Before we provide financing to you, we undertake checks to prevent fraud and money laundering, and to verify your identity.

Introduction

We are the Welsh Ministers and our data protection officer can be contacted via Data.ProtectionOfficer@gov.wales.

You are an individual or an organisation. If you are an organisation, reference to ‘your’ includes your officers.

Before we provide financing, other services or enter into any contractual relationship we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity.  These checks require us to process personal data about you.

What we process and share

The data you have provided or we have collected from publicly available sources, which may include but is not limited to your:

  • name
  • date of birth
  • residential address and address history
  • contact details such as email address and telephone numbers
  • financial information
  • employment details
  • device identification including your IP address

may be shared with fraud prevention agencies if we suspect or detect fraud.

We, and fraud prevention agencies, may use this information, including any personal data, to prevent fraud and money laundering, and to verify your identity. We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.

Fraud prevention agencies can hold your personal data for different periods of time, depending on how that data is being used. Please contact them for more information. If you are considered to pose a fraud or money laundering risk, your data can be held by fraud prevention agencies for up to 6 years from its receipt.

Consequences of processing

If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the financing you have requested, or we may stop providing existing financing to you. If you would like to know more, please contact us for more information using the details provided above.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us for more information using the details provided above.

Data transfers

Some fraud prevention agencies may transfer your personal data outside of the European Economic Area. Where they do, they impose contractual obligations on the recipients of that data. Those obligations require the recipient to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.

Lawful processing

When we process your personal data, we do soon the basis that it is in the public interest to prevent fraud and money laundering, and to verify identities, in order to protect us and to comply with legislation that applies to us. Such processing is also a requirement of the financing you have requested.

Your rights

Your personal data is protected by legal rights, which include your rights to:

  • object to our processing of your personal data
  • request that your personal data is erased or corrected
  • request access to your personal data.

If you want to exercise any of these rights, please contact us using the details provided above.

If you are unhappy about how your personal data has been used please refer to our complaints policy. You may also complain to the Information Commissioner's Office (wales@ico.org.uk) which regulates the processing of personal data.