Privacy policy.
As a candidate for the leadership of Welsh Labour, I and my campaign staff and volunteers correspond with Labour Party members and supporters to engage with their views on my leadership campaign and the issues facing Welsh Labour and Wales and to encourage them to support and participate in my campaign.
This document explains how I collect and use personal data arising from this correspondence, the legal basis for doing so, and explains your rights in relation to your personal data.
As the holder of that data I am the Data Controller. As a candidate, my paid and volunteer staff will also have access to limited data in order to ensure the effective running of my campaign. This policy will therefore reference “we”, to include me as candidate, as well as my paid and volunteer campaign staff.
As a candidate I also (once nominated) have access to other information which I or my paid or unpaid campaign staff, may use for communicating with Labour Party members. The Data Controller for that information is most likely the national Labour Party whose privacy policy can be found here: (https://labour.org.uk/privacy-policy/)
Data collection and use
Policy enquiries, expressions of support and offers to assist with my campaign bring with them personal data provided by or on behalf of the individual. This personal data may include, but is not limited to: name, address, email address, telephone number.
It may also include ‘Special Category’ data which is usually considered more private and sensitive. Special Category data relates to a person’s racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data; biometric data (where used for identification purposes); health; sex life; sexual orientation.
We will only collect and use personal data for the specific purpose for which it has been provided. We will only use Special Category data where we have both a legal basis to do so, as well as an additional condition to process.
We will not transfer your data beyond the EEA unless we have implemented appropriate safeguards, which are likely to be Standard Contractual Clauses, or where an “adequacy decision” has been granted by the appropriate authorities.
Who do I share your personal information with?
When processing your correspondence, we will only share your information with a third-party organisation where it is necessary and reasonable to do so.
Third-parties, include but are not limited to: system providers (with appropriate agreements or contracts in place).
We will only share as much information as is necessary.
We will never share or sell your personal data to other organisations for direct marketing purposes.
Lawful basis for processing
Personal data is processed for one or more of the following lawful bases:
where we have your consent to do so (UK GDPR Article 6 (1) (a)),
where we have a contract to do so (UK GDPR Article 6 (1) (b)),
where we have a legal obligation to do so (UK GDPR Article 6 (1) (c)),
where the we need to process personal data to protect someone’s vital interests (UK GDPR Article 6 (1) (d)),
where we need to for the purposes of our public task (UK GDPR Article 6 (1) (e)),
where the processing is in our legitimate interests and not overridden by your rights (UK GDPR Article 6 (1) (f)).
Retention of personal data
We will only retain your personal information for as long as it is necessary to meet the aims of my leadership campaign and any future related campaigns.
If you wish to exercise your rights to erasure, you are welcome to do so. Please see the ‘Your rights’ section for more information.
Security of your Data
We are committed to processing and retaining data within established technological and physical controls in a transparent manner, as well as promoting and safeguarding the information rights of data subjects.
Our procedures ensure that technological and physical controls are in place that guarantee the privacy of data subjects, the security of data held on technological systems is processed according to an established lawful processing condition. Any such procedures will be reviewed as necessary and updated to ensure their effectiveness in line with advances in technology.
Links to other websites
Correspondence from my campaign may provide links to other websites. We are not responsible for the content or privacy practices of these websites.
Donating to the Campaign
If you wish to make a donation to my campaign. the information we ask for will be used to process your donation and, if you donate more than £500, to check that you are on the electoral register which is a legal requirement under the Political Parties, Elections and Referendums Act 2000. If you donate more than £1,500 in the course of a calendar year, your name and the amount of your donation will be reported to the Electoral Commission for publication on their public register of donations to Vaughan Gething. Your donation will also be reported on the Senedd’s Register of Members’ Interests as required by their rules which may change over time. Donation information will be stored and used to keep you informed of news, campaign, and other opportunities to support me.
Your rights
You have the following rights in relation to your personal information. Should you wish to exercise these rights, please contact the Campaign Office (contact details below):
Where we are relying on your consent to use your personal data, you can withdraw that consent at any time – “right to object”
You can request access to the personal data we hold about you at any time – “right of access”
You can ask us to update your personal data if it changes. In certain circumstances, you can request we erase the personal data we hold, or ask us to stop or restrict processing if you have an objection – “right to rectification.”
You can request deletion of the personal data we hold about you at any time – “right to erasure.”
You can request we restrict processing of the personal data we hold about you at any time – “right to restrict processing”
If you wish to exercise your rights in respect of your personal data or have any questions about how your data is used, please contact: Vaughan Gething’s Campaign, Tramshed Tech, Unit D, Pendyris Street, Cardiff CF11 6BHor email campaign@vaughanforleader.Cymru.
Alternatively you have the right to raise any issues or concerns directly with the Information Commissioner’s Office, at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or through www.ico.org.uk