Policy paper

Privacy notice

Published 8 March 2024

This privacy notice explains that your personal data will be used to assess whether the UK wishes to add comments to the draft Risk Management Evaluation documents for chlorpyrifos during the intersessional period ahead of the next Persistent Organic Pollutant Review Committee (POPRC) meeting on 23 to 27 September 2024.

Who collects your personal data 

Department for Environment, Food and Rural Affairs (Defra) is the controller for the personal data we collect: 

Department for Environment, Food and Rural Affairs 
Seacole Building 
2 Marsham Street 
London 
SW1P 4DF 

If you need further information about how Defra uses your personal data and your associated rights you can contact the Defra data protection manager at data.protection@defra.gov.uk or at the above address. 

The data protection officer for Defra is responsible for checking that Defra complies with legislation. You can contact them at DefraGroupDataProtectionOfficer@defra.gov.uk or at the above address.

What personal data we collect and how it is used 

Defra collects your: 

  • name 
  • contact details 
  • company or organisation name 
  • information relating to chlorpyrifos, as specified in Annex F of the Stockholm Convention

Your personal data will be used to assess whether the UK wishes to add comments to any Risk Management Evaluation documents during the intersessional period ahead of the next Persistent Organic Pollutant Review Committee (POPRC) meeting on 23 to 27 September 2024.

Lawful basis for processing your personal data  

The lawful basis for processing your personal data is your consent.  

The processing of your personal data is based on consent. You can withdraw consent at any time by emailing POPs@defra.gov.uk

Who we share your personal data with 

Defra does not share the personal data collected under this privacy notice with other organisations. 

Response data will be published on GOV.UK approximately 2 to 6 months after the date for commenting closes. Comments will only be attributed to a company or organisation name. 

Defra respects your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.

How long Defra holds personal data 

Defra will keep your personal data for 3 years in line with our standard information retention policy. 

What happens if you do not provide the personal data 

If you do not provide the personal data, the project team will not be able to take your experience and opinion into account.

Use of automated decision-making or profiling 

The personal data you provide is not used for: 

  • automated decision making (making a decision by automated means without any human involvement) 
  • profiling (automated processing of personal data to evaluate certain things about an individual)

Transfer of your personal data outside of the UK 

Defra will only transfer your personal data to another country that is deemed adequate for data protection purposes.  

Your rights 

Find out more information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

Complaints 

You have the right to make a complaint to the Information Commissioner’s Office at any time. 

Defra’s personal information charter 

Defra’s personal information charter explains more about your rights over your personal data.