Rural grants and payments: General Data Protection privacy notice

1.1 This notice informs you about the Welsh Government’s use of the information provided in your application for a Rural Payments Wales (RPW) online account.  It also explains the Welsh Government’s processing and use of your personal data and your rights under the Data Protection Act 2018. The data controller for the information is the Welsh Government, Cathays Park, Cardiff, CF10 3NQ.

The data protection officer for the same information is the Data Protection Officer, Welsh Government, Cathays Park, Cardiff, CF10 3NQ. 

Email: DataProtectionOfficer@gov.wales

1.2 The information will be processed and managed by the Welsh Government and used for the purposes of identifying individuals and businesses to provide secure access to the RPW and Farming Connect online services. This authentication will require some sharing of information with the UK Governmental authentication services.  We may also use information for improving and running the site(s), correspondence with you and your Contacts, and providing usage statistics for Welsh Government. 

1.3 The lawful basis for the processing is that it is necessary for the performance of a task carried out in the exercise of official authority vested in the Welsh Government.

1.4 The Welsh Government collects personal data to confirm your identity and to identify your location and your farm business(es). 

1.5 The data is processed through an automated process of business rules.  RPW and Farming Connect online services stores small text files called “cookies” on your computer or device (e.g. tablet or mobile phone) while you are logged into the service.  Our Cookies Policy | GOV.WALES

2.1 RPW Online and Farming Connect use the GOV.UK One Login and/or Government Gateway to maintain your security details and log in. Use of your RPW online account to access further RPW or Farming Connect services may require further processing of this information, which will be set out in privacy notices for each service/scheme. 

Farming Connect Privacy Notice on Farming Connect

2.2 Who will we share information with:

• GOV.UK One Login
• Government Gateway
• regulatory authorities, such as HM Revenue and Customs, local authorities, Health and Safety Executive and the police.
• Natural Resources Wales
• APHA

2.3 The information may be used for the following:

• to authenticate online sessions
• compilation of reports of aggregated data and/or summary statistics to be made publicly available
• identification of landowners/users in events of emergencies, e.g. disease control and breach control
• allowing partner organisations to fulfil their legal duties
• shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity
• publication of certain information and responding to requests for information. 

3.1 Your information, including your personal information, may be the subject of a request by another member of the public. When responding to such requests the Welsh Government may be required to release information, including your personal information.

4.1 The GDPR gives individuals rights in respect of the personal data held on them. 

These rights include:

• the right to be informed (this notice)
• the right to ask for and receive copies of the personal data that the Welsh 

Government holds about them, although the Welsh Government can sometimes withhold some data or not provide copies

• the right, in some circumstances, to prevent or restrict the Welsh Government processing personal data
• the right, in some circumstances, to have wrong data rectified
• the right, in some circumstances, to have data erased (to be forgotten)
• if you wish to exercise any of your rights under the GDPR, you should contact the Welsh Government at the address provided at the beginning of this notice

4.2 Individuals also have the right to ask the Information Commissioner, who enforces and oversees the GDPR, to assess whether or not the processing of their personal data is likely to comply with the GDPR. The Information Commissioner can be contacted at:

Information Commissioner's Office,
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 01625 545 745 or 0303 123 1113

Website: www.ico.gov.uk