Guidance

Civil Service HR Diversity and Inclusion Network privacy notice

Updated 27 July 2023

© Crown copyright 2023

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/civil-service-hr-diversity-and-inclusion-network-privacy-notice/civil-service-hr-diversity-and-inclusion-network-privacy-notice

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).

1. Your data

The Civil Service Human Resources Diversity & Inclusion team maintains a network of individuals and teams working to progress diversity and inclusion from across all government departments, Devolved Administrations. Non-Ministerial Departments, Agencies, Non-Ministerial Public Bodies and regional hubs such as Civil Service Local. This network will exist on the Knowledge Hub platform and will be entitled the ‘CSDI Hub’.

1.1 Purpose

The purposes for which we are processing your personal data are:

  • to maintain a list of network members
  • to provide groups on Knowledge Hub that will allow only CSDI Hub members to access, share, discuss, blog and collaborate on documents, events and information
  • to operate a mailing list for members to contact one another and to create their own practitioner profiles, blogs and message boards
  • to circulate content in text, video and audio form, including workforce and UK statistics, news items, research and reports training, presentations, webinars and legal guidance in the public domain
  • to invite members to meetings and events and to circulate related minutes and information as appropriate
  • to share career resources including development, job descriptions, coaching, mentoring, shadowing and guidance to support the capability of diversity and inclusion practitioners across the Civil Service.

1.2 The data

We will process the following personal data to maintain a list of members and operate the network: name, department/organisation, job and email. Where we share minutes of meetings this data may include names, opinions and job titles.

We will also collect data on your use of the Knowledge Hub website via web analytics.

We will also process any additional personal information that you choose to post to the network including profile images.

We will use the following personal data to operate our mailing list: email address, employer, name, interaction with emails, IP address, and inferred geo-location.

If you so choose, when completing your Knowledge Hub profile you will have the opportunity to also share your social media addresses, telephone number, interests and skills. This, along with your name, email and employer will be viewable by other Knowledge Hub CSDI group members or anyone else you choose to connect with on Knowledge Hub.

For operating a list of members, for running the Knowledge Hub network and for the mailing list the legal basis for processing your personal data is:

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. In this case that is Civil Service Human Resources’ function to promote diversity and inclusion across the Civil Service through its network of diversity and inclusion practitioners.

For web analytics or posted images and additional information volunteered we rely on your consent.

Sensitive personal data is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

We do not collect sensitive personal information, but if you volunteer it on the network (e.g. in a forum post, a blog, published meeting minutes or in the completion of your Knowledge Hub profile) our legal basis for processing your sensitive personal data is because you consent to us doing so.

1.4 Recipients

Some of your personal data will be shared with CSDI Hub network members when you join or interact on the Knowledge Hub platform.

Your personal data will be shared by us with Knowledge Hub who operate the collaboration platform.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors who provide email, and document management and storage services.

Your personal data will also be shared with our mailing list management supplier - Mailchimp.

1.5 Retention

Your personal data will be kept by us for as long as you wish to be a member of the network or on our mailing list.

Members can delete their account or request that their account be deleted, and Knowledge Hub state that any personal data will be permanently deleted within 24 hours of this action.

In addition, a regular programme of cleansing data is carried out that removes inactive accounts.

If someone leaves the Civil Service, or their diversity and inclusion role but does not close their account, then the administrators of the CSDI Hub network can remove them.

2. Your rights

You have the right to request information about how your personal data is processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You may have the right to request that your personal data be erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted. This may particularly be the case for diversity and inclusion practitioners working in the intelligence services.

You have the right to object to the processing of your personal data.

Where the personal data is processed on the basis of consent:

You have the right to withdraw consent to the processing of your personal data at any time.

You have the right to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used and machine-readable format.

3. International transfers

Data shared with Knowledge Hub will be stored in the UK.

Web analytics information may be transferred and stored securely outside the European Union. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

As your personal data is stored on our corporate IT infrastructure, and shared with our data processors, it may be transferred and stored securely outside the European Union. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Data shared with our mailing list management supplier may be transferred and stored securely outside the European Union. Where that is the case it will be subject to equivalent legal protection through the Privacy Shield scheme.

4. Contact details

Knowledge Hub are the data controller for information provided to create an account on Knowledge Hub. The Cabinet Office and Knowledge Hub are joint controllers for any personal data used in the CSDI Hub network.

Cabinet Office are the data controller for use of data to operate a separate list of CSDI Hub network members held on their IT, and for operation of the mailing list.

The contact details for the Cabinet Office are: Cabinet Office, 70 Whitehall, London, SW1A 2AS, or 0207 276 1234, or publiccorrespondence@cabinetoffice.gov.uk.

The contact details for the Cabinet Office’s Data Protection Officer are: Stephen Jones, Data Protection Officer, Cabinet Office, Room 405, 70 Whitehall, London, SW1A 2AS, or dpo@cabinetoffice.gov.uk.

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.

5. Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or 0303 123 1113, or casework@ico.org.uk. Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Back to top