Evaluation of the Welsh Government Energy Service & Carbon Reporting: Privacy Notice

The Welsh Government has commissioned Miller Research (UK) Ltd, a research contractor, to undertake an evaluation and future options appraisal of the Welsh Government Energy Service & Carbon Reporting. As part of this research, Miller Research are conducting a series of interviews and focus groups with stakeholders involved in the delivery of WGES and beneficiaries of the service, as well as wider policy stakeholders. The aim of this part of the research is to examine and develop the future options of the service.  

The information gathered from the interviews and focus groups will be analysed by Miller Research and anonymised. Anonymised information will be included in a report delivered to Welsh Government to be published on the Welsh Government website. The findings will be used to inform proposals and recommendations for future delivery models. 

The Welsh Government is the data controller for the research. For the purposes of this research, the personal data collected will include Organisation, Sector and email address. 

Your participation in this research is voluntary. However, your views and experiences are invaluable in informing Welsh Government policies and service delivery.  

The contact for this research at Miller Research is Susannah Lynn:  

Email address: susannah@miller-research.co.uk 

What personal data do we hold and where do we get this information? 

Personal data is defined under the General Data Protection Regulation (GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier.’ Personal data may include: 

  • Name  
  • Contact details (email addresses, phone numbers) 

You will have been contacted or have received a recruitment email because the Welsh Government or Miller Research hold your contact details, or because you have previously contributed to or engaged with this area of work. 

Your participation is voluntary and if you do not wish to take part or be sent reminders at any stage of the research then please reply to the invitation email and you will no longer be contacted for this research. Miller Research will only use your contact details for the purposes of this evaluation.   

If you choose to provide additional personal data during the interview / survey, we will not identify you from, or link your identity to, the responses you provide. If you raise a query or complaint and provide personal data requesting a response, the researcher will forward the request only to the relevant official and subsequently delete it from the data. 

We may need to record the interview for operational reasons. If this is the case, we will make this clear to you before the interview begins, and you will have the opportunity to tell us if you are not happy for the discussion to be recorded. Group interviews are only recorded where all members are happy for this to happen. If the interview is recorded, personal data will be removed during the process of transcribing. Recordings will be deleted once this process is completed. If the discussion is not recorded, personal data will not be included in written notes prepared during or following the interview.  

Purpose 

The purpose(s) for which we are processing your personal data is: 

  • To evaluate or research the effectiveness of Welsh Government Energy Service   
  • To appraise future options for the delivery of the Welsh Government Energy Service   

 

What is the lawful basis for using your data?

The lawful basis for this processing of your personal data is that; a) it is necessary for the performance of a task (see purpose above) carried out in the public interest, where processing is necessary for the Welsh Government’s responsibility to monitor and evaluate the effectiveness of policies, in relation to its fiduciary duty to ensure public money is used responsibly, and the Welsh Government’s functions in relation to carbon reductions under the Climate Change Act 2008. How secure is your personal data? 

How secure is your personal data and who do we share your information with? 

Personal information provided to Miller Research is always stored on a secure server. The data can only be accessed by a limited number of researchers working on this project. Miller Research will only use this data for research purposes. Miller Research has Cyber Essentials Certification.  

Miller Research has procedures to deal with any suspected data security breaches. If a suspected breach occurs, Miller Research will report this to the Welsh Government who will notify you and any applicable regulator where we are legally required to do so.   

Miller Research will use the information gathered to produce a report that will be published on the Welsh Government website. This report will not include any information that could be used to identify you, if any comments from you are included, these will be quality assured to remove any information that could identify you. 

Your personal data will be collected by Miller Research and shared with the Welsh Government. Your data may be shared with other government departments, public bodies and organisations where considered appropriate by the Welsh Government. This will allow these bodies to provide further support delivering projects and co-ordinating decarbonisation work across the areas of the public sector for which they have responsibility. 

Your personal data will also be shared by us with third party contractors or selected researchers, and/or evaluators, where they are contracted and/or funded by us to provide specific services in order to facilitate delivery of our ‘Purpose’ above. We require our third-party contractors to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party contractors to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions. As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services. 

How long do we keep your personal data?  

Miller Research will hold personal data during the contract period, and any personal data not already removed during data collection will be deleted by Miller Research within three months of the end of the contract. This includes your contact details.  

The Welsh Government will retain contact details it already holds, such as registration on Sell2Wales, according to the privacy notices issued for those purposes. 

Individual rights 

Under GDPR, you have the following rights in relation to the personal information you provide through any of the research conducted through the Employee Research Programme, specifically you have the right: 

  • To access a copy of your own data.  
  • For us to rectify inaccuracies in that data. 
  • To object to or restrict processing (in certain circumstances). 
  • For your data to be ‘erased’ (in certain circumstances); and 
  • To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection. 

The contact details for the Information Commissioner’s Office are Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Phone: 01625 545 745 or 0303 123 1113.

Website: www.ico.gov.uk 

Further Information 

For further information on how your data is used by the Welsh Government, please visit: https://www.gov.wales/welsh-government-privacy-notice 

The data controller for your personal data is the Welsh Government. You can contact Welsh Government’s Data Protection Officer at: 

Welsh Government
Cathays Park
CARDIFF
CF10 3NQ 

Email Address: Data.ProtectionOfficer@wales.gsi.gov.uk 

If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.