Guidance

Fisheries management plans: privacy notice

Published 17 July 2024

This privacy notice explains how the Department for Environment, Food and Rural Affairs (Defra) will use personal information which is submitted as part of the fisheries management plan (FMP) programme.

If you have any queries about the content of this privacy notice, email fmps@defra.gov.uk.

Who collects your personal data

Defra is the controller for the personal data we collect.

If you need further information about how Defra uses your personal data and your associated rights, you can contact Defra’s data protection manager by emailing data.protection@defra.gov.uk, or by post using this address:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

The data protection officer for Defra is responsible for checking that Defra complies with legislation. You can contact them by email at DefraGroupDataProtectionOfficer@defra.gov.uk or by using the postal address above.

What personal data we collect and how it is used

Defra may collect your:

  • name
  • job title
  • company and sector
  • contact details
  • location (area of country)
  • interest in the FMP programme

The personal data will be used to create a database of interested parties and those who have engaged with the FMP programme.

This database will be used to:

  • identify people who have expressed interest in developments
  • streamline the programme’s communications and engagement
  • improve the programme’s overall approach

How your personal data has been obtained, if from a third party

Your personal data may have been obtained with your consent from other organisations as part of the FMP programme, including:

  • the Marine Management Organisation (MMO)
  • the Centre for Environment, Fisheries and Aquaculture Science (Cefas)
  • Seafish
  • the Association of Inshore Fisheries and Conservation Authorities (AIFCA)

Lawful basis for processing your personal data

The lawful basis for processing your personal data is consent.

The processing of your personal data by Defra in this way is based on consent. You can withdraw consent at any time by emailing fmps@defra.gov.uk.

Who we share your personal data with

Defra may share the personal data collected under this privacy notice with the following organisations:

  • MMO
  • Cefas
  • Seafish
  • AIFCA

Defra will share the personal data to co-ordinate stakeholder engagement and communications, and to meet objectives set by Defra to deliver and implement the FMP programme.

Defra respects your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.

How long Defra holds personal data

Defra will keep your personal data in line with the duration of the programme, which we estimate to close by 2032 or sooner.

What happens if you do not provide the personal data

If you do not provide the personal data, Defra and the organisations listed above will not know the level of your involvement across the programme, and will be unable to adapt our approach and co-ordinate engagement when inviting you to take part in workshops, surveys or interviews.

Use of automated decision-making or profiling

The personal data you provide is not used for:

  • automated decision making (making a decision by automated means without any human involvement)
  • profiling (automated processing of personal data to evaluate certain things about an individual)

Transfer of your personal data outside of the UK

Defra will only transfer your personal data to another country that is deemed adequate for data protection purposes.

Your rights

Based on the lawful processing above, your individual rights are:

  • the right to be informed
  • the right of access
  • the right to rectification
  • the right to erasure
  • the right to restrict processing
  • the right to data portability
  • rights in relation to automated decision making and profiling

Read more information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), provided by the Information Commissioner’s Office.

Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

Defra’s personal information charter

Defra’s personal information charter explains more about your rights over your personal data.