Business Wales Service – Initial Client Enquiry Privacy Notice

Your privacy is important to Business Wales. This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

Please take a moment to familiarise yourself with our privacy practices.

1. Why we collect and process the data collected

The Welsh Government will be the Data Controller for the personal and business data you provide in accessing Business Wales support. 
The legal basis for processing your personal data is section 6(1)(e) of the UK GDPR (lawfulness of processing). This processing is necessary for the performance of our public task to identify you and provide the most appropriate business advice and information.
 
2. Who will have access to your data?

Business Wales and its third-party service contractors will collect and store your data. 

Your data will be stored on a Welsh Government secure IT System and the secure IT systems of our third-party service contractors delivering the service to you.

It is collected and shared with the following organisations for the purposes previously listed:

• Approved social research organisations, to carry out research, analysis or equal opportunities monitoring of the service.
• Welsh Government support service teams and its system technical administrators who support the IT system.  System technical administrators will not use your details in any way.
• Wales Audit Office or those acting on their behalf, or other appropriate auditors of the Business Wales Services.

3. How long do we keep it?

Welsh Government will keep your personal data for a minimum of up to 3 years as part of our ongoing training and quality reviews.

4. What are your rights?

Under the data protection legislation, you have the right:

• to access the personal data the Welsh Government holds on you;
• require us to rectify inaccuracies in that data
• to (in certain circumstances) object to or restrict processing
• for (in certain circumstances) your data to be ‘erased’
• to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection

The contact details for the Information Commissioner’s Office are:
Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 01625 545 745 or 0303 123 1113

Website: www.ico.org.uk

For help with any of the above rights then please contact our Business Wales Helpline 03000 6 03000, rydym yn croesawu galwadau’n Gymraeg / we welcome calls in Welsh, or use the contact us form https://businesswales.gov.wales/contact-us

5. The Freedom of Information Act and your Information

The Freedom of Information Act 2000 and the Environmental Information Regulations 2004 allow the public to ask to see information held by public bodies, including the Welsh Government. The information you provide us may be the subject of a freedom of information request by another member of the public. We would consult with you to seek your views before responding to such a request.

6. Changes to this policy

The Welsh Government may make changes to this privacy policy at any time. Changes will be posted here and are effective immediately. When changes occur to this policy we will contact you on the email address we have recorded in your account to enable you to review the new version.

For further information on your information rights

Postal address:
Data Protection Officer
Welsh Government
Cathays Park
CARDIFF
CF10 3NQ

Email address: DataProtectionOfficer@gov.wales