The Welsh Government has established a team of Disabled People’s Employment Champions (DPECs). One of the key roles of the DPECs is to provide advice and support to employers on matters relating to the recruitment, retention and progression of disabled workers.
To conduct this work the Welsh Government will record and store the following personal information:
- name of organisation
- name of key contact at organisation
- email address of key contact
- business address of key contact
- telephone and/or mobile numbers of key contacts
- organisational/admin email address and/or contact number
- business sector
- business size
The Welsh Government is the data controller for this work. The Welsh Government will not publish or improperly disclose personal information without consent. All personal information held by the Welsh Government within the scope of this Privacy Notice will be used for work related to the DPECs.
What personal data do we hold and where do we get this information?
Personal data is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.
What is the lawful basis for using your data?
The lawful basis for processing information in this data collection exercise is our public task; that is, exercising our official authority to undertake the core role and functions of the Welsh Government.
Holding this data is important to enable the Welsh Government to coordinate activity of the DPECs for related purposes. Engaging with the DPECs is voluntary. If you no longer wish to receive any communications from the DPECs and related matters, please contact the DPECs and DPEC@gov.wales who will ensure you are removed from relevant distribution lists.
How secure is your personal data?
Personal data provided to Welsh Government is held on secure servers. When conducting surveys, the Welsh Government use a survey software programme called SmartSurvey. We have ensured that SmartSurvey is UK GDPR compliant and meets our expectations in terms of the security of any data collected via the software (e.g. all data is processed within the UK).
How long do we keep your personal data?
We will review the above information on an annual basis and retain the information in accordance with the Welsh Government retention policy. If you have asked not to receive information on, or contact from the DPECs, your personal data will be deleted within 7 business days from the date on which we responded to your request.
Individual rights Further Information
Under UK GDPR, you have the following rights in relation to the personal information you provide as part of this work, specifically you have the right:
- To access a copy of your own data.
- For us to rectify inaccuracies in that data.
- To object to or restrict processing (in certain circumstances).
- For your data to be ‘erased’ (in certain circumstances).
- To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.
The contact details for the Information Commissioner’s Office are: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 01625 545 745 or 0303 123 1113. Website: www.ico.gov.uk
Further Information
If you have any further questions about how your data will be used in relation to the DPECs, wish to exercise your rights using the General Data Protection Regulation, or if you have other related queries, please contact: DPEC@gov.wales
The Welsh Government’s Data Protection Officer can be contacted at: Welsh Government, Cathays Park, Cardiff, CF10 3NQ, Email: DataProtectionOfficer@gov.wales.