Our full Privacy Notice is also available
How your information will be used
The Senedd Commission is the data controller of the information you provide and will ensure it is protected and used in line with data protection legislation.
Our Contact Details
Any queries regarding our use of your information should be sent to the Data Protection Officer at: data.protection@senedd.wales
0300 200 6565
What we want from you?
Sam Rowlands, who is a Member of the Senedd, is carrying out a consultation on a proposal for a new law in Wales. You can tell Sam your ideas by:
- Filling in a questionnaire.
- Playing the ropes and ladders game.
- Drawing a picture about how you feel when you are doing outdoor education.
Why are we collecting it?
All the ideas and responses we collect will help Sam to write the new law. It will also help people understand what the new law could do.
Who will have access to the information?
The information and ideas you provide will be available by Sam Rowlands, and also by the people working with Sam in the Senedd to help write the new law.
Will the information be shared with any third parties, or publicised?
We will usually publish all consultation responses on the Senedd website, but we would not publish your name. We will not share your name or any other details with any other third party without first asking you to agree.
Submissions that are not suitable for public disclosure?
If there are specific reasons to you, you can also ask for the information you provide to be kept private. This can be all of the information or ideas you send in, or just parts of it. In these cases, the private information will still be looked at by Sam Rowlands and those helping him, but it would not be published.
Where will the information be stored?
The information will be stored securely on our ICT systems which includes third party cloud services provided by Microsoft. Any transfer of data by Microsoft outside of the EEA is covered by contractual clauses under which Microsoft ensure that personal data is treated in line with domestic legislation. To find out more about how Microsoft will use your information, you can read their privacy statement here.
How long will the information be retained?
Anything that is published will stay in the public domain.
How will the information be disposed of?
Information that has not been published will be securely deleted/disposed as part of the routine data cleansing by Commission Staff at the end of the Sixth Senedd (which is due to come to an end in April 2026).
Our legal bases for collecting, holding and using your personal information
Data protection law sets out various legal bases which allow us to collect, hold and use your personal information. For the purpose of processing the personal data you provide, we rely on the following legal bases:
The processing is necessary for the performance of a task carried out in the public interest
Special category personal data
We may process special category personal data if you choose to provide any. Special category personal data is defined as including data revealing racial or ethnic origin, religious or philosophical beliefs, sexual orientation and data about health.
Your rights
As a data subject, you have a number of rights. The rights which apply depend on the legal bases we are relying on to use your personal information. Those rights will not apply in all instances, and the Commission will confirm whether or not that is the case when you make a request.
The rights include the right to request access to your own personal information, sometimes called a ‘subject access request’.
Additionally, you have the right to request from us:
- that any inaccurate information we hold about you is corrected (please note that you are required to keep us up to date with any changes to your personal information);
- that information about you is deleted (in certain circumstances);
- that we stop using your personal information for certain purposes or in certain circumstances; and
- that your information is provided to you or a third party in a portable format (again, in certain circumstances).
If you would like to engage any of the rights that you have under data protection legislation, ask a question or make a complaint about how your information is used; please contact the Data Protection Officer using one of the methods set out at the above.
Requests for information made to the Commission
In the event of a request for information being made under access to information legislation, it may be necessary to disclose all or part of the information that you provide. We will only do this if we are required to do so by law.
How to complain
You can complain to the Data Protection Officer if you are unhappy with how we have used your data. Contact details can be found above. If, following a complaint, you remain dissatisfied with our response, you can also complain to the ICO.
The ICO’s address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire