Guidance

ASCA complaints privacy notice

Updated 18 September 2024

This privacy notice explains what data is being collected through the Agricultural Supply Chain Adjudicator (ASCA) office, which sits within the Department of Environment, Food and Rural Affairs (Defra) Agri-Food Chain, and how that data is used.

Who collects your personal data

Defra is the controller for the personal data collected by the ASCA:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

If you need further information about how Defra uses your personal data and your associated rights, you can contact the Defra data protection manager at [email protected] or:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

The data protection officer for Defra is responsible for checking that Defra complies with legislation. You can contact them at [email protected] or:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

What personal data we collect and how it is used

The ASCA will collect the following personal data for regulatory activity, stakeholder engagement in terms of the ASCA to maintain lists of relevant stakeholders and/or contacts with whom communication may be required, newsletter and event subscription and responding to consultations or research:

• your name
• correspondence address
• telephone number
• mobile number
• email address
• details of the matter raised

Lawful basis for processing your personal data

The lawful basis for processing your personal data is ‘public task’. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Who we share your personal data with

The ASCA will not share your data with any other organisation. However, from time to time, we may share your data with third-party legal resources and the Groceries Code Adjudicator. Your data will be shared under appropriate safeguards to such third parties engaged by the ASCA to assist with regulatory functions.

We respect your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.

Consent to process your personal data

The processing of your personal data is not based on consent. You cannot withdraw it.

How long we hold your personal data

The ASCA will keep your personal data in line with Defra’s retention schedule.

The ASCA has in place a records management policy which ensures retention periods are appropriate to the types of data collected. At the end of the relevant retention period your personal data will be disposed of securely.

If you have subscribed to an email alert or subscription service, the ASCA will keep your personal data for as long as you are subscribed to that service. If you make a request to be removed from this service, then your personal data will be disposed of securely.

What happens if you do not provide the personal data

If you do not provide the personal data, we will not be able to process your complaint.

Use of automated decision-making or profiling

The personal data you provide is not used for:

• automated decision making (making a decision by automated means without any human involvement)
• profiling (automated processing of personal data to evaluate certain things about an individual)

Transfer of your personal data outside of the UK

Your personal data will not be transferred outside of the UK.

Your rights

Find out about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

Personal information charter

Our personal information charter explains more about your rights over your personal data.