This privacy notice sets out your rights and how we will use your personal data. It is carried out under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).

Goal

The purpose for which we process your personal data is to enable the public or specific groups of stakeholders to engage in a discussion on a particular policy issue and have their views heard by policy makers.

Data

We will process the following personal data: name and e-mail address to register you on the consultation platform.

Additional specific privacy notices will be provided to cover any further collection of personal data.

Our consulting platform provider will also collect your IP address. See their privacy notice.

Legal basis of processing

The legal basis for the processing of your personal data is:

• the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller – in this case, it allows the public or specific groups to stakeholders to engage in discussion on a particular policy issue, and have their views heard by policy makers

If sensitive personal data (special category) is processed

Sensitive personal data are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of identifying unique to a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person. If a consulting exercise involves the collection of personal data, there will be a specific privacy notice to cover this.

In case the listening platform is used to process sensitive personal data, then another risk assessment will be necessary. In this case, the legal basis for the processing of sensitive personal data will be:

• the processing is necessary for reasons of important public interest for the exercise of a function of the Crown, a minister of the Crown or a ministry; the exercise of a function conferred on a person by a legislative text; or the exercise of a function of either House of Parliament. The function is to consult on ministerial policies or proposals, or to obtain opinion data, in order to develop good and effective policies for and with those affected by them.
• the processing concerns data concerning ethnic origin, religious or philosophical beliefs, health, including disability or sexual orientation, and it is necessary for the purposes of identifying or checking the existence or absence of equality of opportunity or treatment between groups of persons with a view to promoting or maintaining that equality.

Recipients

Your personal data will be shared by us with our third party data processor who provides the consultation platform.

As your personal data will be stored on our IT infrastructure, it will also be shared with our data processors who provide messaging, management and document storage services.

Retention

We will retain your personal data for as long as the consultation platform is operational and/or as long as you continue to be involved in providing comments and ideas on government policy. If you ask to be deleted we will do so within 60 days, and if the platform ceases to be operational we will delete it within the standard Cabinet Office retention period.

your rights

You have the right to:

• request information about how your personal data is processed and request a copy of that personal data
• request that any inaccuracies in your personal data be rectified without delay
• request that any incomplete personal data be completed, including by means of a supplementary declaration
• request that your personal data be erased if there is no longer a reason for it to be processed
• request that the processing of your personal data be restricted in certain circumstances (for example, where the accuracy is disputed)
• object to the processing of your personal data where it is processed for direct marketing purposes
• object to the processing of your personal data

International transfers

As your personal data is stored on our IT infrastructure and shared with our data processors, it can be transferred and stored securely outside of the UK.

If this is the case, it will be subject to equivalent legal protection through an adequacy decision or the use of standard contractual clauses.

Complaints

If you believe that your personal data has been misused or mishandled, you can lodge a complaint with the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Any complaint to the Information Commissioner is without prejudice to your right to seek redress in court.

The controller of your personal data is the Cabinet Office. The contact details of the controller are:

Contact details for the data protection officer of the controller are [email protected]

The Data Protection Officer provides independent advice and oversight of the Cabinet Office’s use of personal information.