Privacy Policy

UK PACT PRIVACY NOTICE

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).

YOUR DATA

We will process the following personal data:

Names, business telephone numbers and email addresses, office location and position of staff of both the Authority and the Contractor as necessary to deliver the services and to undertake contract and performance management. The Contract itself will include the names and business contact details of staff of both the Authority and the Contractor involved in managing the Contract.

Names, business telephone numbers and email addresses, office location and position of UK PACT stakeholders, including organisations involved in applying for and delivering projects, but also those participating in and benefiting from them in recipient countries

Names, contact details, passport details and CV details of potential and actual participants in skill-shares and secondments.
Opinions of all stakeholders listed above on programme performance, for monitoring, evaluation and learning purposes.

Purpose

The nature of the processing will include collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, use, disclosure by transmission, dissemination or otherwise making available of data.

Processing takes place for the purposes of stakeholder management, Communications, and recruitment.

The nature of processing will include the storage and use of names and business contact details of staff of both the Authority and the Contractor as necessary to deliver the services and to undertake contract and performance management. The Contract itself will include the names and business contact details of staff of both the Authority and the Contractor involved in managing the Contract.

Lawful basis of processing

The lawful basis for processing your personal data is processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice.

Recipients

Your personal data will be shared by us with other Government Departments or public authorities where necessary as part of the contract management exercise. We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.

Your personal data will be shared by us with

Palladium International Limited, ICF Consulting, PA Consulting, Crown Agents and their subcontractors, among others Touchstone, CTM, Egencia, Drum Cussac and HR Compass.

For the skill-shares and secondments component of the programme, the exchange of personal data to external bodies will only occur as required to enable delivery of the programme such as booking and providing travel arrangements for experts when deployed.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.

Retention

Processing will take place on 13th January 2020 for the duration of the Contracts, 2 years, plus a 12-month retention period. The Contracts will end in January 2022 but may be extended for up to 3 years until January 2025.

Automated decision making

Your personal data will not be subject to automated decision making.

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to the processing of your personal data.

International transfers

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely outside the European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113
casework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact details

The data controller for your personal data is the Department for Business, Energy & Industrial Strategy (BEIS).

You can contact the BEIS Data Protection Officer at: BEIS Data Protection Officer, Department for Business, Energy and Industrial Strategy, 1 Victoria Street, London SW1H 0ET. Email: dataprotection@beis.gov.uk.

If you would like to contact the UK PACT team for any questions on data processing, please do so via communications@ukpact.co.uk