Defra's research privacy notice
Updated 4 December 2024
This privacy notice covers most of the social and user research that聽Defra聽carries out.
Defra聽may sometimes carry out social and user research not fully covered by this privacy notice. When this happens,聽Defra聽will provide details of how this research differs when it invites you to take part in the research.
1. Who collects your personal data
Department for Environment, Food and Rural Affairs (Defra) is the controller for the personal data we collect:
Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF
If you need further information about how聽Defra聽uses your personal data and your associated rights you can contact the聽Defra聽data protection manager. Email聽[email protected].
The data protection officer for聽Defra聽is responsible for checking that聽Defra聽complies with legislation. You can contact them by email at聽[email protected].
2. What personal data we collect and how it is used
Defra聽collects your:
- name and contact details
- views and experiences of a topic
- internet protocol (IP) address, if recorded
- kind of device used
We may sometimes ask for more sensitive personal data such as your:
- age
- education or skills
- health or disability
- level of income
- location
- observed behaviour
- race and ethnicity
Your personal data may be used as part of the social and user research that聽Defra聽carries out. For example,聽Defra聽may use personal data to understand how people鈥檚 attitudes and behaviours can differ depending on demographic factors.
Defra聽will give details of what personal data is collected and how it is used when it invites you to take part in the research.
3. Legal basis for processing your personal data
The legal basis for processing your personal data is:
- your consent
- a task carried out in the public interest. This is to allow聽Defra聽to carry out its work as a government department. This may be applicable at a point during the processing, when consent in is no longer the legal basis for processing, for example when your personal data has been incorporated into its analysis and can no longer be identified
4. Legal basis for processing your special category personal data
The legal basis for processing your special category personal data is your explicit consent.
5. Consent to process your personal data
Where the processing of your personal data is based on consent, you can normally withdraw your consent, and have personal data removed. You can do this using the contact details provided by聽Defra聽when you take part in the research.
However, you may not be able to withdraw your consent once聽Defra聽has incorporated it into its analysis. If this is the case,聽Defra聽will tell you when you take part in the research.
6. Who we share your personal data with
Defra聽does not normally share your personal data with third parties. If we need to, we will tell you when we invite you to take part in the research.
7. Information requests
Defra聽respects your personal privacy when responding to access to information requests.
It will only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.
8. Data that has been made anonymous
狈辞谤尘补濒濒测,听Defra聽makes any personal data it shares with third parties anonymous. This may involve removing your personal data or combining it with other data.
Your anonymised information may be shared in the form of:
- academic publications
- presentations
- processed data
- reports
- video clips
9. How long聽Defra聽holds personal data
Defra聽will keep your personal data for up to 3 years after the end of your research session. Data that has been made anonymous may be kept for longer.
Personal data may be deleted earlier if no longer needed for research purposes.聽Defra聽will tell you if this is the case when it invites you to take part in the research.
10. What happens if you do not provide the personal data
Defra聽will not be able to gather your views and experiences. You will not be able to contribute to the specific goals of the research.
11. Use of automated decision-making or profiling
The personal data you provide is not used for:
- automated decision making (making a decision by automated means without any human involvement)
- profiling (automated processing of personal data to evaluate certain things about an individual)
12. Transfer of your personal data outside of the UK
Defra聽will only transfer your personal data to another country that is deemed adequate for data protection purposes.
13. Your rights
Find out about your聽聽under the UK General Data Protection Regulation (UK聽GDPR) and the Data Protection Act 2018.
14. Complaints
You have the right to聽聽to the Information Commissioner鈥檚 Office at any time.
15. Defra鈥檚 personal information charter
Defra鈥檚听personal information charter聽explains more about your rights over your personal data.