Materials Facilities privacy notice

The UK General Data Protection Regulation (UK GDPR) includes rules on giving privacy information to individuals in Articles 12, 13 and 14. These are more detailed and specific than in the Data Protection Act and place an emphasis on making privacy notices more transparent and accessible.

A privacy notice must be supplied to the individual at the time they provide Natural Resources Wales with their personal data. The UK GDPR says that the information you provide to individuals about how you process their personal data must be:

concise, transparent, intelligible and easily accessible;
written in clear and plain language, particularly if addressed to a child; and
free of charge

Identity and contact details of the data controller

Natural Resources Wales is the Data Controller and is committed to protecting the rights of individuals in line with UK General Data Protection Regulation (UK GDPR).

Contact details of the Data Protection Officer

Natural Resources Wales has a Data Protection Officer who can be contacted through dataprotection@cyfoethnaturiolcymru.gov.uk or 0300 065 3000.

What information do we collect about you?

We collect personal data from you to enable us to carry out our statutory duties. The personal data we collect is detailed below:

Materials facility operator name
Materials facility permit number
Materials facility name
Materials facility address
Materials facility postcode
Waste supplier name
Waste supplier address
Waste supplier postcode

How will your information be used?

Your data is used by Natural Resources Wales to assess compliance with Schedule 9 of The Environmental Permitting (England and Wales) Regulations 2016 as amended by The Environmental Permitting (England and Wales) (Amendment) Regulations 2023.

The United Kingdom Secretary of State for the Department for the Environment, Food and Rural Affairs acting as the Extended Producer Responsibility for Packaging Scheme Administrator will use your data to support the operation of the Extended Producer Responsibility for Packaging Scheme, administered under the Packaging Waste Regulations 2024.

What is our legal basis for processing your personal data?

Our legal basis for processing your personal data is Public Task - Article 6(1)(e) UK GDPR.

Processing is necessary for compliance with a legal obligation on Natural Resources Wales to monitor compliance with Schedule 9 of The Environmental Permitting (England and Wales) Regulations 2016 as amended by The Environmental Permitting (England and Wales) (Amendment) Regulations 2023.

Who receives your information?

Your data is received into a central email account inbox (waste.returns@cyfoethnaturiolcumru.gov.uk) where it is then processed by the Waste Once in Operations department. The data may also be used by our Operations and Strategy, Policy and Evidence directorates who carry out regulatory activities related to Materials Facilities.

Transfers to third parties and the safeguards in place

Your data will be transferred to the United Kingdom Secretary of State for the Department for the Environment, Food and Rural Affairs acting as the Extended Producer Responsibility for Packaging Scheme Administrator.

The lawful basis for the transfer of your data is that it is necessary:

to perform a task in public interest as part of Extended Producer Responsibility for Packaging (Article 6(1)(e) of the UK GDPR), which is underpinned by the Environment Act 2021 and the 2024 Packaging Regulations; and
for compliance with a legal obligation to which the Scheme Administrator is subject (Article 6(1)(c) of the UK GDPR), being the Packaging Waste Regulations, with such data sharing by the Natural Resources Wales permitted pursuant to The Environmental Permitting Regulations, Schedule 9, Part 2, Chapter 2, Paragraph 8.

All transfer of data will be carried out under and in accordance with a legally binding Data Sharing Agreement, and in compliance with the UK GDPR.

How long will your information be held?

The personal data will be held in accordance with Natural Resources Wales’s retention schedule, no longer than seven years.

Your rights

GDPR gives you a number of rights to be informed about the personal data that we receive and use. Please see this page on individuals' rights for more information.

Any requests or objections should be made in writing to Natural Resources Wales’s Data Protection Officer:

Email: dataprotection@cyfoethnaturiolcymru.gov.uk

Or write to:
Data Protection Officer
Natural Resources Wales
Maes y Ffynnon
Penrhos Road
Bangor
Gwynedd
LL57 2DW

Security of your information

We are committed to doing all that we can to keep your data secure. To prevent unauthorised access or disclosure we have put in place technical and organisational procedures to secure the data we collect about you. We also make sure that any third parties that we deal with have an obligation to keep all personal data they process on our behalf secure.

How to make a complaint

If you are unhappy with the way in which your personal data has been processed you may in the first instance contact Natural Resources Wales’s Data Protection Officer using the contact details above.

If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

www.ico.org.uk

Last updated