For general information on how the Environment Agency and Defra group treats your personal data and how to contact us, see our Personal Information Charter: https://www.gov.uk/government/organisations/environment-agency/about/personal-information-charter
Why are we collecting personal data and what we will do with it?
We are collecting personal data in order for you to contribute to the forum, use the Partner Data Catalogue and the Data Services Platform. Depending on your data requirements this information will be used by the Environment Agency (EA) or members of the Defra group. These include the Animal and Plant Health Agency (APHA), Centre for Environment, Fisheries and Aquaculture Science (CEFAS), Department for Environment, Food and Rural Affairs (Defra), Forestry Commission (FC), Marine Management Organisation (MMO), Natural England (NE) and Rural Payments Agency (RPA).
OS (Ordnance Survey) will be collecting data from Farmers and Agents access, to monitor the use of their data, to determine whether breaches of Ts&Cs have occurred.
This will allow us to communicate directly with you, provide an interactive service, authenticate your registration and where relevant supply data offline.
By registering for an account you are confirming that you are over 13 years of age. If you are below the age of 13, you will need to have the consent of a parent or guardian.
The personal data we will need to collect in order for you to create an account are: username, email address and password.
Partner data catalogue:
The personal data we will need to collect in order for you to create an account are: name, email address, user type, organisation name and password.
Data services platform:
You do not need to register or provide any personal information in order the use the service or its associated APIs. However we will collect your IP address to allow us to identify you should a security incident occur.
You do not need to register or provide any personal information in order the use the service or its associated APIs. Any Information that you provide to us if you submit a query using our online enquiries form or if you contact our National Customer Contact Centre will be used to respond to your query. It may also be used to assess customer satisfaction with our service and improve our communications.
We are processing your personal data because you consent to us doing so. You have the right to withdraw consent at any time.
Failing to provide the information will mean you will not be able to contribute to the forum, use the partner catalogue or Data Services Platform.
Rural Payments Agency land parcels:
Farmers do not need to register to use the service, but we will collect your Single Business Identifier (SBI), along with your IP address, to allow us to identify which farmers are using the service.
We will also collect the business details of agents acting on behalf of farmers, so that we can ensure that agents are only using the service on behalf of their clients. The business data items we need are: business IP address, business name, address, and email address.
Sharing and transferring personal data
The personal data you provide will be held on the system provided by our IT supplier.
We may share your personal data with the Defra group in order to provide you with an adequate response.
We will not transfer the personal data that you provide outside the European Economic Area.
How long do we hold personal data for?
We will keep your personal data for as long as you are a registered user of the forum or partner catalogue. If the service or your account is no longer active it will be deleted alongside your personal data.
All login/logout activity on the Data Services Platform will be retained on-line for three months and off-line for a further twelve months.
Automated decision making and profiling
We will not use the information you provide for automated individual decision making (making a decision solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain things about an individual).
You have rights under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018). The Information Commissioner's Office (ICO) is the supervisory authority for data protection legislation.
The ICO website has a full list of your rights under data protection legislation, you can access this here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights
You have the right to lodge a complaint with the ICO at any time. Should you wish to exercise that right full details are available at: https://ico.org.uk/make-a-complaint