This notice sets out how we will use your personal data. It also sets out your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).
The purpose(s) for which we are processing your personal data is:
- to conduct an Investigation into the First Minister of Wales’ actions and decisions in relation to Carl Sargeant’s departure from his post as Cabinet Secretary for Communities and Children and thereafter; and
- after the Investigation has been completed, to create a Welsh public record and to permanently preserve it under the terms of the Public Records Act 1958 (as amended).
If it is given to us as part of the Investigation, we will process the following personal data:
- your name, address, email address, phone number, date of birth, place of work, job title etc;
- your opinions about the subject matter of the Investigation; and
- other individuals’ opinions about you.
It is possible that sensitive personal data is given to us. Sensitive personal data is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
Legal basis of processing
The legal basis for processing your personal data is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice.
This Investigation has been set up under s71 of the Government of Wales Act 2006. This empowers the Welsh Ministers, First Minister or Counsel General to “do anything …which is calculated to facilitate, or is conducive or incidental to, the exercise of any of their other functions”.
The Welsh Government considers the relevant function is that contained in s48 of the 2006 Act. This states, among other things, that:
- The First Minister may, with the approval of Her Majesty, appoint Welsh Ministers from among the Assembly members…..
(3) A Welsh Minister appointed under this section may be removed from office by the First Minister.
The legal basis for processing sensitive personal data is that processing is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a Minister of the Crown, or a government department, i.e. to conduct the Investigation.
It might also be necessary for archiving purposes, scientific or historical research purposes or statistical purposes because it is in the public interest that a permanent record of the Investigation is created under the Public Records Act.
Your personal data may be shared by us with:
- Core Participants to the Investigation
- the National Assembly for Wales by tabling of the Investigator’s report (‘tabling’ is a technical phrase)
- the public by the publication of the report
- IT suppliers used by the Investigation.
If you share personal data with us under a condition of express confidentiality we will not share that data or a summary of that data without your explicit consent to do so.
A statement which explains the technologies and encryption software we will use to safeguard your data, our relationship with our IT suppliers and their policies on data protection can be found towards the end of this Privacy Notice.
Your personal data will be kept by us for the duration of the Investigation and for shortly afterwards. After the Investigator has completed his work and reported his conclusions, we will put together the permanent record of the Investigation. Your personal data might be part of the permanent record, unless you have given us information under conditions of express confidentiality. Any confidential data and any data not required for the permanent record will be destroyed.
You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
You have the right to request that any inaccuracies in your personal data are rectified without delay.
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.
You have the right to object to the processing of your personal data.
We welcome your feedback. If you contact us asking for information, we may need to contact other government departments to find that information. If your question is technical, we may need to pass it to our technology suppliers.
We do not pass on any of your personal information when dealing with your enquiry, unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit purposes.
IQCI tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
Information Commissioner’s Office – Wales
2nd Floor, Churchill House
Telephone: 016 2554 5297
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Please contact firstname.lastname@example.org if you have any queries
The contact details for the data controller’s Data Protection Officer is to be confirmed shortly. The Data Protection Officer provides independent advice and monitoring of our use of personal information.
Technologies and Encryption Software, Our relationship with IT suppliers and their policies on data protection.
We use leading technologies and encryption software to safeguard your data, and keep strict security standards to prevent any unauthorised access to it.
Visitors to our websites
When someone visits iqci.org.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in an anonymous way which does not identify anyone individually. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be open about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site. For instance, we use language cookies to know what language you would like the web site displayed to you in, we also use YouTube cookies to embed videos in pages and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve the navigation and content to better meet people’s needs. The information collected by the IQCI includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally. The cookies we use on our site are:
This cookie is created by the content management system and is essential for the site to display to correct language version of the site.
When you close your browser
To track a session when cookies are disabled. This allows the browser to preserve your session.
At end of session
This cookie is used to find out how visitors use our site. We use the information to help us improve the site. The cookie collects information in an anonymous form, including demographic information, the number of visitors to the site, whether they have visited before and the pages they visit.
Web browsers allow some control of cookies through browser settings. To find out more about cookies and how to manage them, visit www.allaboutcookies.org.
What information do we collect?
Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
The Information you give us:
Newsletters – On a regular basis we will email with updates about the IQCI and appropriate notifications. This data will not be shared with any third party or used for any marketing related content.
Email / Contact Forms / Direct communication – Where you communicate directly with the IQCI via email, website contact forms or in direct communication including telephone. We will only use these details to respond to your query or suggestion.
We use Transport Layer Security (TLS) to encrypt and protect email traffic. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
Links to other websites