Careers and work-related experiences on Anglesey information database: Privacy notice
The council and individual schools (as noted in Appendix A) are the data controller for the careers and work-related experiences on Anglesey information database.
About this privacy notice
The purpose of this privacy notice is to tell you how the council and the individual schools will process your personal data for the purpose of creating an information database for the schools on Anglesey to use as a result of you providing information via the 'Careers and Work-Related Experiences on Anglesey' survey. You have rights concerning how your data is collected and used for this purpose. This privacy notice informs you here what those rights are and how you can exercise them.
The council and the schools are committed to protecting the privacy and security of your personal data.
The council and the schools are only allowed to use, gather and share personal information where we have an appropriate legal basis to do so. We only collect and process personal information to fulfil our legal and official functions. We will only use personal information when the law allows us to and where it is necessary and proportionate to do so.
About this privacy notice
The purpose of this privacy notice is to tell you how the council and the individual schools will process your personal data for the purpose of creating an information database for the schools on Anglesey to use as a result of you providing information via the 'Careers and Work-Related Experiences on Anglesey' survey. You have rights concerning how your data is collected and used for this purpose. This privacy notice informs you here what those rights are and how you can exercise them.
The council and the schools are committed to protecting the privacy and security of your personal data.
The council and the schools are only allowed to use, gather and share personal information where we have an appropriate legal basis to do so. We only collect and processes personal information to fulfil our legal and official functions. We will only use personal information when the law allows us to and where it is necessary and proportionate to do so.
The identity and contact details of the council’s data protection officer and the schools data protection officer
The council has appointed a data protection officer (DPO) to help ensure that it fulfils its legal obligations when processing personal data. You can contact the DPO by email at DPO@ynysmon.llyw.cymru
The schools have also appointed a schools data protection officer (DPO) to help ensure that they fulfil their legal obligations when processing personal data. You can contact the schools DPO by email at dpoysgolionmon@ynysmon.llyw.cymru
Please contact Ysgol Caergeiliog directly if you wish to discuss data protection issues- cfsadmin@ycfs.cymru
What personal data are we collecting and why?
Your personal data is being collected and used to create a careers and work-related experiences on Anglesey information database which schools can use to contact you regarding possible career and work-related opportunities for their pupils. The database is created to support one of the five cross-cutting themes in the Curriculum for Wales, the Careers Work-Related Experiences (CWRE), which aims to help learners understand the relationship between their learning and the world of work.
We may also use your personal data to contact you about related matters.
We collect your name, address, post code, contact details (email address and telephone number). This data will be relating to your business but may be your personal data if your business is located at your home address.
How we use your personal data
The council initially collects your personal data via a survey in order to gather information on whether or not your business is interested in supporting the young people who attend Anglesey schools with career and work-related opportunities (please see a separate privacy notice for 'Careers and Work-Related Experiences on Anglesey' survey for more information relating to the survey).
The council will share your information, if you are interested in supporting the young people, with individual schools so that the schools can contact you directly regarding possible career and work-related opportunities for their pupils.
Also, if you are interested in offering apprenticeship opportunities, the council will also share your information on the Llwybrau Môn website, which is a platform which notifies post-16 learners on Anglesey and in Gwynedd of different options. The website will be live at the beginning of 2024 and more information will be available on how your information is used then.
Lawful basis for processing the data
We are using the following lawful basis under UK GDPR to process personal data:
Article 6(1)(e) of the UK GDPR - processing is necessary as it undertakes a task in the public interest or exercise of official authority
We will not knowingly ask you to provide information that is categorised as special categories of personal data.
Sharing your personal data
The council and schools may share your data will other external parties where they are required to do so, or where it is lawful and appropriate to do so. Please note that where we may share your data externally, that organisation will take on responsibility for your data at that point, and you should refer to their own privacy notice for details on how they will process your data.
We apply the following principles where we use personal information
- Processed lawfully, fairly and in a transparent manner.
- Collected for specified, explicit and legitimate purposes ('purpose limitation').
- Adequate, relevant and limited to what is necessary.
- Accurate, and where necessary, kept up to date.
- Kept in a form which permits identification of data subjects for no longer than is necessary.
- Processed in a manner that ensures appropriate security of the personal data.
Your rights as a data subject
The data being collected is your personal data, and you have rights that affect what happens to it. You have the right to access and obtain a copy of the personal data that the council and schools hold about you and to ask the authority and schools to correct your personal data if there are any errors or it is out of date. In some circumstances you may also have a right to ask the council and the schools to restrict the processing of your personal data until any errors are corrected, to object to processing or to transfer or (in very limited circumstances) erase your personal data.
If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the relevant data protection officer as indicated above.
You can obtain further information about these rights from the Information Commissioner’s Office or via their telephone helpline 0303 123 1113.
Is any personal data sent overseas?
No, personal data will not be sent overseas.
Automated decision making and profiling
No decision will be made about individuals solely based on automated decision making (where a decision is taken about them using an electronic system without human involvement) and which has a significant impact on them.
Storage, security, and data management
The council and the schools have a duty to safeguard and ensure the security of your personal data where we process this. We do that by having systems and policies in place to limit access to your information and prevent unauthorised disclosure, accidental loss, or alteration of your data. We also have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long will the council retain the personal data
The council and the schools will retain the data for three years and then dispose of it securely.
Complaints and more information
When we ask you for information, we will abide by the law, including the Data Protection Act 2018 and UK General Data Protection Regulation.
If you are unhappy with the way the council or the schools have acted when using your personal data, you can make a complaint by contacting the relevant data protection officer.
If you are still not happy, or for independent advice about data protection, privacy and data sharing, you can contact:
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
Website: https://ico.org.uk/
Changes to our privacy notice
We keep our privacy notice under regular review and will share any revisions.
Published 14 November 2023
Last updated 14 November 2023
Appendix A
Ysgol Gynradd Amlwch
Ysgol Llanfechell
Ysgol Beaumaris
Ysgol Llandegfan
Ysgol Gynradd Bodedern
Ysgol Pencarnisiog
Ysgol Esceifiog
Ysgol Talwrn
Ysgol Rhosneigr
Ysgol Kingsland
Ysgol Gyfun Llangefni
Canolfan Addysg y Bont
Ysgol Cemaes
Ysgol Garreglefn
Ysgol Llanfairpwllgwyngyll
Ysgol y Borth
Ysgol Bryngwran
Ysgol Gymraeg Morswyn
Ysgol Llanbedrgoch
Ysgol Corn Hir
Ysgol Gymuned y Fali
Ysgol Cybi
Ysgol Syr Thomas Jones
Ysgol Caergeiliog
Ysgol Goronwy Owen
Ysgol Penysarn
Ysgol Llangoed
Ysgol Parc y Bont
Ysgol y Ffridd
Ysgol Rhyd y Llan
Ysgol y Graig
Ysgol Santes Dwynwen
Ysgol Llanfawr
Ysgol Santes Fair
Ysgol David Hughes
Ysgol Moelfre
Ysgol Rhosybol
Ysgol Pentraeth
Ysgol Brynsiencyn
Ysgol Llannerch-y-Medd
Ysgol Bodffordd
Ysgol Henblas
Ysgol Rhoscolyn
Ysgol y Tywyn
Ysgol Uwchradd Bodedern
Ysgol Uwchradd Caergybi