1. Controller and Data Protection Officer
The House of Lords’ Controller is the Corporate Officer (Clerk of the Parliaments) whose address is the House of Lords, London SW1A 0PW. The Data Protection Officer is the Head of Information Compliance. The Data Protection Officer can be contacted at the above address, email: email@example.com or telephone: 0207 219 0100.
This notice relates to personal data processed by the House of Lords Administration. This notice does not apply to personal data in cases where individual members of the House are the controller of the data.
2. Personal data collected
When personal data are collected
- Corresponding with the House of Lords;
- You may give us your information when you send an enquiry through or website, or sign up to newsletters or alerts;
- We collect and process your personal information when you order publications from us, purchase items directly from us, or sign up to receive newsletters from us.
Types of personal data collected
The personal data we process about you may include your:
- name, address, occupation, email address, other personal contact details;
We process your personal data so we can:
- provide you with goods, facilities or services;
- support the functioning of Parliament;
- explain and promote the work of Parliament.
4. Legal bases
The legal bases allowing us to process your personal data are that it is necessary for us to do so for:
- performing a task carried out in the public interest (see article 6(1)(e)) which includes the exercise of a function of either House of Parliament;
- furthering our legitimate interests (see article 6(1)(f)), in particular, to publicise and promote publications in the House of Lords.
In some cases, we process your personal data because you have given your consent to allow us to do so (see articles 6(1)(a) and 9(2)(a) of the GDPR), for example when you sign up to receive our newsletters.
6. Who we share your personal data with
Where necessary, we may share personal data with:
- the House of Commons Service;
We may also share your data when permitted to do so or when there is a legal requirement to do so.
7. Transfer to third countries
Some personal data we control are held outside the UK. These data are predominantly held in data centres within the European Economic Area (EEA), for the purpose of hosting and maintenance. If personal data are transferred to third countries outside the EEA, the adequacy of the data protection regimes of those countries and organisations holding the data is assessed to ensure appropriate safeguards are in place.
8. How long we keep your data
We keep your personal data in accordance with our records disposal policy. The length of time we keep your personal data depends on the purpose of their collection and legal requirements.
The policy is published at: https://www.parliament.uk/documents/parliamentary-archives/ARDP_internet_2019_v1.8.1.pdf
9. Your rights
You have the right to:
- request rectification of
- request erasure of
- restrict the processing of
- object to the processing of
- data portability of
your personal data.
This is subject to the exceptions in the Data Protection Act 2018. Further information is available on the parliamentary website. https://www.parliament.uk/site-information/data-protection/lords-data-protection-information/
10. Right to withdraw consent
Where we have relied on consent to process personal data, you have the right to withdraw it at any time. To withdraw consent, please contact the Data Protection Officer at firstname.lastname@example.org or on 0207 219 0100
11. What if you do not provide your data?
There are certain circumstances where we rely on your personal data to facilitate services to you, whilst there is no obligation to provide your personal information it may affect the range of services you can access. For example, you have to provide us with certain contact details in order for us to provide you with newsletters or alerts about publications.
12. Right to complain
If you are unhappy with our use of your personal data, you should contact the Data Protection Officer in the first instance.
You also have the right to complain to the supervisory authority if you consider that the House Administration is in breach of its data protection obligations. The supervisory authority is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. https://ico.org.uk/
13. Email subscription services