This notice was last updated on the 21 May 2018.
Your privacy is important to Welsh Government and in line with General Data Protection Regulations (GDPR) we have developed a Privacy Notice that covers why we collect and use your information. This privacy notice outlines how your personal data will be processed fairly and lawfully and in a transparent manner. Please take a moment to familiarize yourself with our privacy practices.
1. Why we collect and process the data collected
The Welsh Government will be the Data Controller for the personal data you provide on the Business Account System Public Interface Registration Form. In line with our public task and the authority vested in us as controller, the data will be used to identify you and provide the most appropriate support to you from our services.
The completion of this registration form will trigger an internal authentication process to confirm your identity against contact records on the Business Account System. On successful conclusion of the authentication you will be able to access relevant details of your support recorded on the Business Account System database. Access to the system also allows you to complete and submit online digital forms for business support and grant applications and enable you to digitally sign business support confirmation records.
2. Who will have access to your data:
- This data will be shared with organisations contracted by Welsh Government to solely deliver Welsh Government sponsored business support based on the information we have regarding your business.
-
The collected information will be accessible by Welsh Government support service teams and its system technical administrators who support the I.T. system. System technical administrators will not use your details in any way.
-
A portion of the collected registration data will be transferred to the Sign On Cymru database, this will allow the common data collected by other Welsh Government business support applications to be automatically updated with your latest information. Your information is only transferred to other Welsh Government business support applications if you sign up to them through the Sign On Cymru registration process. The Sign On Cymru database is not used for any communication purposes with you or other organisations.
3. How long are your details kept
Your details will be retained on our systems inline with Welsh Government retention policy as part of our ongoing training and quality reviews. If you receive support that is handled by an EU funded programme your information will be kept until 2030 as part of the regulations imposed by the European Union. Your information may also be retained for audit purposes.
4. Your rights
Under the data protection legislation, you have the right:
- to access the personal data the Welsh Government holds on you;
- require us to rectify inaccuracies in that data
- to (in certain circumstances) object to or restrict processing
- for (in certain circumstances) your data to be ‘erased’
- to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
The contact details for the Information Commissioner’s Office are:
Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 01625 545 745 or 0303 123 1113
Website: www.ico.org.uk
For help with any of the above rights then please contact our Business Wales Helpline 03000 6 03000, rydym yn croesawu galwadau’n Gymraeg / we welcome calls in Welsh, or use the contact us form https://businesswales.gov.wales/contact-us.
Rydym yn croesawu galwadau yn Gymraeg / We welcome calls in Welsh.
5. The Freedom of Information Act and your Information
The Freedom of Information Act 2000 and the Environmental Information Regulations 2004 allow the public to ask to see information held by public bodies, including the Welsh Government. The information you provide us may be the subject of a freedom of information request by another member of the public. We would consult with you to seek your views before responding to such a request.
6. Changes to this policy
The Welsh Government may make changes to this privacy policy at any time. Changes will be posted here and are effective immediately. When changes occur to this policy we will contact you on the email address we have recorded in your account to enable you to review the new version.
For further information on your information rights
Postal address:
Data Protection Officer
Welsh Government
Cathays Park
CARDIFF
CF10 3NQ
Email address: DataProtectionOfficer@gov.wales