This notice sets out how CCW will use respondents’ personal data for the purposes of this consultation and explains their rights under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA).

The data controller for any personal data collected as part of this consultation is CCW, the contact details for which are CCW, 23 Stephenson Street, Birmingham, B2 4BH

The data – data subject categories

This consultation is open to all interested persons and organisations. Therefore, personal information that we will collect could relate to members of the public, parliamentarians, and representatives of organisations and companies.

The data we will collect – data categories

Information will include the name, address, email address, job title and where relevant the employer of the correspondent, as well as their opinions and answers to the questions posed by this consultation. It is possible respondents may volunteer additional identifying information about themselves or third parties.

Legal basis of processing

The processing we will conduct is necessary for the performance of a task carried out in the public interest – namely, consulting on policies or proposals, or obtaining opinion data, in order to develop good and effective policies.

Special data categories

Although not being requested, it is possible that special category data may be processed if such data is volunteered by the respondent.

Legal basis for processing special category data

If special category data is volunteered the legal basis relied upon for processing will be explicit consent of the data subject.


The personal information collected will be processed in order to obtain the opinions of interested persons and organisations about CCW’s policies, or generally to obtain public opinion data on an issue of public interest.

With whom we may share responses – and confidential information

Information provided in response to this consultation may be published or disclosed in accordance with the access to information regime. These are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act 2018 (DPA) and the Environmental Information Regulations 2004 (EIR).

If a respondent wishes the information they provide to be treated as confidential, please be aware that under the FOIA there is a statutory code of practice with which public authorities must comply. It deals with, amongst other things, obligations of confidence.

In view of this it would be helpful if respondents could explain to CCW why they regard the information they have provided as confidential. If we receive a request for disclosure of the information, we will take full account of the reasons provided, but we cannot give an assurance that confidentiality can be maintained in all circumstances. An automatic confidentiality disclaimer generated by your IT system will not, of itself, be regarded as binding on CCW.

Where someone provides special category personal data or personal data about third parties, we will endeavour to delete that data before any publication takes place.

How we will use your response

When the consultation has closed we will analyse the responses. When we publish the final Strategy, in March 2022, we will publish the responses we received in full unless you ask us not to (see paragraph 11 above). We will not include personal details but will include, where appropriate, the name of organisation represented unless you ask us not to.

How long we will retain data provided

For this consultation CCW will keep your personal data (if provided) for a period of 1 year after the close of the consultation.

Your data and rights

Your personal data:

  • will not be sent outside of the European Economic Area
  • will not be used for any automated decision making
  • will be kept secure

Rights of respondents

Respondents have the following rights in relation to this consultation:

  • access personal data relating to you
  • have all or some of your data deleted or corrected
  • prevent your personal data being processed in some circumstances
  • ask us to stop using your data, but keep it on record

If you would like to exercise any of these rights, please contact or the use address at paragraph 2 above.


If a respondent has any concerns about the use of their personal data, they should contact our Data Protection Officer at

If we are unable to address your concerns to your satisfaction, you can make a complaint to the Information Commissioner, the UK’s independent regulator for data protection – Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or