Public Health Wales and their public sector partners (The Welsh Government, local authorities and Health Boards in Wales) are data controllers for any personal data it collects, and any personal data which is shared with them by UK Government under the Homes for Ukraine scheme.
The purpose of this privacy notice is to tell you how Public Health Wales and partners will process your personal data for their shared purposes to deliver the scheme and the common objective of providing homes to those fleeing the war in Ukraine. You have rights concerning how your data is processed. We inform you here what those rights are and how you can exercise them.
Public Health Wales and partners are committed to protecting the privacy and security of your personal data. As the organisations have distinctive statutory responsibilities and accountabilities, they may publish separate privacy notices where appropriate which further explain how your personal data is used for their respective purposes.
We are only allowed to use, gather, and share personal information where we have an appropriate legal basis to do so. We only collect and process personal information to fulfil our legal and official functions. We will only use personal information when the law allows us to and where it is necessary and proportionate to do so.
Your personal data is being processed and used for the purpose of supporting Ukrainian citizens during the arrival process and for the duration of any sponsorship arrangements in Wales. This will include monitoring health screening services for those arriving in Wales. The data we process includes:
Your name, address, contact details, demographic data, visa status, housing status and the details of your travelling party.
We will be sharing data with third parties, such as public sector partners in Wales and with UK Government. The public sector partners include:
Personal data provided to us is stored on secure servers. Personal, identifiable data shared with our public sector and other partners will only be transferred using accredited secure data transfer systems. Only data necessary for the delivery of support to Ukrainian citizens will be shared.
Personal identifiable data held by Public Health Wales will be retained for the duration of the sponsorship scheme, and for a period of six afterwards. Data may be retained for longer periods, including by our public sector partners, where there is a statutory obligation or ongoing requirement to do so. The data will be securely destroyed once it is determined that it is no longer required.
We are using the following lawful basis under UK GDPR to process personal data:
Article 6(1)(e) of the UK GDPR – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
We may also process special categories of personal data which may include information about political beliefs, health, sexual orientation, religious beliefs, and biometrics. Where we do so our lawful basis is:
Article 9(2)(g) of the UK GDPR – processing is necessary for reasons of substantial public interest.
Article 9(2)(h) of the UK GDPR - Provision of preventative or occupational medicine, health or social care or treatment, or the management of health or social care systems
Article 9(2)(i) of the UK GDPR - processing is necessary for reasons of public interest in the area of public health
Under GDPR, you have the following rights in relation to the personal information you provide us to enable to support you, specifically you have the right:
The contact details for the Information Commissioner’s Office are:
Phone: 01625 545 745 or 0303 123 1113
Information Commissioner’s Office website
If you have any further questions about how the data provided will be used by the Welsh Government or wish to exercise your rights using the General Data Protection Regulation, please contact the Public Health Wales’s Data Protection Officer at:
Public Health Wales
Capital Quarter 2