Purpose and lawful basis for processing
Our purpose for processing is to run a competition for the ICO Data Protection Officer of the Year award - we will assess the applications and pick a winner.
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator. We do not ask for any sensitive personal data.
What we need
The information we ask for is the information we need to assess the applications we receive, contact shortlisted nominees, publicise their work, and to pick a winner.
If you are nominating a DPO for consideration, you will submit your name and contact details along with information about the nominee in an online application form. This will include the nominees name and contact details as well as a statement about why you are nominating them.
You should ensure that the person you have nominated is aware that you are providing information about them and their work to the ICO, which will be publicised if they are shortlisted.
Why we need it
We need personal data of the person making the nomination so that we can contact them with any queries we might have. We need the personal data of the nominees to assess the applications, verify their role as a Data Protection Officer, contact them if they are shortlisted and publicise their work.
What we do with it
The applications will be assessed by an in house panel made up of senior management. We will contact shortlisted nominees to tell them that they have been shortlisted. We will also contact the person who nominated the shortlisted candidates to inform them that their nominee has been successful.
We will publish the information about the shortlisted nominees on our own website, including their name, organisation and why they were nominated.
Shortlisted candidates will be invited to our Data protection Practitioner Conference 2020 where the winner will be announced.
How long we keep it
We will retain applications for 12 months.
What are your rights?
As we process personal data in award nominations in our capacity as a regulator, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.
For more information on your rights, please see 'Your rights as an individual'.
Do we use any data processors?
We use Snap Surveys to gather information on our behalf - it will be clear if we are using Snap Surveys. Any data collected by Snap Surveys for ICO is stored on UK servers. You can read their Privacy Policy here.