First published 30 July 2025
Our contact details
Any queries regarding our use of your information should be sent to the Data Protection Officer at:
0300 200 6565
How will your information be used?
The Senedd Commission is the data controller of the information you provide and will ensure it is protected and used in line with the UK’s data protection legislation.
This is a supplementary privacy notice reflecting the submission of consultation responses through the medium of British Sign Language (‘BSL’). It should be read alongside the Senedd Committee Privacy Notice.
What information are we processing?
In addition to the information outlined in the Senedd Committee Privacy Notice, we will be processing your video submission of your BSL response. Our initial processing of the video submission will be to provide our translator with a copy of it.
Once translated, both your original video submission, and the translation will be processed in the same manner as a written submission as outlined in the Senedd Committee Privacy Notice and published on the Senedd Committee’s website.
Why are we processing it?
To provide individuals with an equal opportunity to respond to a Senedd committee consultation using BSL if this is their preferred method of communication.
Who will have access to the information?
Access to your submission will be in line with the Senedd Committee Privacy Notice.
Will the information be shared with any third parties, or publicised?
In order to allow the Clerking Team to understand the content of your response, we have engaged the services of a professional BSL translation service provided by Helen Foulkes. Helen will have access to your consultation response as submitted in order for her to provide an accurate translation back to the Senedd Commission.
For information about how Helen handles and processes personal data, please refer to her privacy information found here: Privacy Policy — HFT
Both the original video submission and the translation will be published in response to the BSL Bill consultation on the Senedd Commission website in line with the Senedd Committee Privacy Notice.
Storage, retention and deletion
The information will be stored securely on our ICT systems which includes third party cloud services provided by Microsoft. We may also use of Microsoft’s artificial intelligence tools to process your information. Any transfer of data by Microsoft outside of the EEA is covered by contractual clauses under which Microsoft ensure that personal data is treated in line with domestic legislation. To find out more about how Microsoft will use your information, you can read their privacy statement here.
We will retain a copy of both your original BSL submission and the translated version in line with the Senedd Committee Privacy Notice.
As a record of the translation work Helen Foulkes may retain a copy of your submission and any translated materials generated from it for up to 1 year beyond the Senedd’s consideration of the subject matter.
Legal basis for processing Personal Data
Data protection law sets out various legal bases which allow us to collect, hold and use your personal information. For the purpose of processing the personal data you provide, we rely on the processing being necessary for the performance of a task carried out in the public interest. The task is to facilitate the work of a parliamentary committee to undertake its democratic function of scrutinising the Welsh Government and representing the people of Wales, and ensure that the committee can carry out its function in line with the principle that there should be equality of opportunity for all people.
It will also be necessary for the Commission to communicate and promote the work of the Senedd and engage with the people of Wales to enable the Senedd to carry out its work as effectively as possible. Communicating and engaging with the people of Wales enables the Senedd to consider the views of the people it represents when making decisions. It also serves the wider purpose of facilitating activities that support or promote democratic engagement.
We may process personal data relating to criminal convictions and offences if you choose to provide any, for example as part of evidence submitted in response to a committee’s call for evidence. This will be processed on the basis that it is necessary for the performance of a task carried out in the public interest, read in conjunction with section 10 of, and paragraph 6 of Schedule 1 to, the Data Protection Act 2018.
Legal basis for processing Special Category Data
Article 9(1) GDPR defines special category personal data as including personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Special category data will usually be processed on the basis that it is necessary for reasons of substantial public interest (as provided for by Article 9(2)(g) of the UK GDPR, read in conjunction with paragraph 6 of Schedule 1 to the Data Protection Act 2018).
Sharing data
In the event of a request for information being made under access to information legislation, it may be necessary to disclose all or part of the information that you provide. We will only do this if we are required to do so by law.
Your rights
As a data subject, you have a number of rights. The rights which apply depend on the legal bases we are relying on to use your personal information. Those rights will not apply in all instances, and the Commission will confirm whether or not that is the case when you make a request.
The rights include the right to request access to your own personal information, sometimes called a ‘subject access request’.
Additionally, you have the right to request from us:
- that any inaccurate information we hold about you is corrected (please note that you are required to keep us up to date with any changes to your personal information);
- that information about you is deleted (in certain circumstances);
- that we stop using your personal information for certain purposes or in certain circumstances; and
that your information is provided to you or a third party in a portable format (again, in certain circumstances).
If you would like to engage any of the rights that you have under data protection legislation ask a question or make a complaint about how your information is used.
Making a complaint
You can complain to the Data Protection Officer if you are unhappy with how we have used your data. Contact details can be found above.
If, following a complaint, you remain dissatisfied with our response, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113