Privacy notice

The following is to explain your rights and give you the information you are entitled to under the Data Protection Act 2018 and the UK General Data Protection Regulation (“the Data Protection Legislation”). This notice only refers to your personal data (e.g. your name, email address, and anything that could be used to identify you personally) not the content of your response to the consultation questions.

1. What personal data does the Department for Digital, Culture, Media and Sport (DCMS) collect?

Most of the personal information we collect and process is provided to us directly by you. This includes:

Personal identifiers, contacts and characteristics (for example, name and contact details).

2. Why we are collecting your personal data

Your personal data is being collected as an essential part of the consultation process, so that we can contact you regarding your response and for statistical purposes, such as to ensure individuals and organisations cannot complete the survey more than once.

3. Our lawful ground for processing your personal data

The Data Protection Legislation states that, as government departments, the departments may process personal data as necessary for the effective performance of a task carried out in the public interest (i.e. a consultation).

We will not: ● sell or rent your data to third parties ● share your data with third parties for marketing purposes ● use your data in analytics

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.

4. With whom we will be sharing your personal data

Information you provide in response to this consultation, including personal information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act 2018 and the Environmental Information Regulations 2004).

If you want the information that you provide to be treated as confidential please tell us but be aware that we cannot guarantee confidentiality in all circumstances.

We will summarise all responses and publish this summary on GOV.UK. The summary will include a list of names of organisations that responded, but not people’s personal names, addresses or other contact details.

Qualtrics is the online survey platform used to submit responses to this consultation. They will store the data in accordance with the controller's instructions and their privacy policy.

5. For how long we will keep your personal data, or criteria used to determine the retention period.

Your personal data will be held for two years after the consultation is closed. This is so that the department is able to contact you regarding the result of the consultation, following analysis of the responses.

6. Your rights, e.g. access, rectification, erasure

The data we are collecting is your personal data, and you have considerable say over what happens to it. You have the right: ● to see what data we have about you ● to ask us to stop using your data, but keep it on record ● to have all or some of your data deleted or corrected ● to lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law

You can contact the ICO at https://ico.org.uk, or phone 0303 123 1113. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

7. Your personal data will not be used for any automated decision making

8. Your personal data will be stored in a secure government IT system and the survey company's secure system

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

9. Changes to this privacy notice

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, the controllers will take reasonable steps to let you know.

10. What are your data protection rights?

You have rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). The Information Commissioner's Office (ICO) is the supervisory authority for data protection legislation, and maintains a full explanation of these rights on their website

11. How do I complain?

The contact details for the data controller's Data Protection Officer (DPO) are:

Data Protection Officer The Department for Digital, Culture, Media & Sport 100 Parliament Street London SW1A 2BQ Email: DCMSdataprotection@dcms.gov.uk

If you’re unhappy with the way we have handled your personal data and want to make a complaint, please write to the department’s Data Protection Officer or the Data Protection Manager at the relevant agency. You can contact the department’s Data Protection Officer using the details above.

12. How to contact the Information Commissioner’s Office

If you believe that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. You may also contact them to seek independent advice about data protection, privacy and data sharing.

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Website: www.ico.org.uk Telephone: 0303 123 1113 Email: icocasework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

This notice was last updated on 10/09/2021