What personal data do we hold and where do we get this information?
Personal data is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.
You will have received or otherwise accessed a link to the survey for one or more of the following reasons:
Wales Council for Voluntary Action, your Local Nature Partnership coordinator, the National Lottery Heritage Fund or Keep Wales Tidy, as delivery partners for the Local Places for Nature programme (LPfN) hold your contact details (name and email address) because of your involvement in the programme. These delivery partners have agreed to share the survey link on the Welsh Government’s behalf.
The organisation or community group that you work or volunteer for hold your details (name and email address). They have received the survey link from one of the delivery partners, and have been asked to share this with their contacts who have been involved in a LPfN project. They have shared this survey link with you on the Welsh Government’s behalf.
An organisation or community group that you regularly engage with hold your contact details (name and email address) and has agreed to share the survey link with their contacts on the Welsh Government’s behalf. You have received this link because you have engaged with a LPfN funded project as part of project delivery or as a member of the wider community accessing the project site.
From a peer or colleague who has received the survey link to take part themselves – they have shared this with you as they know you have supported the delivery of a LPfN funded project or you are part of the wider community accessing the project site.
Wavehill have given you a paper slip with the survey link at a visit to a Local Places for Nature project site that you attended.
You have not been directly contacted. An LPfN delivery partner (WCVA, NLHF, KWT, LNP) or organisation involved in LPfN projects has promoted the survey on their social media channels and you have accessed the survey through this route.
Your participation is voluntary. There is no requirement to provide any personal data in response to the survey. Completing the survey does not capture your email address or IP address and so the responses will be anonymous. If you choose to provide additional personal data in open text questions, we will try not to identify you from, or link your identity to, the responses you provide.
What is the lawful basis for using your data?
The lawful basis for processing information in this data collection exercise is our public task; that is, exercising our official authority to undertake the core role and functions of the Welsh Government.
Participation is completely voluntary. Research studies such as this are important for the Welsh Government to collect information and actionable evidence about its ability to deliver government priorities.
How secure is your personal data?
Personal information provided to Wavehill is always stored on a secure server. The data can only be accessed by a limited number of researchers working on this project. Wavehill will only use this data for research purposes. Wavehill has cyber essentials certification.
When conducting surveys, Wavehill use a survey software programme called Qualtrics. We have ensured that Qualtrics is UK GDPR compliant and meets our expectations in terms of the security of any data collected via the software.
Wavehill has procedures to deal with any suspected data security breaches. If a suspected breach occurs, Wavehill will report this to the Welsh Government who will notify you and any applicable regulator where we are legally required to do so.
Wavehill will use the information gathered to produce a report that will be published on the Welsh Government website. This report will not include any information that could be used to identify individual participants.
How long do we keep your personal data?
Wavehill will hold personal data during the contract period, and any personal data will be deleted by Wavehill three months after the end of the contract.
Wavehill will provide an anonymised survey data set to the Welsh Government.
Individual rights
Under UK GDPR, you have the following rights in relation to the personal information you provide as part of this evaluation, you have the right:
To access a copy of your own data;
For us to rectify inaccuracies in that data;
To object to or restrict processing (in certain circumstances);
For your data to be ‘erased’ (in certain circumstances); and
To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.
The contact details for the Information Commissioner’s Office are: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 0303 123 1113. Website: www.ico.org.uk
Further Information
If you have any further questions about how the data provided as part of this study will be used by the Welsh Government or wish to exercise your rights using the UK General Data Protection Regulation, please contact:
Name: Aimee Krishan
E-mail address: Aimee.Krishan@gov.wales
Telephone number: 0300 025 9321
The Welsh Government’s Data Protection Officer can be contacted at:
Welsh Government, Cathays Park, Cardiff, CF10 3NQ, Email: DataProtectionOfficer@gov.wales.
Internal Ref: 790-24
Comentarios