Privacy Policy

UK GENERAL DATA PROTECTION REGULATION UK(GDPR) – PRIVACY NOTICE

Background

The primary objective of the In-Work Support Service (IWS) is to support employed and self-employed people with a mental or physical health condition to help them remain in work.

To allow us to support you through the IWS, we need to ask you to provide a range of personal and special category information to our data processors:

  1. Case UK https://www.case-uk.co.uk/;
  2. In-Work Support Service Powys https://iwsspowys.org.uk/; and
  3. Rhyl City Strategy https://rcs-wales.co.uk/en/

The information you provide will be held in the strictest confidence. 

They will provide therapeutic support to help improve your health condition to help you remain in work or to return to work more quickly if you are absent from work due to your health condition. Workplace Wellbeing training is also available to businesses (micro, small and medium sized enterprises.)

Upon receipt of the information from the delivery providers, the Welsh Government becomes the data controller for it. In our remit as the data controller, the Welsh Government uses the information received for the below purposes. These purposes are necessary to enable us to carry out our public task (article 6(e) and in the exercise of our official authority and article 9(g)).

The information that we request from you will be used to demonstrate eligibility and to evaluate the demographics of individuals supported and whether the service has been effective in achieving its purpose, and efficient in how it produced results. The information will also be used by the Welsh Government for the purpose of administrating and managing the project and allow us to support you through the IWS, to measure and evaluate service performance, and to strengthen the evidence basis for therapeutic support provided to people with mental and physical health conditions and Workplace Wellbeing support to businesses (micro, small and medium sized enterprises).

Personal and special category information that will be collected and held includes data relating to ethnicity, religion, marital status, disability, gender, etc – these are all protected characteristics under the Equality Act 2010 and classed as special category data under UK GDPR for the purpose as outlined above:

  • Personal details such as name, address, date of birth, telephone number, gender, housing status, National Insurance number, caring responsibility, languages spoken, passport, ID card, disability.
  • Information on mental or physical health condition and accessing support.
  • Information on employment status.
  • Information on the ethnic origin.

The data / information will be gathered and processed by Case UK, Mid and North Powys Mind and Rhyl City Strategy, but will also be accessed and processed (for finance, audit, and research and evaluation purposes) by the Welsh Government.

Who do we share your information with?

Anonymised data will be shared for analytical purposes with other parts of the Welsh Government. Anonymised individual records may be shared with auditors for audit purposes. Individual data may also be shared with Welsh Government and procured non-Welsh Government researchers for evaluation purposes.

How long will we keep your information?

We will store your information in compliance with the UK General Data Protection Regulations and Welsh Government Records Policy and it will be kept in compliance with Welsh Government Records Management.

Your rights in relation to your information

You have the right:

  • to be informed of the personal data we hold about you and to access it
  • to require us to rectify inaccuracies in that data
  • to (in certain circumstances) object to or restrict processing
  • for (in certain circumstances) your data to be ‘erased’
  • to (in certain circumstances) data portability
  • to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection you have the right to withdraw your permission at any time by contacting the Welsh Government Programme Manager for the In-Work Support Service through IWS@gov.wales

Further information

For further information about the personal data collected and its use, if you have any concerns about the accuracy of personal data, or wish to exercise any of your rights under the UK General Data Protection Regulation, you should contact:

  • The Welsh Government Programme Manager for the In-Work Support Service through IWS@gov.wales
  • The Welsh Government’s Data Protection Officer, Welsh Government, Cathays Park, Cardiff, CF10 3NQ (DataProtectionOfficer@gov.wales)
  • The Information Commissioner’s Office helpline can be contacted on 0303 123 1113

Further information on Data Protection may be obtained at: http://www.ico.org.uk/ 
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF