How we will store and process your details under the General Data Protection Regulation (Ukraine support offers).
In order to provide support to Ukrainian citizens fleeing the conflict in Ukraine, the Welsh Government will be processing information about individuals and organisations who have offered support for those arriving, including accommodation. The data will be collected from multiple sources, including directly from individuals and organisations.
The Welsh Government will be the data controller for the personal data it collects. We will process this data in pursuance of our public task and official authority vested in us.
The data will be processed for the purposes of developing and managing essential support services offered to Ukrainian citizens entering the UK under the Welsh Government sponsorship scheme.
We will share necessary information with third parties, such as public sector partners, including local authorities in Wales. Where necessary, we will also share personal information with charitable and other private sector partners who will be delivering services on our behalf. We may also share data with UK Government. We may share information with individual Ukrainian citizens or people acting as their sponsors in Wales so that they can access the support being offered. We will only share personal data insofar as it is necessary to deliver the support to Ukrainian citizens, or where we are otherwise required to by law.
Personal data provided to the Welsh Government is stored on secure servers. Personal, identifiable data shared with our partners will only be transferred using accredited secure transfer systems. Only data absolutely necessary for the operation of the sponsorship support scheme will be shared.
Personal identifiable data held by the Welsh Government will be retained for the duration of the Welsh Government sponsorship scheme, and for a period of at least six months afterwards. Data may be retained for longer periods, including by our public sector partners, where there is a statutory obligation or ongoing requirement to do so. The data will be securely destroyed once it is determined that it is no longer required.
Under GDPR you have the following rights in relation to the personal information you provide us or that we hold on you. Specifically, you have the right:
- to access a copy of your own data
- for us to rectify inaccuracies in that data
- to object to or restrict processing (in certain circumstances)
- for your data to be ‘erased’ (in certain circumstances)
- to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
The contact details for the Information Commissioner’s Office are:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone: 01625 545 725 or 0303 123 1113
Information Commissioner’s Office website
Further information
If you have any further questions about how the data provided will be used by the Welsh Government, or wish to exercise your rights using the General Data Protection Regulation, please contact the Welsh Government’s Data Protection Officer at:
Welsh Government
Cathays Park
Cardiff
CF10 3NQ