How we use your information
Under GDPR, we have a legal duty to protect any personal information we collect from you. We use leading technologies and encryption software to safeguard your data, and keep strict security standards to prevent any unauthorised access to it.
We do not pass on your details to any third party or other government department.
Under GDPR, you have rights as an individual which you can exercise in relation to the information we hold about you. These are:
- a right of access to a copy of the information comprised in their personal data
- a right to object to processing that is likely to cause or is causing damage or distress
- a right to prevent processing for direct marketing
- a right to object to decisions being taken by automated means;
- a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed, and
- a right to claim compensation for damages caused by a breach of the act.
You can read more about these rights here.
Visitors to our websites
When someone visits www.gov.wales we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in an anonymous way which does not identify anyone individually. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be open about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site. For instance, we use language cookies to know what language you would like the web site displayed to you in, we also use YouTube cookies to embed videos in pages and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve the navigation and content to better meet people’s needs. The information collected by the Welsh Government includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally. The cookies we use on our site are:
|Language version||langPrefWAG||This cookie is created by the content management system and is essential for the site to display to correct language version of the site.||When you close your browser|
|Session Tracking||JSessionID||To track a session when cookies are disabled. This allows the browser to preserve your session.||At end of session|
|GoogleAnalytics||_ga||This cookie is used to find out how visitors use our site. We use the information to help us improve the site. The cookie collects information in an anonymous form, including demographic information, the number of visitors to the site, whether they have visited before and the pages they visit.||2 years|
|These cookies are essential for the display of YouTube videos on our site.||8 months|
|YouTube||use_hitbox||At end of session|
Web browsers allow some control of cookies through browser settings. To find out more about cookies and how to manage them, visit www.allaboutcookies.org.
What information do we collect?
Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
This site, from time to time, links to SurveyMonkey forms for data collection. This data is processed in the US and its handling satisfies the provisions of GDPR.
Your interaction with this website
We collect 2 kinds of electronic information direct from visitors to this website; feedback and email subscription details.
Our website search and decision notice search is powered by a Google Search Appliance (GSA). Search queries and results are logged anonymously to help us improve our website and search functionality. No user-specific data is collected by either Welsh Government or any third party.
Consultations and online survey tools
Some of our sites use Wufoo forms to collect information from users. Wufoo is a subsidiary of Survey Monkey, who store the data collected in the US, but follow our instruction and do not distribute to any third parties. Their statement on GDPR can be found here.
Please note: all data gathered is reviewed after a period of 5 years.
People who contact us via social media
We use a third party provider, Hootsuite to manage our social media interactions.
If you send us a private or direct message via social media the message will be stored by Hootsuite for three months. It will not be shared with any other organisations.
People who email us
We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with government. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
Some features of Welsh Government websites require registration. The registration information we require as mandatory for registration is your email address. This data is stored in the US but its handling satisfies the provisions of GDPR as confirmed here. This information is stored until such time as you choose to delete your account.
You can change your registration preferences, e-mail address and login details through the website at any time. If you are no longer interested in receiving Welsh Government newsletters you can delete your account from within the preferences page of your account.
Complaints or queries
Welsh Government tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
Links to other websites
How to contact us
Data Protection Officer
We welcome your feedback. If you contact us asking for information, we may need to contact other government departments to find that information. If your question is technical, we may need to pass it to our technology suppliers.
We do not pass on any of your personal information when dealing with your enquiry, unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit purposes.
If you have any further questions about how your data will be used by the Welsh Government, please write to us using the details below.
The Welsh Government’s Data Protection Officer can be contacted at:
Data Protection Officer