Cross-government content community Basecamp privacy notice
Published 24 July 2018
The content community Basecamp is supported by the GOV.UK content community team. Anyone who publishes on GOV.UK and wider can use the government content community in Basecamp to:
- discuss content and content design
- ask questions and get advice from other writers and publishers
- see examples of content best practice
- get alerts about new guidance and forthcoming events
Basecamp is an online project management tool that helps people to collaborate and share information. You can read Basecamp’s privacy notice.
The content community Basecamp is provided by the Government Digital Service (GDS) which is part of the Cabinet Office.
The data controller for GDS is the Cabinet Office – a data controller determines how and why personal data can be processed. Read the Cabinet Office’s entry in the Data Protection Public Register for more information.
What data we collect from you
The personal data we collect from you will include:
- name
- organisation
- email address
The legal basis for processing data for GOV.UK publishers is in the exercise of a public task.
The legal basis for processing data for those not directly working with GOV.UK publishing tools is consent.
Why we need your data
Your personal data will be used to invite you to register for the Basecamp project so you can get:
- alerts of new discussions
- updates to discussions you’re participating in
What we do with your data
We will:
- invite you to join the government content community project
- use your data for the purpose it was collected
- allow you to unsubscribe, change your email frequency or remove your account
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we’re required to do so by law – for example, by court order, or to prevent fraud or other crime.
How long we keep your data
We will only keep your personal data for as long as:
- the law requires us to
- we need for the purposes listed above
This means that we will only hold your personal data for a minimum of 6 months until you choose to close your Basecamp account permanently.
You can unsubscribe, change your email frequency or remove your account at anytime.
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.
Your personal data may be transferred outside the European Economic Area (EEA) while being processed by GDS. If this happens, we’ll make sure you’re given the same level of technical and legal protection as you are within the EEA.
Basecamp is operated by a US company which offers safeguards to data handling supported by model contract clauses. The US Privacy Shield also supports the safeguarding of your personal data.
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We set up systems and processes to prevent unauthorised access or disclosure of the data we collect about you – for example, we protect your data using varying levels of encryption. All third parties who process personal data for GDS are required to keep that data secure.
Children’s privacy protection
We don’t design or promote services for children who are 13 years of age or younger, and we don’t intentionally collect or keep data about anyone under the age of 13.
Your rights
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data - this copy will be provided in a structured, commonly used and machine-readable format
- that anything inaccurate in your personal data is corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If you have any of these requests, get in contact with our Data Protection Officer - you can find their contact details below.
If your personal data is processed on the basis of consent, you have the right to:
- withdraw consent to the processing of your personal data at any time
- request a copy of your personal data - this copy will be provided in a structured, commonly used and machine-readable format
Changes to this notice
We may change this privacy notice. When we make changes to this notice, the ‘last updated’ date at the top of this page will also change. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, GDS will take reasonable steps to make sure you know.
Questions and complaints
Contact the Data Protection Officer if you:
- have any questions about anything in this document
- think that your personal data has been misused or mishandled
- want to make a subject access request
You can also complain to the Information Commissioner, who is an independent regulator.
Information Commissioner's Office
Email icocasework@ico.org.uk
Contact form https://ico.org.uk/glo...
Telephone 0303 123 1113
Textphone 01625 545 860