Research and analysis

Department for Culture, Media and Sport privacy notice for the Culture Recovery Fund

Updated 16 October 2023

Who is collecting my data?

The Department for Culture, Media & Sport (DCMS) helps to drive growth, enrich lives and promote Britain abroad.

We protect and promote our cultural and artistic heritage and help businesses and communities to grow by investing in innovation and highlighting Britain as a fantastic place to visit. We help to give the UK a unique advantage on the global stage, striving for economic success.

This website (“Website“) is run by the Department for Culture, Media & Sport (“we” and “us“, “DCMS“). DCMS is the controller for the personal information we process, unless otherwise stated.

Purpose of this privacy notice

This notice is provided within the context of the notice provided to meet the obligations as set out in Articles 13 and 14 of the UK GDPR. This notice sets out how we will use your personal data as part of our legal obligations with regard to Data Protection.

The Department for Digital, Culture, Media & Sport’s personal information charter (opens in a new tab) explains how we deal with your information. It also explains how you can ask to view, change or remove your information from our records.

Privacy policies of other websites

The Culture Recovery Fund was delivered in partnership with a number of Arm’s Length Bodies. Their privacy notices are available on their respective websites, as follows:

What is personal data?

Personal data is any information relating to an identified or identifiable natural living person, otherwise known as a ‘data subject’. A data subject is someone who can be recognised, directly or indirectly, by information such as a name, an identification number, location data, an online identifier, or data relating to their physical, physiological, genetic, mental, economic, cultural, or social identity. These types of identifying information are known as ‘personal data’. Data protection law applies to the processing of personal data, including its collection, use and storage.

What personal data do we collect?

Most of the personal information we collect and process is provided to us directly by you. This includes:

  • Your name and contact details if you e-mail the DCMS Culture Recovery Fund team directly.

We also receive personal information indirectly, from the following sources in the following scenarios:

  • Arts Council England, National Lottery Heritage Fund, Historic England, British Film Institute.

  • These organisations share core grant and loan application data with DCMS. This is almost exclusively non-personal data. However, in a very small number of cases the name of an individual is included in this data.

  • Grant and loan application case-work in some cases includes the names of individuals.

How will we use your data?

We use personal information for a wide range of purposes, to enable us to carry out our functions as a government department. This includes:

  • To carry out aggregated analysis of grant and loan applications (e.g. by geography or cultural sub-sector);

  • To publish anonymised aggregated analysis of grant and loan applications (e.g. by geography or cultural sub-sector) - such publications will not include any personal data, and data will be excluded where numbers are so low it could impact anonymity (e.g. where application numbers within particular categories are very low and therefore could identify organisations);

  • To contact organisations about departmental or ministerial engagement, or about the acknowledgment of their grant; and

  • to inform DCMS officials to advise ALBs or comment on high-profile issues relating to the Culture Recovery Fund.

To process this personal data, our legal reason for collecting or processing this data is: Article 6(1) (e): it is necessary for the performance of a task carried out in the public interest.

In particular, processing the Culture Recovery Fund application data allows DCMS to ensure public understanding and transparency regarding this policy, and allows DCMS to use the data to inform high quality evidence-based policy-making.

The lawful basis that we rely on to process your personal data will determine which of the following rights are available to you. Much of the processing we do in DCMS will be necessary to meet our legal obligations or to perform a public task. If we hold personal data about you in different parts of DCMS for different purposes, then the legal basis we rely on in each case may not be the same

Who will your data be shared with?

We may share this information with other Government departments, with the Culture Recovery Fund evaluators, and (until its dissolution in May 2022) members of the Culture Recovery Board. As set out above, we will publish anonymised aggregated analysis of grant and loan applications (e.g. by geography or cultural sub-sector) on gov.uk. These publications will not include any personal data, and data will be excluded where numbers are so low it could impact anonymity (e.g. where application numbers within particular categories are very low and therefore could identify organisations).

How long will my data be held for?

We will retain your personal data for 7 years in line with DCMS retention policy.

Will my data be used for automated decision making or profiling?

We will not normally use your data for any automated decision making. If we need to do so, we will let you know.

Will my data be transferred outside the UK and if it is how will it be protected?

We will not send your data beyond the European Economic Area. If we need to do so, we will let you know.

Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices of the other websites you visit.

What are your data protection rights?

You have rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). The Information Commissioner’s Office (ICO) is the supervisory authority for data protection legislation, and maintains a full explanation of these rights on their website

DCMS will ensure that we uphold your rights when processing your personal data.

How do I complain?

To discuss the Culture Recovery Fund further or make a complaint please contact:


Culture Recovery Fund
The Department for Culture, Media & Sport
100 Parliament Street
London
SW1A 2BQ

Or e-mail: [email protected]

The contact details for the data controller’s Data Protection Officer (DPO) are:


Data Protection Officer
The Department for Culture, Media & Sport
100 Parliament Street
London
SW1A 2BQ

Or e-mail: [email protected]

If you’re unhappy with the way we have handled your personal data and want to make a complaint, please write to the department’s Data Protection Officer or the Data Protection Manager at the relevant agency. You can contact the department’s Data Protection Officer using the details above.

How to contact the Information Commissioner’s Office

If you believe that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. You may also contact them to seek independent advice about data protection, privacy and data sharing.


Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

Telephone: 0303 123 1113

Email: [email protected]

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Changes to our privacy notice

We may make changes to this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, DCMS will take reasonable steps to let you know.

This notice was last updated on 06/04/2023.