What is the legal basis for The Department for Digital, Culture, Media & Sport (DCMS) processing my data?
We are allowed to collect and process your data under U.K. GDPR Article 6 (1) a; the data subject has given consent to the processing of his or her personal data for one or more specific purposes; Article 6 (1) e; processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; and U.K. GDPR 89 (1) Article Processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, shall be subject to appropriate safeguards, in accordance with this Regulation, for the rights and freedoms of the data subject. Those safeguards shall ensure that technical and organisational measures are in place in particular in order to ensure respect for the principle of data minimisation. Those measures may include pseudonymisation provided that those purposes can be fulfilled in that manner. Where those purposes can be fulfilled by further processing which does not permit or no longer permits the identification of data subjects, those purposes shall be fulfilled in that manner.
What personal data do we collect?
The personal data we collect includes the following mandatory information; full name, address (including postcode), date of birth and email address. We also request the following optional information; phone number, date & session attended, booking reference number.
What will happen if I do not provide this data?
If you do not provide you consent to enter the programme and provide your data you will not be able to attend to the events.
- I confirm that I have read and have understood the information sheet contained here explaining the information that will be collected and have had the opportunity to consider the information.
- I understand that all personal information I provide will be safeguarded and protected according to data protection legislation. It will be held in an anonymised format and only accessed by those with a research need.
- The research programme is being run by the following government departments, university partner organisations and businesses. We will share your data with these bodies who are acting as processors of your personal data.
- Department for Digital Culture Media and Sport
- Department of Health and Social Care
- I understand that all data including signed consent forms, demographic information, test results and audio/video recordings and interview transcripts will be retained for up to 10 years.
- I understand that, under the Data Protection Act 2018, I can ask at any time for access to/destruction of the information I provide, which will be possible if I provide contact details at the end of the survey.
- I understand that taking part in a study may involve an individual interview which will be audio recorded.
- I understand that my participation in any interview is voluntary and that I am free to stop taking part at any time without giving any reason and without my rights being affected. In addition, I understand that I am free to decline to answer any particular question or questions.
- I understand that the confidentiality of the information I provide will be safeguarded. However, if I disclose information which raises serious concerns over the immediate safety of myself or others, with prior discussion, I understand that the researcher may be required to disclose some of my confidential information to an appropriate health professional.
- I understand that the information I provide will be held securely. It will be anonymised and in line with data protection requirements and will only be accessed by researchers working on this or related studies.
- I understand that I will not be identified or identifiable and give permission for quotes to be used in the report or reports that result from the research.
We will not use your data for any automated decision making.
We will not be sending your personal data outside the U.K.
What are your data protection rights?
You have rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). The Information Commissioner’s Office (ICO) is the supervisory authority for data protection legislation, and maintains a full explanation of these rights on their website. https://ico.org.uk/
Information Commissioner’s Office
The contact details for the data controller’s Data Protection Officer (DPO) are:
Data Protection Officer
The Department for Digital, Culture, Media & Sport
100 Parliament Street
If you’re unhappy with the way we have handled your personal data and want to make a complaint, please write to the department’s Data Protection Officer or the Data Protection Manager at the relevant agency. You can contact the department’s Data Protection Officer using the details above.
If you have any concerns, issues or queries regarding the study or how it will be undertaken please contact firstname.lastname@example.org