188体育

Your data is being collected by聽

The data controller is the Department for Environment, Food and Rural Affairs (Defra) for personal data that you give to APHA.听

APHA is an Executive Agency of Defra.听You can contact 础笔贬础鈥檚 Data Protection Manager by email at: [email protected].听

APHA also works with the Scottish Government and Welsh Government, who are joint controllers with APHA for any relevant personal data.听

Any questions about how Defra or APHA is using your personal data and your associated rights should be sent to the above contact.听

The Data Protection Officer responsible for monitoring that Defra or APHA is meeting the requirements of the legislation can be contacted by email at: [email protected].听

What personal data is collected聽

We collect the following items of personal data:聽

• 苍补尘别听

• contact details聽

• details of the CITES specimen for which you are the new owner and or keeper聽

• the previous owner or keepers Name and Address聽

• the reason for which ownership was transferred聽

How your personal data has been obtained, if from a third party聽

By completing this gifting declaration, you have provided the data outlined above. If you are the original keeper of the specimen, this information will only be stored to verify legal acquisition when or if the recipient of the gifted specimen has applied for a commercial use certificate under Article 8 of Council Regulation (EC) No 338/97. This information will be stored securely alongside your application within the Pegasus system and retained in accordance with our retention policy. You can find more information from 础笔贬础鈥檚 personal information charter.

The legal basis for processing your personal data聽

The lawful basis for processing your personal data is a public task. This means that the processing of your data is necessary in order for APHA to perform a task in the public interest or for official functions, whereby the task or function has a clear basis in law. Processing your personal data is necessary to prove legal acquisition of an Annex A CITES Listed specimen which is a requirement of the CITES convention and laid down by law in Council Regulation (EC) No 338/97 when applying for a commercial use certificate (Article 10 certificate) under Council Regulation (EC) No 338/97 Article 8.听

Consent to process your personal data聽

The processing of your personal data is based on consent. You can withdraw consent at any time by emailing [email protected].

Who APHA shares your personal data with聽

We may share the personal data collected under this privacy notice with:聽

• UKMA Scientific Authorities, Joint Nature Conservation Committee (JNCC) and Royal Botanic Gardens Kew聽

• HM Revenue and Customs under the provisions of Article 14 of regulation 338/97聽

• The Police and National Wildlife Crime units for the purpose of gathering and analysing intelligence on possible wildlife crimes聽

We respect your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.听

Consequences of not providing the necessary data聽

Not providing this data may impact the ability to prove legal acquisition and therefore your ability to obtain an Article 10 certificate for commercial use of the specimen under Council Regulation (EC) No 338/97.听

Personal data used for automated decision making or profiling聽

The personal data you provide is not used for:聽

• automated decision making (making a decision by automated means without any human involvement)聽

• profiling (automated processing of personal data to evaluate certain things about an individual)聽

Storing and using personal data outside the UK聽

We will only transfer your personal data to another country that is deemed adequate for data protection purposes.听

How long APHA holds personal data for聽

Retention periods are set by considering statutory, regulatory, legal, and security reasons, alongside historic value.

The CITES retention policy is 7 years from the date at which the import or export permit has been used, expired, or cancelled or from the point at which the certificate fulfilled its purpose. For Article 10 certificates, this can mean that information is held for the duration of that specimen鈥檚 life span.

All information in APHA is held in accordance with our retention policy. If you would like more information, please contact [email protected].

Your rights聽

The lawful basis for processing your data is public task, set out in article 6 of the UK GDPR. Find out about your rights under data protection law here: .

More information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 can be accessed on the .

颁辞尘辫濒补颈苍迟蝉听

You have the right to lodge a complaint about the use of your personal data at any time with (ICO 鈥� the data protection supervisory authority) personal information charter.

础笔贬础鈥檚 personal information charter broadly sets out details of鈥疍efra鈥檚 processing of personal data.