Personal information charter

Privacy Notice – Centre for Data Ethics and Innovation

This privacy notice provides information about how the Centre for Data Ethics and Innovation handles your personal data in relation to their stakeholder engagement.

Important information and who we are

For the purposes of the Data Protection legislation, the Department for Digital, Culture, Media & Sport is the controller of the personal data you provide us with for the purposes of our stakeholder engagement.

We collect and process your personal data in accordance with applicable law. This includes, without limitation, the EU General Data Protection Regulation (2016/679) and the UK Data Protection Act 2018 together with other applicable UK and EU laws that regulate the collection, processing and privacy of your personal data.

We have appointed data protection officers (DPO) within the Department for Digital, Culture, Media & Sport who are responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

Centre for Data Ethics and Innovation;

E-mail: cdei@cdei.gov.uk

Personal data we collect

If you choose to provide your email address, we will collect and process the following information: Name, email address, organisation, your responses

How and why we will use personal data

We are processing personal data you provide to us to:

  • Analyse stakeholder perceptions of the CDEI
  • Create a ‘stakeholder list’ so that stakeholders can be updated on the CDEI’s outputs.

Your personal data will not be used for automated decision-making. This data will be shared with employees at the CDEI who may use this to determine which publications or updates from the CDEI might be of relevance to you, and may therefore contact you regarding the CDEI’s work.

International transfers

We will not transfer your personal data outside of the UK, unless it is required for access for employees within the Department for Digital, Culture, Media and Sport.

Data security

Your information is securely stored within our own secure network. We have put in place appropriate security measures to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

How long we keep your personal information

The CDEI will keep your email address up to a maximum of 25 years for the purposes of research such as to analyse changes in stakeholder perceptions.

Your data protection rights

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.
  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
  • You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at cdei@cdei.gov.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at the above contact details.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

Contents