Commercial Procurement Directorate: privacy notice

The Welsh Government Commercial Procurement Directorate holds personal contact details for representatives of organisations and individuals, to allow us to maintain contact with external stakeholders about procurement matters affecting the public sector in Wales.

The Welsh Government is the data controller for this information, and we process it in line with our public task and the official authority vested in us:

To contact stakeholders:

• Informing them of meetings, events and/or training in relation to procurement in Wales
• Sharing best practice
• Informing them of the Welsh Government’s procurement work and legislator changes
• Seeking feedback and engagement on procurement matters

Information will be shared across the Welsh Government, and where necessary, with third-party data processors.

Your data will be deleted within 2 years of the Commercial Procurement Directorate requiring it to fulfil its duties and responsibilities as a public body. Your data may be archived for longer periods if it is considered to be in the public interest.

If you no longer wish your details to remain on the database, please contact us on the email address below.

You have the right to:

• Access to the personal data that we are processing about you
• Require us to rectify inaccuracies in that data
• The right (in certain circumstances) to object to processing
• The right for your data to be ‘erased’ (where consent is the lawful basis)
• Lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.

For further information about the information which Welsh Government holds and its use, or if you wish to exercise your rights under the UK GDPR, please see contact details below:

Communications team: CommercialProcurement.Communications@gov.wales