Personal information charter
This information sets out the standards you can expect from the Department for Business and Trade (DBT) when we collect, hold or use your personal data.
The Department for Business and Trade (DBT) is the data controller for the personal data we describe in our privacy information. A data controller determines how and why personal data is processed. The majority of the personal data we process is in pursuance of our statutory functions as a government department, however we may also process your personal data:
- with your consent
- in order to fulfil a legal obligation
- for DBT’s defined legitimate interests
- in order to protect the vital interests of an individual(s)
- for the performance of a contract we have, or may, enter into with you
Your rights
When DBT collects, holds, uses or otherwise processes your personal data, you have a right to be told:
- what the data is being used for
- why we are legally able to process your data (also called the ‘lawful basis for processing’)
- how long we will keep your data
- who we will share it with
- whether it will be transferred or accessed outside the UK, and what legal protection it will have
- who our Data Protection Officer is
- about any rights you have, including the right to access your information or to object to its being used
- about your right to complain to the Information Commissioner if you feel that your personal information has been mishandled
You can also expect that your personal data will be:
- protected and kept secure
- kept accurate and up to date
- not used for purposes which are incompatible with those for which it was collected
- kept only for as long as it is needed for the purpose for which it was collected (unless it must be kept as part of the historic record)
DBT privacy notices
DBT publishes privacy information where we collect your personal data.
Privacy notices we publish include the following:
- clients of the Department for Business and Trade (DBT)
- data subject rights
- freedom of information (FOI) and environmental information regulations (EIR) requests
- job applicants
- national security vetting
- public appointments
- public consultations
- selling online overseas
- UK National Contact Point (UK NCP) for the OECD’s guidelines for multinational enterprises
How to contact the Data Protection Officer (DPO)
The DPO:
- is responsible for providing independent advice
- monitors DBT’s use of personal data
- ensures that DBT’s use of personal data is in compliance with data protection law
Contact DBT:
- to exercise your rights as a data subject
- if you have any questions relating to how DBT handles your personal information
- if you have any concerns about how your personal data is used as part of a DBT service
Data Protection Officer
Department for Business and Trade
Old Admiralty Building
Admiralty Place
London
SW1A 2DY
Independent advice on data protection and privacy
Contact the Information Commissioner for independent advice about data protection, privacy and data-sharing issues.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Monday to Friday 9am to 4:30pm