National Cancer Strategy for Wales Call for Evidence: Privacy Notice

The Welsh Government will be the data controller for any personal data you provide as part of your response to the call for evidence. 

Welsh Ministers have statutory powers they will rely on to process this personal data which will enable them to make informed decisions about how they exercise their public functions. The lawful basis for processing information in this data collection exercise is our public task; that is, exercising our official authority to undertake the core role and functions of the Welsh Government (Art 6(1)(e)). Any response you send us will be seen in full by Welsh Government staff dealing with the issues which this call for evidence is about.

We use SmartSurvey to collect and analyse call for evidence responses on behalf of the Welsh Government. SmartSurvey is a UK-based survey platform that maintains UK GDPR compliance and applies appropriate technical and organisational measures to protect personal data, including secure storage and encryption. Any personal information collected through the call for evidence will only be used for the purposes described in this notice and will be retained in accordance with the Welsh Government's retention schedule. Once no longer required, the personal data shared as part of the call for evidence will be securely deleted.

We will be collecting the names and addresses of private citizens who respond to the call for evidence. This is so we can check they are resident in Wales. Where individuals respond on behalf of organisations, we will collect their names, job titles, and organisation names.

In addition, we may also unintentionally collect personal data via open questions through this call for evidence if respondents provide information that could identify them. Whilst we will not publish or otherwise make available any personal data that is shared via responses to this call for evidence, we advise that you not to disclose any personal information which might identify yourself or others.

Please do not provide personal data in order to raise a specific query or complaint about healthcare in Wales. Any queries or complaints should be raised through the NHS Wales ‘Listening to People’ process. Personal data provided relating to this will be deleted.

The Welsh Government intends to publish a summary of the responses to demonstrate that the call for evidence has been carried out properly. This summary will include a list of organisations that have responded, but the personal details of responding individuals will be excluded. Likewise, where responses are received from private citizens, their personal details will not be included in the summary.

Where organisational details are published as part of the call for evidence summary response, these published reports will be retained indefinitely. Any of your data held otherwise by the Welsh Government will be kept for no more than 12 months after the strategy’s publication on 4 February 2027.

You should also be aware of our responsibilities under Freedom of Information legislation and that the Welsh Government may be under a legal obligation to disclose some information. 

Under the data protection legislation, you have the right:

• To be informed of the personal data held about you and to access it
• To require us to rectify inaccuracies in that data
• To (in certain circumstances) object to or restrict processing
• For (in certain circumstances) your data to be ‘erased’
• To (in certain circumstances) data portability
• To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection. 

For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights under the UK GDPR, please see contact details below:

Data Protection Officer
Welsh Government
Cathays Park
Cardiff
CF10 3NQ 
dataprotectionofficer@gov.wales

Information Commissioner’s Office
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 
Tel: 0303 123 1113 
https://ico.org.uk/