Welsh Government funding agreement for specialist FE establishments 2020 to 2021: privacy notice

The Welsh Government provides a wide range of funding agreements and grant schemes to help deliver our policies and create a fairer, more prosperous Wales.

The Welsh Government will be data controller for any personal data you provide in relation to your funding agreement for specialist FE establishments. The information will be processed as part of our public task (i.e. exercising our official authority to undertake the core role and functions of the Welsh Government) and will help us assess your eligibility for funding.

Before we provide funding to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you to third party fraud prevention agencies. 

If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the grant funding you applied for, or we may stop providing existing grant funding to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you.

We will keep personal information contained in files in line with our retention policy. If successful in your application then your personal data will be kept for 7 years after the date when you, as funding recipient, are free from all conditions relating to the funding awarded and all payment have been made. However, if the funding is awarded under General Block Exemption or De Minimis, your personal data will be kept for 10 years from the conclusion of any aid award. If you are unsuccessful your details will be kept for one year after the date you provided them. 

Under the data protection legislation, you have the right:

• to access the personal data the Welsh Government holds on you
• require us to rectify inaccuracies in that data 
• to (in certain circumstances) object to or restrict processing
• for (in certain circumstances) your data to be ‘erased’
• to lodge a complaint with the Information Commissioner’s Office (ICO) who is the independent regulator for data protection

The Welsh Government is committed to handling your personal data safely, securely and only for as long as we need. 

If you have any concerns about how we use your personal data, we encourage you to raise them with the relevant team in the first instance. 

You can also contact the Data Protection Officer by emailing DataProtectionOfficer@gov.wales or writing to the DPO at: 

Welsh Government 
Cathays Park
Cardiff 
CF10 3NQ

If you wish to make a formal complaint about how the Welsh Government has processed your personal data, you can complain about Welsh Government.

We will acknowledge your complaint and respond within an appropriate timescale, in line with data protection legislation and our complaints process.

For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights under the GDPR, please see contact details below.