This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).
The nature of the processing will include collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, use, disclosure by transmission, dissemination or otherwise making available of data.
Processing takes place for the purposes of stakeholder management, communications, and recruitment.
The nature of processing will include the storage and use of names and business contact details of staff of both the Authority and the Contractor as necessary to deliver the services and to undertake contract and performance management. The Contract itself will include the names and business contact details of staff of both the Authority and the Contractor involved in managing the Contract.
The lawful basis for processing your personal data is processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice.
Your personal data will be shared by us with other Government Departments or public authorities where necessary as part of the contract management exercise. We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.
Your personal data will be shared by us with:
Palladium International Limited, ICF Consulting, PA Consulting, Crown Agents and their subcontractors, among others: Touchstone, CTM, Egencia, Drum Cussac and HR Compass.
For the skill-shares and secondments component of the programme, the exchange of personal data to external bodies will only occur as required to enable delivery of the programme, such as booking and providing travel arrangements for experts when deployed.
As your personal data will be stored on our IT infrastructure, it will also be shared with our data processors Microsoft and Amazon Web Services.
Processing will take place on 13th January 2020 for the duration of the Contracts, 2 years, plus a 12-month retention period. The Contracts will end in January 2023 but may be extended for up to 4 years until March 2027.
Your personal data will not be subject to automated decision making.
You have the right to request information about how your personal data are processed, and to request a copy of that personal data. You have the right to request that any inaccuracies in your personal data are rectified without delay. You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement. You have the right to request that your personal data are erased if there is no longer a justification for them to be processed. You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted. You have the right to object to the processing of your personal data where it is processed for direct marketing purposes. You have the right to object to the processing of your personal data.
As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely outside the European Economic Area. Where that is the case, it will be subject to equivalent legal protection through the use of Model Contract Clauses.
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
The data controller for your personal data is the UK Government’s Foreign, Commonwealth and Development Office (FCDO)
You can contact the Data Protection Officer at the Foreign, Commonwealth & Development Office:
Data Protection Officer
Information Management Department
Information and Digital Directorate
Foreign, Commonwealth & Development Office
King Charles Street
Telephone: 020 7008 5000
If you have any questions about anything in this notice, or if you consider that your personal data has been misused or mishandled, contact us at firstname.lastname@example.org.
If you would like to contact the UK PACT team for any questions on data processing, please do so via email@example.com