Transparency data

Privacy Notice for GCS Connect

Published 25 June 2024

GCS Connect is a set of integrated services, including registration for GCS membership, single sign-on and a directory.

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).

Your data

Purpose

The purposes for which we are processing your personal data are:

• to register you as a member of the Government Communication Service (GCS)
• to register you on the GCS Directory
• to send you news, updates and with your agreement, participation in surveys
• to allow you to book onto events and training, and to view protected content on the GCS Website
• to provide access to GCS Connect
• to provide access to GCS Co-Pilot

The data

We will process the following personal data:

For individuals registering, joining the GCS Directory (previously known as the People Finder) or for publication of information on the website: name, email, telephone, mobile, role, job title, Civil Service grade, comms role, comms disciplines, government department, region

For individuals booking events, courses and training; viewing private content or requesting newsletters: name, grade, roles, email, organisation.

For accessing GCS-owned platforms: name, email, organisation, groups

For individuals using the GCS Co-Pilot: no personal data is collected or processed.

Special category data

Sensitive personal data is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

For individuals booking in-person learning events: accessibility requirements and dietary requirements.

Legal basis of processing

The legal basis for processing your personal data is that you have freely and explicitly given your consent.

The legal basis for processing your sensitive personal data is that you have freely and explicitly given your consent.

Recipients

Data which you place on GCS Directory or on the GCS website will be publicly available.

Any data shared with the GCS Co-Pilot may also be shared with the providers of our corporate IT and cloud data infrastructure.

Retention

If you are solely consuming GCS Connect products and services exclusive of Co-Pilot and GCS Advance then your data may be deleted earlier if not accessed at least once every 90 days.

Your data (name, email and completion status) will be kept by the expert, practitioner programme for 3 years and 6 years for the leader programme. However, certificates issued by GCS will be retained indefinitely. Any special category data will be kept for the duration of your participation on the programme (approximately 1 year).

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used and machine-readable format.

You have the right to withdraw consent to the processing of your personal data at any time

International transfers

If you sign up for newsletters or events, your data will be shared with our IT suppliers and it may be transferred and stored securely outside the UK and European Union. Where that is the case it will be subject to equivalent legal protection through either Standard Contractual Clauses with UK Addendum or adequacy via the UK-US Data privacy Framework.

Contact details

The data controller for your personal data is the Cabinet Office. The contact details for the data controller are:

Cabinet Office
70 Whitehall
London
SW1A 2AS

or 0207 276 1234, or gcs@cabinetoffice.gov.uk.

The contact details for the data controller’s Data Protection Officer are:

Stephen Jones
Data Protection Officer
Cabinet Office
70 Whitehall
London
SW1A 2AS

or dpo@cabinetoffice.gov.uk.

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

or 0303 123 1113, or casework@ico.org.uk. Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.