Participation Survey Privacy Notice

TheThis DepartmentPrivacy forNotice Culture,explains Media,who is processing your data, the personal data we collect, how we use it, who we share it with, and Sportwhat (DCMS)your withlegal fundingrights fromare.

The ArtsDepartment Councilfor EnglandCulture, (ACE)Media, haveand Sport (DCMS) has commissioned Verian (formerlyGroup Kantar(“Verian”) Public) to carry out the Participation Survey.

TheIn February 2023, the Department for Digital, Culture, Media and Sport (DCMS)underwent is currently undergoing a Machinery of Government (MOG) change, whereby the responsibilities it holdsheld forin regards to the Participation Survey willwere soon be split between the refocussed Department for Culture, Media and Sport (DCMS) and the new Department for Science, Innovation and Technology (DSIT).

The mainsurvey responsibilityasks forquestions theon surveya willwide lierange withof thetopics refocussedrelating DCMS,to whoyour willengagement takein overculture, anymedia, rolessports, specifiedand todigital besectors undertaken(full bylist DCMShere). inWe thisalso privacycollect noticedemographic –data, theplease detailssee ofthe these“Sensitive rolesdata willcollection” remainsection thefor same.more Additionally,details.

The datamain mayresponsibility befor sharedthe withsurvey DSITwill wherelie andwith whenDCMS, appropriateas –specified DCMSin willthis ensureprivacy thatnotice. relevantAdditionally, pseudonymised data sharingwill agreementsbe areshared setwith upDSIT tothrough managea thisrelevant data sharing.sharing agreement.

By completing the survey, you acknowledge that your pseudonymised data maywill be shared with DSIT.

Please see the “Who will weDCMS share your data with?” Sectionsection for more detail abouton any potential data sharing with DSIT.sharing.

Who areis the Datadata Controllers?controller?

The Department for Culture, Media, and Sport (DCMS), is athe data controller of personal data provided by respondents to the Participation Survey.

The DCMS postal address is:

Department for Culture, Media and Sport,Sport
100 Parliament St,Street
Westminster,Westminster
London
SW1A 2BQ

You can contact DCMS’s Data Protection Officer by email at: at: dpo@dcms.gov.uk

Arts Council England (ACE) are also a controller of personal data provided by respondents to the Participation Survey.

ACE’s postal address is:
Arts Council England,
49 Lever St
Manchester,
M1 1FN.

ACE can be contacted by email at: participation.survey@artscouncil.org.uk

Who is the Datadata processor and sub processors?processor?

We use a third-party data processor, VerianVerian. . Verian administratesadministers the Participation Survey on our behalf and carries out statistical analyses of the survey results in accordance with our instructions. We have a contract in place with Verian. This means that they cannot do anything with your personal data unless we have instructed them to do it. Verian will not share your personal data with any organisation apart from DCMSDCMS, and ACE, except where we authorise them.

Verian’s postal address is:

Verian, Verian
4 Millbank,Millbank
Westminster,Westminster
London
SW1P 3JA

Email address for queries about the Participation Survey: participationsurvey@veriangroup.com.participationsurvey@veriangroup.com.

What is the legal basis for collecting and processing data?

DCMS is the government department responsible for delivering government policy on arts and culture, communications and media, sport, and tourism. Our activities are based on the exercise of executive and statutory powers.

DCMS has an obligation to compile and publish Official Statistics relating to the policy areas we cover. Publishing Official Statistics derived from the Participation Survey is intended to:

• inform the public about social and economic matters surrounding DCMS sectors
• assist in the development and evaluation of public policy, to refine and provide better services to the public
• regulate quality and inform changes to improve support for and development of DCMS sectors

DCMS’s legal basis for processing personal data on the Participation Survey is that it is necessary for the performance of a task in the public interest, as the information gathered helps DCMS to monitor the policies it oversees.

ACE is the national development agency for creativity and culture. ACE’s ten-year strategy, Let’s Create, sets out that by 2030 they want England to be a country in which the creativity of each of us is valued and given the chance to flourish and where everyone of us has access to a remarkable range of high-quality cultural experiences. They invest public money from the Government and The National Lottery to help support the sector and to deliver this vision.

ACE will use the data collected to monitor the impact of Let’s Create, as well as their current Delivery Plan, which sets out their intentions for the 2021-24 period. ACE will also use the data to better understand potential geographical gaps and explore barriers to engagement in arts and culture across England.

When Verian conducts surveys, their invitations/platforms and questionnaires clearly identify them and explain the purpose(s) of their contact and if applicable, the purpose for collecting your personal data. You may withdraw from participation in a survey at any time. If you do not wish to receive any further reminder mailings, you can either: call the survey helpline on 0800 904 7726 or email Verian at participationsurvey@veriangroup.com.

Please be ready to provide your reference number, address and postcode so we can opt you out of further communication.communication related to this survey. The reference number is located on the top of the letter.

When Verian havehas contacted you on behalf of DCMS and ACE by post or email, they have done so for the following purposes:

	Case		Purpose		Data collected/processedcollected or processed		Legal Basisbasis
	Inviting you to participate in surveys	To provide the opportunity for a representative sample of individuals to participate in surveyssurveys.	Postal address, email address	Legitimate interest.interests – Verian has a legitimate interest to contact a representative sample of individuals to invite them to participate in surveys.
	Surveys	To understand your views about certain productstopics and services or to understand your behaviour in different situations. To validate answers you gave in a recent survey Verian conducted. To administer participation e.g. prize draws, incentives, pre-tasks etc. To re-contact participants e.g. for ongoing and follow-up surveys.	Unique identifier, contact details, email address, image, opinion.opinion	Voluntary participation in a survey whereby Verian askasks for your consent to use your personal data.
Quality control	FraudTo Protectionvalidate the answers you gave in a recent survey we conducted.	Unique identifier, contact details, email address	Legitimate interests - Verian has a legitimate interest to contact a sample of individuals who participated in our surveys to validate their answers.
Fraud protection	Protection of our business interests against fraudulent behaviour.	IP addresses,address, browser specifications, device specifications, postal addresses,address, email addresses.address	Legitimate interests – Verian has a legitimate interest in protecting their business against fraud or other prohibited behaviour.
	Survey Participationparticipation Uniquenessuniqueness	Prevention of multiple entries in surveys by the same individuals.	IP address, browser specifications, device specifications.specifications	Legitimate interests – Verian has a legitimate interest in preventing multiple entries by the same individual.
	Managing survey opt-outs	When an individual has requested not to be contacted again in relation to the Participation Survey, Verian holdholds their details to enable this.	Name, address and telephone number	Legitimate interests – Verian has a legitimate interest to retain the information in order to fulfil the individual’s request.

Verian will never misrepresent themselves or what they are doing. If you receive an email that concerns you, purporting to be from Verian, please contact Verian at participationsurvey@veriangroup.com.

Verian have has contacted you to take part in a survey by post or online by randomly selecting your address through Royal Mail’s publicly accessible Postcode Address File (PAF).

Sensitive data collection

In our survey we may request to collect personal data that is classified as “special categories” of personal data. This includes racial or ethnic origin, political opinions, religious or philosophical beliefs, data concerning healthhealth, or data concerning a person’s natural sexual orientation. YouThis willinformation alwaysis beneeded ablefor research about equity and equality of engagement in culture, media, sports, and digital sectors. Our goal for gathering detailed demographic data is to choosehelp whetherDCMS orto monitor the policies it oversees, and to improve specificity in policy-making. Therefore, this is needed for reasons of substantial public interest for the exercise of the function of a Government department (DCMS). You can choose not to provide thisthat datainformation.

The survey will also ask for your consent to usbe re-contacted to participate in further research related to this survey. In order to recontact you, you will be usedasked asfor:

• Your described.name
• Your contact information, including phone number and email address

This information will be collected by Verian on behalf of DCMS.

You will always be able to choose whether or not to provide this data.

Who will Verian share your data with?

We have authorised Verian to share your personal data with:

• McLays (printing suppliers): address level information is provided to McLays to print survey invitations and questionnaires. Data is erased from their records after 30 days.
• Greens Ltd (scanning paper questionnaires): Paper questionnaires are returned to Greens Ltd. Questionnaires are stored securely for a maximum of 12 months and confidentially destroyed.
• Merit Incentives (“Merit”) (corporate incentive supplier): Signing up to receive an incentive through the Merit portal is optional. Merit will hold the personal data you provide them, such as your email address, for a maximum of two2 years in Europe. Merit hold this information in case of any issues you may have with your incentive.
• Bright Marketing Research (BMR) (data collection and processing partner): provides survey scripting, sample uploads, and data processing services for this research.

McLays, Greens LtdLtd, BMR, and Merit have contracts in place with Verian which prevent them from using your personal data except as instructed by Verian.

Will

Aside myfrom the four suppliers above, the only exceptions when Verian may disclose your personal data beor published?

survey responses to other third parties are:

We

• Where continuity of survey delivery may be interrupted. Such disclosure will publishoccur Officialunder Statisticsthe derivedcondition fromthat the Participationthird-party Surveyprocessor datais oncontractually gov.ukobliged to maintain confidentiality and use the information solely for their contracted purposes.
• In some circumstances Verian may be legally obliged to share information - for example under a court order.

Verian will alsonot share your information with any third parties for the purposes of direct marketing.

Will my data be publishingpublished?

DCMS statisticswill publish Official Statistics derived from the Participation Survey data on ACE’sgov.uk. website. The published information will not contain your name, address, telephone number or email address.

AnA anonymisedpseudonymised dataset containing answers from the survey will be available to researchers via an end user agreement licence or special licence on the UK data service, a national data service that provides research access to a range of social and economic data collections.

A controlled dataset will also be deposited in UK Data Service Secure Lab, which provideswhich provides approved researchers with controlled access to sensitive or confidential data, enabling researchers to access and use datasets in a secure and responsible way. This data set can only be accessed remotely via the Five Safes Framework by registered, approved (by DCMS) and trained users.

The deposited datasets will not contain your name, address, telephone number or email address.

Who will weDCMS share your data with?

Data may(for years 2021/22 to 2024/25) will be shared with DSIT, as part of the transition process. This data will not include information that can identify you, such as your name, address, telephone number or email address.

DCMS may share data collected in the Participation Survey with other government departments or the Office for National Statistics for research and statistical purposes. This data will not include information that can identify you, such as your name, address, telephone number or email address.

WeFrom willthe notdata shareDCMS yourshares information with anyother thirdorganisations, partiesit formay thestill purposesbe ofpossible directto marketing.identify Inindividuals someby circumstancescombining weseveral mayfields beof legallydata obligedtogether. toTherefore, shareDCMS informationviews -this fordata exampleas underbeing a court order.pseudonymised.

How long will we process your personal data?

Verian will retain your personal data for no longer than 18 months, unless otherwise required to do so by law or in the following cases, where they will retain the personal information for up to 2 years.

• Where you have agreed to be re-contacted by Verian to take part in further research related to this survey on behalf of the government or a charity
• Where you have agreed that your name and contact details and information from this survey can be passed on to another research agency so that they can contact you regarding follow up research

As part of Verian’s Company Business Continuity plan and as required by their ISO 27001, ISO 9001, ISO 20252 certificationscertifications, where held, and in certain instances the law, Verian Verian’s electronic systems are backed up and archived. These archives are retained for a defined period of time in a strictly controlled environment. Once expired, the data is securely deleted and the physical media destroyed to ensure the data is erased completely.

How will your personal data, including survey responses, be used?

Responding to this survey is entirely voluntary.

Verian will keep all personal data and responses in strict confidence in accordance with this Privacy Policy. We can assure you that you will NOT be identifiable in any published results.

VerianVerian, DCMS and other recipients of this data who have signed data sharing agreements will use allyour personal data and responses solely for research purposes and to produce anonymous, statistical research findings and insights.

Contact details and other information provided to the technical helpline will be used only for the purpose of dealing with the query raised.

Email addresses collectedare used to validate responses and for the purpose of sending details of how to claim an incentive will be used only to send this information and to validate responses.incentive.

How will we ensure your personal information is secure?

Verian has appropriate technological and organisational measures in place to protect your personal data and takes all reasonable steps to ensure your personal data is processed securely. All information you provide is stored in secure servers and environments. Unfortunately, no data transmission can be guaranteed to be 100% secure. As a result, while Verian strivestrives to protect your personal data, they cannot ensure or warrant the security of any information you transmit to Verian or from their online products or services, and you do so at your own risk. Once Verian receive receives your transmission, they will take reasonable steps to ensure their systems are secure.

All VerianVerian’s third-party contractors, site service providers and employees are contractually obliged to follow policies and procedures regarding confidentiality, security and privacy.

Verian adhereadheres to the following industry requirements:

• The UK GDPR, UK Data Protection Act 2018, the EU GDPR, and any subsequent legislation, which may be amended from time to time
• WeVerian followholds theMarket MRSResearch andSociety ESOMAR(MRS) professionalCompany CodesPartner of Conductcertification
• Verian holdfollows Marketthe ResearchMRS Societyand (MRS)ESOMAR Companyprofessional PartnerCodes Accreditationof Conduct

Your rights

To request access to personal data that Verian holdholds about you, please contact Verian at compliance@veriangroup.com or in writing to at:

Compliance Officer, Officer
4 Millbank, Westminster, London, Millbank
Westminster
London
SW1P 3JA.3JA

Email: Compliance@veriangroup.com.

When you make a request, you should indicate your survey identifier.

If you contact Verian using an email address or contact details for which they do not hold a record of, you will also need to provide a copy of a valid government issued or official identification (such as drivers licence or passport).

You have the following rights in relation to your personal data:

• Right to change your mind and to withdraw your consent
• Right to access your personal data
• Right to rectify your personal data
• Right to erase your personal data from our systems, unless wethis haveresults legitimatein interestDCMS reasonsor forDSIT continuingbeing unable to processundertake the informationanalyses required to perform their duties in the public interest
• Right to port your personal data (portability right)
• Right to restrict processing of your personal data
• Right to object to the processing of your personal data
• Right to not be discriminated against for exercising any of the rights available to you under applicable data protection laws

If necessary, Verian will notify any other parties such as suppliers or service providers who have been transferred your personal data of any changes made when you make a request. Note that while Verian communicates towith these third parties, theyVerian areis not responsible for the actions taken by these third parties to answer your request. You may be able to access your personal data held by these third parties and correct, amend or delete it where it is inaccurate.

Cookies

Cookies are small text files stored on your computer or device by a website that assigns a numerical user ID and stores certain information about your online browsing. They are used by web developers to help users navigate their websites efficiently and perform certain functions. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website’s server.

Verian dodoes not use cookies on standard online in-house surveys.surveys. However, Wherewhere cookies are required byfor athe partner’sfunctionality platform,of the platform of one of the partners involved in this iswork (for instance, Merit, our incentive partner), then this will be notified bythrough the platformpartner’s platform’s privacy notice/policy.notice.

As is true of most online surveys, Verian gathergathers certain information automatically and store it in survey data files. This information may include things like Internet Protocol address (IP address), browser type, Internet Service Provider (ISP); referring/exit pages, operating system and date/time stamp.

Verian useuses this automatically collected information to analyse trends such as browser usage and to administer the site, e.g.,for example, to optimise the survey experience depending on your browser type.

Where will data be held and processed?

Verian collectcollects and processprocesses personal data for the purposes described above, but do not share or sell your personal data to any third parties, unless it is required by law, or you have agreed otherwise.

Your personal data may be collected, stored, transferred or processed by companies or 3rd party service providers for survey-related purposes, such as data processing, and fulfilment of prize draws or other incentives both within and outside the UK and the EEA. All parties are contractually bound to keep any information they collect and disclose to Verian or, Verian collect collects and disclosediscloses to them, confidential and must protect it with security standards and practices that are equivalent to Verian Verian’s own. If your personal data has been transferred to, stored, or otherwise processed to a territory outside the UK or EEA (as applicable) and that territory has not been recognised as providing an adequate level of protection of personal data, Verian will put in place an appropriate legal safeguard. For exampleexample, this may include:

• using standard contractual clauses approved by the European Commission and other relevant authorities, authorities
• working with parties that have implemented binding corporate rules or other intra-group processes, processes
• obtaining your consent tofor the transfer of personal data,data where the transfer is necessary for the performance of a contract betweenwith Verian or where a contract was entered into on your behalf, or where the transfer is necessary to establish, exercise or defend legal claims.

Accuracy

Verian take takes all reasonable steps to keep your personal data accurate, complete, current and relevant, based on the most recent information provided to them. If you would like to update your personal data, please contact Verian.

We rely on you to help us keep your personal information accurate, complete and current by answering our questions honestlyhonestly. andYou you are responsible for ensuring that theVerian data controller (which may be us or - more often - our client) is notified of any updates or changes to your personal data.

Children’s data collection

Verian never knowingly invite children under the age of 16 years to participate in surveys without consent and participation in this survey is intended for those aged 16+ years.

Complaints

How can I contact DCMS about the Participation Survey and/or my personal data?

For general Participation survey enquiries please contact ParticipationSurvey@dcms.gov.uk.

For general information on how DCMS handles personal data, please read DCMS’s personal information charter. ForIf generalyou informationhave on how DSIT handles personal data, please read DSIT’s personal information charter.

For any data protection queries, pleasecomplaints, contact the DCMS Data Protection Officer mentioning the Participation Survey: dpo@dcms.gov.uk.

If you have any questions, complaints or if you’d like to exercise your data protection rights you can do so by contacting ourthe DCMS Data Protection Officer (DPO)(DPO), mentioning the Participation Survey, using the details below:

Data Protection Officer,Officer The
Department for Culture, Media &and Sport, Sport
100 Parliament Street, London, Street
London
SW1A 2BQ.2BQ

Email: dpo@dcms.gov.uk
Phone: 0800 202 4971 (free)

If you are not satisfied with how we handle and protect personal information, you have the right to complain to the Information Commissioner’s Office.

In the UK, this is the ICO and their contact details are
are:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel:Email: dpo@ico.org.uk
Phone: 0303 123 1113 (local rate)

Email: casework@ico.org.uk

Notification of material changes

We keep our privacy policy under regular review, and it may be amended from time to time. We will always have the most up-to-date policy on this web page. We will record when the policy was last revised.

Date created: 25/08/2125/08/2021
Last revised: 08/01/2403/04/2024