Flood Warning Information Services for Wales privacy notice
Data Controller
Natural Resources Wales (NRW) is the Data Controller of the Flood Warning Information Service for Wales and is committed to protecting the rights of individuals in line with General Data Protection Regulation (GDPR).
Data Protection Officer
Natural Resources Wales has a Data Protection Officer who can be contacted through dataprotection@cyfoethnaturiolcymru.gov.uk or 0300 065 3000
Information we collect about you
This privacy statement explains how we collect and use your personal information for the purposes of providing you with our flood warning information service, including Floodline.
To send flood warnings to our customers and provide the Floodline service, we collect some or all the following information:
- Name
- Address for correspondence (postal and email)
- Address of property at risk of flooding
- Name of your business / organisation and your job title
- Telephone number
- Email address
- Password
- Welsh or English language preferences
- History of flooding
We obtain permission to collect and process this information when customers register to the flood warning information service. We obtained permission to collect and process this information when customers registered for the previous flood warning service.
Customers can cancel their registration at any time, after which we will store personal information securely for six years.
It is important that we retain this information for six years after cancellation because this allows us undertake post event analysis which, in turn, allows us to improve our service.
You may request your personal information to be completely removed from the system.
Cookies and analytics
Read our cookie notice to find out how we use cookies.
How your information will be used
We may use your personal information to:
- send you flood warning messages that enable you to act to reduce the impact of flooding on yourself, people in your care and to your property
- contact you with a small number of service announcements or administrative messages about our service
- help with our work on flood warning and flood risk management
- respond to complaints/enquiries
- some of your data may be shared with the emergency services and local authorities to help them respond to flooding
We may give your information to our agents or representatives (Floodline), so they can do any of these things on our behalf.
Our legal basis for processing your personal data
Natural Resources Wales is required to provide the flood warning service under the Water Resources Act 1991. This requires the collection of your data so that we can send flood warnings to you.
The Civil Contingencies Act 2004 requires Natural Resources Wales to:
- share information with other local responders to enhance co-ordination
- co-operate with other local responders to enhance co-ordination and efficiency
Who receives your information
Call operators who provide our Floodline service will also have access to your information so that they can assist you if required.
We may share personal information with Category 1 responders (as defined in the Civil Contingencies Act 2004) in the event of a risk to life flood.
How long your information will be held
If your flood warning registration is cancelled for any reason, your data is stored for six years to allow us opportunity for post flood analysis.
Your individual rights
You have a right to access your personal information, to object to the processing of your personal information, to rectify, to erase, to restrict and to port your personal information. Please visit our Data Protection webpages for further information in relation to your rights.
Any requests or objections should be made in writing to NRW’s Data Protection Officer:
Email – dataprotection@cyfoethnaturiolcymru.gov.uk
Data Protection Officer
Natural Resources Wales
Maes y Ffynnon
Penrhos Road
Bangor
Gwynedd
LL57 2DW
Security of your information
Your data will be stored in secure computer systems operated by NRW ICT in data centres in the West Europe region (Dublin) and North Europe region (Amsterdam) on our behalf.
No data is transferred outside of the EU. Access to these systems is carefully managed and limited to trained NRW employees and Floodline agents only.
How to make a complaint
If you are unhappy with the way in which your personal data has been processed, you may in the first instance contact NRW’s Data Protection Officer using the contact details above.
If you remain dissatisfied, then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF
Changes to this policy
We may change this privacy notice. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy notice will apply to you and your data immediately.
We encourage you to review this privacy notice regularly to find out how we are protecting your data.