Future Generations Commissioner for Wales 

This privacy notice tells you what to expect from the Future Generations Commissioner for Wales and the staff of the Office of the Future Generations Commissioner for Wales when your personal data is processed in connection with registering for, and attending, events. 

It informs you of: 

  • why we are able to process your information 
  • what personal data we collect and why  
  • how we collect it 
  • who will have access to it 
  • how long we store it for 
  • your rights. 

The relevant laws 

We process personal data in accordance with data protection legislation, including the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (UK GDPR). The Commissioner is a data controller for the purposes of the DPA and the UK GDPR. 

Our lawful bases for processing personal data are the Commissioner’s powers and duties set out in the Well-being of Future Generations Act 2015 (the Act). Specifically, in this instance, Section 18 (Commissioner’s general duty) and Section 19 (Commissioner’s functions). This statutory basis falls within Article 6(1)(e) of the UK GDPR: processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 

The type of personal data we collect 

In order to record registrations for events we host and understand our reach as an organisation, we process the following personal data: 

  • Personal identifiers, contacts and characteristics (name and contact details, for example). 

How we get the personal data and who will have access to it 

The personal data we process is provided to us directly by you for the purpose of registering to attend our events. 

The Commissioner and staff members will have access to your personal data. 

We use your personal data in order to make contact with you as participants of our events.  

We use your personal data to inform our organisational performance indicators in respect of us understanding the number, geographical location and characteristics of the people we are reaching. Questions about your personal characteristics are anonymous. You will not be personally identifiable when we use this data for that purpose. 

The Commissioner does not use any third party data processors.  

Your personal data will not be transferred outside of the UK. It will not be published. 

How we store your personal information 

Your information is securely stored on our secure servers. We will keep your personal information for a period of one year from the event that you attended. We will then dispose of your information by deleting the completed registration forms; subsequent records and any other data pertaining to you. 

Your data protection rights 

Under data protection law, you have rights including: 

  • Right of access – You have the right to ask us for copies of your personal information. 
  • Right to rectification – You have the right to ask us to rectify personal information you think is accurate. You also have the right to ask us to complete information you think is incomplete. 
  • Right of erasure – You have the right to ask us to erase your personal information in certain circumstances. 
  • Right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances. 
  • Right to object to processing – You have the right to object to the processing of your personal information in certain circumstances. 
  • Right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

You are not required to pay any charge for exercising your rights. If you make a request, we have one month in which to respond to you. 

Our Contact details 

Heledd Morgan 

Office of the Future Generations Commissioner for Wales, Tramshed Tech, Pendyris Street, Cardiff CF11 6BH. 

Email: contactus@futuregenerations.wales 

Data Protection Officer 

Our Data Protection Officer Sang-Jin Park can also be contacted by email: 

contactus@futuregenerations.wales or by writing to the postal address above.  

How to complain 

If you have any concerns about our use of your personal data, you can make a complaint to us via the contact details above. 

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. The ICO’s address is: 

Information Commissioner’s Office in Wales 

Postal address: 2Nd Floor, Churchill House, Churchill Way, Cardiff CF10 2HH 

Phone number: 0330 414 6421 

Email: wales@ico.org.uk 

Website: Wales office | ICO