GDPR procurement privacy notice

Background

The data protection legislative landscape is changing and will impact on the way we all manage and deal with our information. The council needs to ensure it is compliant with all data protection legislation and this includes updating existing contracts.

For contracts that involve the sharing of personal or sensitive information, there is a need to identify:

• Subject matter of the processing
• Type of personal data
• Any special categories
• Categories of data subject
• Nature and purposes of the processing
• Duration of the processing
• Plan for return or destruction of the data once the processing is complete
• Data Protection Officer
• How the data is stored and secured

Current contracts

The council has a key requirement to identify all current 'active' contracts/suppliers where data sharing and data asset sharing exists and ensure they are updated to be compliant with the current data protection legislation.

New procurement activity

The council is in the process of updating all standard terms of contracts with the new data protection legal requirements. It has already developed some UK GDPR supplementary terms that will be issued as an addendum to the current standard terms until the update work is complete. These will be provided within the request for quotation / tender pack through the council's e-procurement portal.

Procurement Privacy Notice

Who is the data controller?

Wiltshire Council is the data controller for the personal information you provide in this form. The Council's Data Protection Officer can be contacted at InformationGovernance@wiltshire.gov.uk (opens new window).

What is the data being used for?

The Strategic Procurement Hub will use your personal information in one or all of the following activities: market development, procurement, contracting and contract management. This is to ensure and evidence that the council is compliant with its statutory duties and enable it to deliver the required goods, services and works in accordance with the terms of the contract.

Who will the data be shared with?

We will share your personal data where necessary and lawful within the Council, but we will not share your data with any other third parties unless we are required or permitted to do so by law or in accordance with the terms of the contract.

Full privacy notice

For further information about how Wiltshire Council uses your personal data, including your rights as a data subject, please see our Privacy notice on the website.