Paddy Ashdown
GDPR Privacy Notice
If you send me personal data in my capacity as a Member of the House of Lords, or in my personal capacity, the provisions of the General Data Protection Regulation (GDPR) are likely to apply to it. This notice gives you information I am required to provide under the GDPR, including about the protections for your personal data.
Data Controller
I am the data controller, and can be contacted via pshn21@googlemail.com or by writing to me at the House of Lords, London SW1A 0PW or at Vane Cottage, Norton-sub-Hamdon, Somerset TA14 6SG.
Personal data collected, purpose and legal basis for processing
Personal data collected and purpose
If you provide me with personal data in my capacity as a Member of the House of Lords and a private citizen, I may process it in order to help deal with the questions or issues that you raise in your message.
Legal bases
My processing of your personal data when I first receive it from you is normally done with your consent (see Article 6(1)(a) of the GDPR).
In certain circumstances, if you have not already given it in your message I may need to ask for your explicit consent to do any further processing (for example, emailing a Government Department, or other body about the issue you have raised). This applies particularly where the data is in a special category (for example, information about your health, ethnicity or religious beliefs) (Article 9 of the GDPR).
Similarly, if you have given me personal data about a friend, relative or other person, in certain circumstances I may need to ask for that person’s consent before I can (for example) pass on his or her details to a Government Department or other body.
I may process the personal data you have given me without seeking consent if it is necessary to do so in order to:
carry out a task in the public interest that—
is in the exercise of a function of either House of Parliament, or
supports or promotes democratic engagement (Article 6(1)(e)); or
protect your vital interests or the vital interests of another person referred to in your message (Article 6(1)(d) of the GDPR).
Transfer of personal data
I may share data:
when there is a legal requirement to do so;
so that I can take up your issue with (for example) a Government Department, local authority or other body; or
so that I can speak about the issue in a Parliamentary debate or in some other public forum.
Transfer to third countries
Some data held on Parliamentary IT systems are held outside the UK. These data are predominantly held in data centres within the European Economic Area, for the purpose of hosting and maintenance. If personal data are transferred to third countries outside the EEA, the adequacy of the data protection regimes of those countries and organisations holding the data is assessed to ensure appropriate safeguards are in place.
Retention
I will periodically delete data when I no longer have reason to keep it for the purpose set out in section 2 above.
Data subject rights
Under the GDPR, you have the right to:
access to
rectification of
erasure of
restrict the processing of
object to the processing of
data portability of
your personal data held by me. This is subject to the exceptions in the Data Protection Act 2018. You can contact me for further information about these rights.
Right to withdraw consent
If I have relied on your consent to process personal data about you, you have the right to withdraw it at any time. To withdraw consent, please contact me.
Right to complain
If you are unhappy with my use of your personal data, please let me know.
You also have the right to complain to the supervisory authority if you consider that I am in breach of your data protection rights. The supervisory authority is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. https://ico.org.uk/
Paddy Ashdown