Natural Resources Wales Stakeholder Audit: Privacy Notice

How we hold and process your information

Wavehill are undertaking research on behalf of Natural Resources Wales (NRW). The information gathered is used to help Natural Resources Wales understand how the organisation is perceived by stakeholders and to inform future external communication and stakeholder engagement strategies.

Participation in the research is voluntary. You can decide to not take part before or during the research and can choose to not answer certain questions if you prefer.

Although the research doesn’t ask for personal data relating to individuals, through collected data relating to job role individuals may be identifiable. However, your answers will not be made public in a way that could lead to you or your organisation being identified. Wavehill will produce a report based on the data for internal use with NRW’s external affairs team but this will not identify any individuals via their job role or be shared more widely across NRW. Any personal data collected as part of the research is kept confidential and all personal data is deleted by Wavehill in six months.

Where contact details are provided for further research, this will be shared with NRW who will retain this information for 18 months. This is to enable NRW to contact research participants at a later date for voluntary involvement in follow-up research. At the end of the 18 month period, NRW will either delete the data or contact data subjects to discuss extending the retention period.

All information collected is only used for research purposes.

The anonymised data is held securely and is only ever used for non-commercial research purposes. We do not share or use your information for commercial or marketing purposes. Wavehill will share the final dataset with NRW for future analysis, however any personal data or identifiable information will be removed.

If you have any questions, please contact enquiry@wavehill.com.

Under the data protection legislation, you have the right:

• To access your personal data held by NRW.

• To require NRW to correct any mistakes in that data.

• To (in certain circumstances) object to or restrict processing.

• For (in certain circumstances) your data to be ‘erased’.

Please contact enquiry@wavehill.com if you wish to do any of these things.

If you have any concerns about how your data has been handled, you can lodge a complaint with the Information Commissioner’s Office who is the independent regulator for data protection.

You can contact the Information Commissioner’s Office on 01625 545 745 or 0303 123 1113, via the website www.ico.org.uk or write to: Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Further information

1.    What is the purpose of the audit?

Natural Resources Wales has engaged Wavehill to conduct a baseline stakeholder perceptions audit. This will be the first formal assessment of how NRW is perceived by its stakeholders and will inform the development of a more strategic, coordinated approach to stakeholder management across the organisation.

2.    What type of information is collected through the research?

The research covers a wide range of topics. These include:

• The profile of stakeholder organisations

• How NRW is perceived by stakeholders

• How NRW could strengthen its external affairs and stakeholder engagement approach

3.    What is personal data?

Personal data means any information that could lead to a person being identified either alone or in combination with other widely-available information, e.g. their name, their address, or details specific to that person.

Any personal data collected will be anonymised and will not be made public in a way which will lead to either you or your organisation being identified.

4.    How long does Wavehill keep personal data for?

Wavehill will keep personal data for 6 months. Where contact details are provided for further research, this will be shared with NRW who will retain this information for 18 months.

5.    What is the legal basis for collecting and processing the data collected? 

Public Task.

6.    Who has access to the personal data collected through the research?

Wavehill and NRW will have access to the anonymised data collected through the research.

Int. Ref. 912-25