Privacy notice: responsible investment consultation
Published 8 April 2021
Applies to England and Wales
© Crown copyright 2021
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/privacy-notice-responsible-investment-consultation/privacy-notice-responsible-investment-consultation
This privacy notice explains how the Charity Commission for England and Wales (‘the Commission’ / ‘we’) processes your personal data when you respond to our consultation on our updated guidance on responsible investments.
This notice is supplemented by our main privacy notice which provides further information on how the Commission processes personal data, and sets out your rights in respect of that personal data.
The Commission consults the public as part of its open policy making process. We do this by publishing our consultations on gov.uk. We invite individual responses to be made either by online survey or by email: it is possible that we will also use meetings to collect responses. For the information you submit, the Commission is the data controller.
Personal information we collect when you reply to this consultation
When you reply to this consultation, we ask you for:
- your name
- email address
- details of your connection to the organisation you represent (if applicable)
Why we ask for this information and what happens if it’s not provided
We collect this personal information because:
- it provides us with some assurance that you’re a real person
- it allows us to respond to your comments e.g. seek any clarification from you
- we may contact you to invite you to discuss further the topic under consultation
We also collect this personal information in order to:
- gather information about the types of individuals and groups participating
If you do not provide this information, we can still take account of your comments although we may consider them to be less persuasive in some circumstances.
How we will process your personal data
We log the data we receive in the consultation responses in our electronic records system. We may acknowledge your response where that is practical and necessary.
Sharing information
We will share your data if we are required to do so by law, for example, by court order or under the Freedom of Information Act (FOIA), or where necessary in order to further our statutory functions and objectives
We may share your data with other organisations which have a direct interest in this consultation: for example, Crown bodies or government departments.
Under FOIA every effort will be made to remove personal data from disclosure where a request is received. We would encourage respondents not to include personal data in the body of a response.
How long we keep your data
We will only retain your personal data for as long as:
- it is needed for the purposes of the consultation
- the law requires us to
In general, this means that we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.
The legal basis for processing your personal data
The table below sets out the primary legal bases we rely on for processing data we obtain through the forms. However, we may process your data further for a compatible purpose and/or on other legal bases - further information about this is available in our main privacy notice.
| Legal basis for processing | |
|---|---|
| Personal Data (Article 6(1) GDPR) | Special Category data/Criminal Conviction data |
| (c) processing is necessary for compliance with a legal obligation to which the controller is subject (e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller |
Article 9(2) GDPR (g) Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject Conditions under Part 2 of Schedule 1 of the Data Protection Act 2018: • Statutory etc and government purposes • Preventing or detecting unlawful acts • Protecting the public against dishonesty etc • Regulatory requirements relating to unlawful acts and dishonesty etc |
Your rights
You have a number of rights under the General Data Protection Regulation (GDPR), including the right to access your data and the right to restrict or object to further processing and the right to complain to the Information Commissioner’s Office (ICO).
You can find out more about your rights as a data subject, and details of how to contact our Data Protection Officer and the ICO, in our main privacy notice.