Procurement Workforce Survey: privacy notice

The Welsh Government support multiple programmes of wider procurement capability and capacity development including the use of surveys as a means of targeted intervention to aid workforce capability and capacity challenges in the short, medium, and long term.

Welsh Government is the data controller and data processor for all data collected by the team. A data controller determines how and why personal data can be processed.

This privacy notice gives you general information on how we handle your data when completing the Procurement Workforce Survey.

Personal data is defined under the General Data Protection Regulation (GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier.’

Welsh Government have produced a Procurement Workforce Survey to aid our understanding of capacity and capability challenges Welsh public sector organisations face. This survey is designed to help Welsh Government understand the public sector procurement workforce to help inform strategy development, prioritisation and measure the success of our wider programmes.

By completing this survey you agree to providing personal data. Respondents will be asked to provide their name, organisation and contact details, by providing your personal information you are consenting to us using your information to obtain further feedback in relation to the information you have provided.

The survey software ‘Smart Survey’ used by the Welsh Government allows respondents to save and return to a survey, so they do not have to complete a survey in one go. If you select ‘save and continue later’, the software will ask your name and email address so that a unique link is generated and emailed to you so you can go back and complete the survey at a convenient time. This information is only retained by the software so you can re-access the survey.  It is never made available as part of your survey response and is inaccessible to the team. This information is then deleted in line with the software’s data retention procedures.

Welsh Government will have access to all responses obtained via the Procurement Workforce Survey. Including the personal data that you provide. The data obtained will be used for internal reporting and measurement along with external reporting when sharing with Welsh public procurement stakeholders. Where possible the Welsh Government will remove your personal data when reporting to wider audiences. Organisation specific information will be retained for internal use only and Sector specific information used where necessary for reporting. 

Under Article 6 of UK General Data Protection Regulations The lawful basis of processing information is Legitimate Interest. That is by processing your personal data, the Welsh Government will be able inform and prioritise strategies to aid the capability and capacity issues that face the Welsh public sector procurement workforce.

Personally identifiable information shared by respondents will be held by the Welsh Government’s Commercial Procurement Capability Team and is only accessed by staff members within this division. Any information provided is stored on a protected area of iShare (Welsh Government’s internal document management system).

We will keep any personal identifiable information for up to 5 years. After a period of 5 years the data held on file will be reviewed. If the data is no longer being used, it will be redacted from our records. Responses provided that do not constitute as personally identifiable information will be held on record indefinitely.

Under GDPR, you have the following rights in relation to the personal information you provide through any of the research conducted through the Employee Research Programme, specifically you have the right:

• To access a copy of your own data.
• For us to rectify inaccuracies in that data.
• To object to or restrict processing (in certain circumstances).
• For your data to be ‘erased’ (in certain circumstances); and
• To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.

If you have any further questions about how the data provided as part of this work will be used by the Welsh Government or wish to exercise your rights using the General Data Protection Regulation, please contact:

The Welsh Government’s Data Protection Officer can be contacted at: