Guidance

Privacy notice for Ukraine reconstruction registration of interest

Published 13 March 2024

Purpose

The Department for Business and Trade (DBT), herein referred to as the Department or DBT, is committed to protecting the privacy and security of your data. This notice describes how we collect and use your data in accordance with data protection legislation (UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018).

It is important that you read this privacy notice to be informed as to how and why we are processing your data.

What data we collect

We collect:

  • name
  • role in the company or organisation
  • company or organisation name
  • business email address (employee or business representative email address)
  • sector expertise

All personal data is handled under the Government Security handling for Official data and non-personal data may be retained according to the Public Records Act 1958.

Why we need your personal data

The data you provide will be processed by DBT and selected third parties to:

  • inform stakeholder of export opportunities relating to Ukraine Reconstruction

The legal basis for collecting this information and processing your data is covered under the department’s public task and function and carried out in accordance with the department’s 4 priority outcome, in particular:

  • supporting UK business to take full advantage of trade opportunities, including those arising from delivering free trade agreements and facilitating UK exports

How we share your personal data

The data collected will be shared with the following organisations for the purpose detailed above:

  • Foreign, Commonwealth and Development Office (FCDO)
  • Department for Transport

In addition, an aggregated analysis of data collected may be shared with the Information Commissioner’s Office (ICO) the Government Internal Audit Agency (GIAA), and the National Audit Office (NAO) for audit purposes.

We will also share your data if we are required to do so by law or regulation – for example, by court order, or to prevent fraud or other crime.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties not detailed in this notice unless legally obliged to do so

How long we keep your personal data

We will only retain your data for as long as it is required to fulfil the purpose for which we collected it.

How we protect your personal data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data. For example, we protect your data using password protection, limiting staff access to specifically ‘security cleared’ individuals. We also ensure any third parties we deal with keep all personal data they process on our behalf secure and in line with Data Protection legislation.

Accuracy

We take all reasonable steps to keep your personal data in our control and used on an on-going basis, accurate, complete, current and relevant, based on the most recent information available to us. We rely on you to keep us informed about any changes to your personal data in keeping with UK GDPR principles.

Your data subject rights and access to your personal data

You have the right to contact DBT and exercise the applicable data subject rights under UK GDPR.

Contacting us

If you have any questions about this privacy notice or how we handle your data or to exercise your right, you can also write to us at:

Data Protection Officer

Department for Business and Trade
Old Admiralty Building
Admiralty Place
London
SW1A 2DY

Contacting the Information Commissioner’s Office

You can also make a complaint to the Information Commissioner, who is an independent regulator. You can contact them at:

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email casework@ico.org.uk

Telephone 0303 123 1113

Textphone 01625 545860

Monday to Friday 9am to 4:30pm

Changes to this privacy notice

We reserve the right to update this privacy notice at any time and we will provide you with a new privacy notice if we make any substantial updates.

DBT is registered as a Data Controller under the UK GDPR and Data Protection Act 2018.