in accessing Business Wales support.
The legal basis for processing your personal data is section 6(1)(e) of the UK GDPR (lawfulness of processing). This processing is necessary for the performance of our public task to identify you and provide the most appropriate business advice and information.
We will process the following personal and business data:
· Name
· email address
· contact details
· county
· business stage
Failure to provide us with this information may preclude you from accessing the service.
Marketing and research
We may contact you to request your permission to use your business details for Business Wales marketing activities. The Welsh Government will not use your data without your consent for this particular purpose.
Please note that research organisations / evaluators will only contact a sample of individuals and/or enterprises. If you are contacted to take part in any research/evaluation about your experience on the project the purpose of the interview or survey will be explained to you and you will be given the option to say yes or no to taking part. Your contact details will only be used for approved research and will be deleted once this approved research is complete.
Who will have access to your data?
Users signed up to BOSS only
Welsh Government will collect and store your data.
Your data will be stored on a Welsh Government secure IT System and the secure IT systems of our contractors (including third parties) delivering the service to you.
It is collected and shared with the following organisations for the purposes previously listed:
- Approved social research organisations, to carry out research, analysis or equal opportunities monitoring of the service.
- Welsh Government support service teams and its system technical administrators who support the IT system. System technical administrators will not use your details in any way.
- Wales Audit Office or those acting on their behalf, or other appropriate auditors of the Business Wales Services.
Users signed up to the Business Wales service data
Welsh Government, Business Wales and its contractors (including third parties) will collect and store your data.
Your data will be stored on a Welsh Government secure IT System and the secure IT systems of our contractors (including third parties) delivering the service to you.
It is collected and shared with the following organisations for the purposes previously listed:
- Approved social research organisations, to carry out research, analysis or equal opportunities monitoring of the service.
- Welsh Government support service teams and its system technical administrators who support the IT system. System technical administrators will not use your details in any way.
- Wales Audit Office or those acting on their behalf, or other appropriate auditors of the Business Wales Services.
Users signed up to Farming Connect programme data
The data is accessible to organisations contracted by Welsh Government to solely deliver the Farming Connect Programme:
- Welsh Government Climate Change and Rural Affairs Group (CCRA) internal teams.
- Menter a Busnes and their selected third-party sub-contractors.
- Lantra and their selected third-party sub-contractors.
The personal data on this form will be accessible by Audit teams, Welsh Government Internal Audit, Welsh Audit Office; the information will only be used to verify the administration of the Farming Connect Programme.
How long do we keep it?
Users signed up to BOSS only
If data is associated to EU funded support, it may be kept until 2030
All other data may be kept for 2 years for the purpose of improvements to internal quality and training.
Users signed up to the Business Wales service data
Welsh Government will keep your personal data for a minimum of 10 years after the project ends for auditing purposes, after which time it will be securely destroyed.
Users signed up to Farming Connect programme data
We will hold your personal information for 7 years, after which time we will ensure that it is securely disposed of in line with the Welsh Government Retention & Disposal Policy.
The Farming Connect programme is due to be reviewed in 2025. If it is replaced by another Welsh Government programme that delivers support services to the farming industry, we will continue to process your personal data in the way established in this Privacy Notice (where it is appropriate to do so) to enable us to continue to support you and your business.
What are your rights?
Under the data protection legislation, you have the right:
· to access the personal data the Welsh Government holds on you;
· require us to rectify inaccuracies in that data
· to (in certain circumstances) object to or restrict processing
· for (in certain circumstances) your data to be ‘erased’
· to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
The contact details for the Information Commissioner’s Office are:
Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
For help with any of the above rights then please contact our Business Wales Helpline 03000 6 03000 or use the contact us form https://businesswales.gov.wales/contact-us
The Freedom of Information Act and your Information
The Freedom of Information Act 2000 and the Environmental Information Regulations 2004 allow the public to ask to see information held by public bodies, including the Welsh Government. The information you provide us may be the subject of a freedom of information request by another member of the public. We would consult with you to seek your views before responding to such a request.
Changes to this policy
The Welsh Government may make changes to this privacy policy at any time. Changes will be posted here and are effective immediately. When changes occur to this policy you will need to review and agree to them before you continue using BOSS.
For further information on your information rights
Postal address:
Data Protection Officer
Welsh Government
Cathays Park
CARDIFF
CF10 3NQ
Email address: DataProtectionOfficer@gov.wales