There is a problem

ReAct+ – Privacy Notice

In line with UK General Data Protection Regulation (UK GDPR) this privacy notice outlines how we collect and use your information and sets out that your personal data will be processed fairly and lawfully and in a transparent manner.

So that you can receive support from the ReAct+ programme, it is necessary for the Welsh Government to collect personal data and special category data from you. We will collect certain special categories of personal data about you, and this includes details about your race or ethnicity, information about your health, and your offender/ex-offender status where applicable.

You must answer all the questions; this includes questions where ‘prefer not to say’ is an optional answer.

Lawful basis for processing

The Welsh Government will be the data controller for any personal data you have provided in relation to the ReAct+ programme. The information will be processed as part of our public task and the official authority vested in us to undertake the core role and functions of the Welsh Government.

What personal data will we collect and process?

‘Personal data’ is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.

For the ReAct+ programme we will collect the following personal data:

  • Name
  • Address
  • Email address
  • Contact telephone numbers
  • National Insurance number
  • Date of birth

Special Category Data

Under Article 9(2)(a) of the UK GDPR, the Welsh Government will process special category data only when the data subject has given explicit consent to the processing of those personal data for one or more specified purposes.

We will use your information to:

  • Process your grant application, establish the most suitable support available to you, and allocate funding
  • Monitor and report on the number of people taking part in projects/programmes'' and the number of people from different groups being supported (e.g. different age, gender and ethnicity)
  • Carry out the funding, planning, monitoring, and inspection of training and learning
  • Produce statistical publications that are anonymise.

Who will have access to your data?

The Welsh Government may share your personal data with the following organisations:

  • Working Wales/Careers Wales and Jobcentre Plus to support your application, and to provide you with the best advice and guidance which suits your needs
  • Auditors to assess whether the project/programme has followed the correct procedures.

To help us understand the effectiveness of the programme, your contact details may be used for research and evaluation purposes, including where the Welsh Government commissions an independent contractor for the purpose of evaluation of the programme. Please note that research organisations/evaluators may only contact a sample of individuals.

Participation in the evaluation is completely voluntary. However, we really appreciate your participation since your views and experiences are important to inform organisational improvement.

Your contact details will be used only for approved research and will be deleted once the approved research study is complete.

We may share your information with a fraud prevention agency for the purposes of fraud prevention and money laundering. If fraud is detected, you could be refused certain services, finance or employment in the future.

How we keep your data secure

Personal data provided to Welsh Government is held on secure servers within the UK, and for the ReAct+ programme a secure electronic folder has been created that has access restricted only to the immediate staff members. Your contact details and any personal data you choose to provide will be stored in this restricted folder.

The Welsh Government has procedures to deal with any suspected data security breaches. If a suspected breach occurs, the Welsh Government will notify you and any applicable regulator where we are legally required to do so.

After you have left the programme

We may contact you via a questionnaire to evaluate the impact of the programme. Any information you provide after you’ve left the programme will be used to update the records we already hold about you.

How long your details are kept for

Your personal data will be retained on secure Welsh Government IT systems for up to 7 years in line with the Welsh Government retention policy after which time it will be securely destroyed. We may delete the information sooner if it is no longer being used.

Your individual rights

Under data protection legislation, you have the right:

  • To be informed of the personal data Welsh Government holds about you and to access it
  • To require us to rectify inaccuracies in that data
  • To (in certain circumstances) object to or restrict processing
  • For (in certain circumstances) your data to be ‘erased’
  • To (in certain circumstances) data portability
  • To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.

Should you have any queries regarding this privacy notice please contact us at reactplus@gov.wales.

For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights using the UK General Data Protection Regulation, please contact:

Data Protection Officer,
Welsh Government,
Cathays Park,
Cardiff,
CF10 3NQ
Email: dataprotectionofficer@gov.wales

The contact details for the Information Commissioner’s Office are:

Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk