Views on sustainability risk assessment survey: privacy notice

Personal data is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.

You will have received or otherwise been directed towards the survey as follows:

• The Welsh Government sent you the survey link via email, we hold your contact details because you have previously contributed to other areas of work in the Policy Team and the survey links back to this work
• You followed the link to the survey on the monthly Newsletter, the Knowledge Hub or via one of our social media channels.

This survey does not require the collection of any personal data from you. However, we would like to know which Public Sector Organisations are using the SRA and what peoples own views are of using it. You are not required to do so to respond to the survey and if you do not provide your contact details your responses will be completely anonymous.

If you choose to provide additional personal data as part of the survey we will not identify you from, or link your identity to, the responses you provide. If you raise a query or complaint and provide personal data requesting a response, the researcher will forward the request only to the relevant official and subsequently delete it from the survey data.

The lawful basis for processing information in this data collection exercise is our public task; that is, exercising our official authority to undertake the core role and functions of the Welsh Government.

Participation is completely voluntary. Reviews such as this are important for the Welsh Government to improve the SRA for future use by the Public Sector in Wales.

Personal data provided to Welsh Government is held on secure servers, and for this project a folder has been created that has access restricted only to the immediate Commercial Procurement Policy Team. Your contact details and any personal data you choose to provide will be stored in this restricted folder.

When conducting surveys, the Welsh Government use a survey software programme called Smart Survey. We have ensured that Smart Survey is UK GDPR compliant and meets our expectations in terms of the security of any data collected via the software (e.g. all data is processed within the EEA).

The survey does not require any personal data to be provided but if you do provide contact details then we will keep those details until 1st July 2022.

The Welsh Government will retain contact details it already holds, such as registration on Sell2Wales, according to the privacy notices issued for those purposes.

Under UK GDPR, you have the following rights in relation to the personal information you provide as part of this review, specifically you have the right:

• To access a copy of your own data
• For us to rectify inaccuracies in that data
• To object to or restrict processing (in certain circumstances)
• For your data to be ‘erased’ (in certain circumstances), and
• To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.

The contact details for the Information Commissioner’s Office are:

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 01625 545 745 or 0303 123 1113.

Information Commissioner’s Office website

If you have any further questions about how the data provided as part of this survey will be used by the Welsh Government or wish to exercise your rights using the General Data Protection Regulation, please contact:

Name: Commercial Procurement - Policy and Delivery Team
E-mail: CommercialPolicy@gov.wales
Telephone number: 0300 025 5642

The Welsh Government’s Data Protection Officer can be contacted at:

Welsh Government, Cathays Park, Cardiff, CF10 3NQ,
Email: DataProtectionOfficer@gov.wales.