Guidance

Privacy Notice for PFI Centre of Excellence

Updated 3 October 2023

© Crown copyright 2023

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/privacy-notice-for-private-finance-initiative-contact-details/privacy-notice-for-private-finance-initiative-contact-details

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

Your data

Purpose

The purposes for which we are processing your personal data are:

a. To contact you about collecting data and information on PFI and PF2 projects, to support the regular publication of PFI data and information by the IPA on behalf of HM Treasury.

b. To provide projects with expert support and advice regarding your PFI and PF2 contracts, enabling the effective delivery of the IPA’s PFI Contract Management Programme, and helping IPA manage the risks in the operational PFI portfolio.

c. To enable IPA to undertake stakeholder engagement and communications, engage with industry, private sector partners, and suppliers, and offer you the opportunity to provide feedback on the activities we undertake

The data

We will process the following personal data:

  • Full names
  • Job titles
  • The organisation you work for
  • Your professional telephone number
  • Your professional email address
  • Details of the PFI contract(s) you are involved with

The legal basis for processing your personal data is:

a. processing is necessary for the performance of a task carried out in the exercise of official authority vested in the data controller. In this case that is the transparency commitment to parliament to collect and publish data on PFI & PF2 contracts

b. processing is necessary for the performance of a task carried out in the public interest. In this case that is the provision of advice and support to help you manage your PFI / PF2 contracts as part of the PFI Contract Management Programme.

c. processing is necessary for the purposes of the legitimate interests pursued by the controller. In this case that is the undertaking of stakeholder engagement and communications, including asking stakeholders for feedback on the advice and support on offer.

Recipients

Your personal data will be shared by us with HM Treasury and, if collected for the purposes of providing advice and support, our PFI associates.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors who provide email, and document management and storage services.

Retention

Your personal data will be kept by us for three years, or until we are notified by you that you would like us to delete your records

If we still hold your data at the end of the three year retention period, it will be reviewed and deleted / retained in accordance with the Cabinet Office Retention Policy.

Where personal data have not been obtained from you

Your personal data were obtained by us from your employer or by another public body involved in the management of PFI contracts.

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to the processing of your personal data.

International transfers

As your personal data is stored on our Corporate IT infrastructure, and shared with our data processors, it may be transferred and stored securely outside the UK. Where that is the case it will be subject to equivalent legal protection through an adequacy decision, reliance on Standard Contractual Clauses, or reliance on a UK International Data Transfer Agreement.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

or 0303 123 1113, or icocasework@ico.org.uk. Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact details

The data controller for your personal data is the Cabinet Office. The contact details for the data controller are:

Cabinet Office
70 Whitehall
London
SW1A 2AS

or 0207 276 1234, or you can use this webform.

The contact details for the data controller’s Data Protection Officer are: dpo@cabinetoffice.gov.uk.

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.

Back to top