Skip to main content

This privacy notice gives you general information on how we handle your data when registering to complete the Contract Management Capability Programme.

First published:
31 August 2023
Last updated:


The Welsh Government supports multiple programmes of wider procurement capability and capacity development that includes the provision of professional learning and development opportunities through the Government Commercial Function Contract Management Capability Programme. Welsh Government will hold personal data on record to assist with programme development, coordination, and promotion.

Both the Welsh Government and the GCO are the data controllers and the data processor for all data collected by the team. A data controller determines how and why personal data can be processed.

What personal data do we hold and where do we get this information?

Personal data is defined under the General Data Protection Regulation (GDPR) as

‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier.’

The Welsh Government is working with the Government Commercial Function to deliver a Contract Management Capability Programme for the Welsh public sector. The Welsh Government will be funding a fixed number of places for students to study the programmes to ensure consistency across the landscape and set clear capability benchmarks for individuals involved.

When a student submits an expression of interest and signs the learner agreement the Welsh Government will collect yours and your line managers personal data. This includes:

  • Name
  • E-mail address
  • Organisation
  • Employment details
  • Any other personal data provided to us as part of your application or participation in the programme including exam results.

The Welsh Government will hold your personal data to develop, coordinate, promote and deliver the Contract Management programmes. Specific activities that require the use of your data includes:

  • Responding to queries
  • To assist in the student selection process
  • Programme onboarding
  • Day to day administration
  • Monitoring programme progression to ensure compliance to the learning agreement
  • Collecting programme feedback and reporting on results
  • Monitoring programme funding, administration, and delivery
  • Monitoring programme deferrals and withdrawals


The Welsh Government will have access to students results. This data will be used in reporting to senior management teams. Where possible the Welsh Government will remove your personal information in reporting to wider audiences.

Welsh government will also collect feedback on the Contract Management Capability programme to assist with reporting the benefits affiliated through the implementation of the programme.

What is the lawful basis for using your personal data?

Under Article 6 of UK General Data Protection Regulations The lawful basis of processing information is Legitimate Interest. That is by processing your personal data, the Welsh Government will be able assist in the development, coordination, promotion, and delivery of the Contract Management Capability programme. Increased capability across the Welsh Public Sector ensures best practise will be shared across procurement teams allowing better value for money in procurement spend.

How secure is your personal data and who do we share your information with?

Personally identifiable information shared will be held by the Welsh Government’s Commercial Procurement Capability Team is only accessed by staff members within this division to share communications with regards to our services. Any information provided is stored on a protected area of iShare (Welsh Government’s internal document management system).

The Welsh Government will share your information with the GCO to ensure that that the programme delivered meets the needs of the learners agreement. GCO have the right to hold your data, please view their privacy notice by clicking following the links below:

Privacy policy for the Government Commercial College on GOV.UK

Personal information charter on GOV.UK

How long do we keep your personal data?

We will keep any personal identifiable information for up to 5 years. After a period of 5 years the data held on file will be reviewed. If the data is no longer being used, it will be redacted from our records.

Students that are unsuccessful in receiving funding to complete the contract management training may be placed on a waiting list. Given this circumstance the Welsh government will hold personal data until your placement has been completed. 

Individual rights

Under GDPR, you have the following rights in relation to the personal information you provide through any of the research conducted through the Employee Research Programme, specifically you have the right:

  • To access a copy of your own data.
  • For us to rectify inaccuracies in that data.
  • To object to or restrict processing (in certain circumstances).
  • For your data to be ‘erased’ (in certain circumstances), and
  • To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.

Information Commissioner’s Office

Wycliffe House
Water Lane

Telephone: 01625 545 745 or 0303 123 1113

Further information

If you have any further questions about how the data provided as part of this work will be used by the Welsh Government or wish to exercise your rights using the General Data Protection Regulation, please contact:

David Nicholson

Telephone: 03000 257310

Rydym yn croesawu galwadau a gohebiaeth yn Gymraeg / We welcome calls and correspondence in Welsh.

The Welsh Government’s Data Protection Officer can be contacted at:

Data Protection Officer

Welsh Government
Cathays Park
CF10 3NQ

Rydym yn croesawu gohebiaeth yn Gymraeg / We welcome correspondence in Welsh.