1. Controller and Data Protection Officer

The House of Lords’ Controller is the Corporate Officer (Clerk of the Parliaments) whose address is the House of Lords, London SW1A 0PW. The Data Protection Officer is the Head of Information Compliance. The Data Protection Officer can be contacted at the above address, email: [email protected] or telephone: 0207 219 0100. 

This notice relates to personal data processed by the House of Lords Administration. This notice does not apply to personal data in cases where individual members of the House are the controller of the data. 

2. Personal data collected

When personal data are collected 

  • Corresponding with the House of Lords; 
  • You may give us your information when you contact us through the website, or sign up to newsletters or alerts;
  • We collect and process your personal information when you contact us through the website, or sign up to receive newsletters or alerts from us. 

Types of personal data collected 

The personal data we process about you may include your: 

  • name, address, occupation, email address, other personal contact details; 

3. Purpose

We process your personal data so we can: 

  • provide you with goods, facilities or services;
  • support the functioning of Parliament;
  • explain and promote the work of Parliament.

4. Legal bases

The legal bases allowing us to process your personal data are that it is necessary for us to do so for: 

  • performing a task carried out in the public interest (see article 6(1)(e)) which includes the exercise of a function of either House of Parliament;
  • furthering our legitimate interests (see article 6(1)(f)), in particular, to publicise and promote publications in the House of Lords.

5. Consent

In some cases, we process your personal data because you have given your consent to allow us to do so (see articles 6(1)(a) and 9(2)(a) of the GDPR), for example when you sign up to receive our newsletters or alerts. 

6. Who we share your personal data with

Where necessary, we may share personal data with: 

  • the House of Commons Service;

We may also share your data when permitted to do so or when there is a legal requirement to do so. 

7. Transfer to third countries 

Some personal data we control are held outside the UK. These data are predominantly held in data centres within the European Economic Area (EEA), for the purpose of hosting and maintenance. If personal data are transferred to third countries outside the EEA, the adequacy of the data protection regimes of those countries and organisations holding the data is assessed to ensure appropriate safeguards are in place. 

8. How long we keep your data

We keep your personal data in accordance with our records disposal policy. The length of time we keep your personal data depends on the purpose of their collection and legal requirements. 

The policy is published at: https://www.parliament.uk/globalassets/documents/parliamentary-archives/ardp_excel_v.2.5_reformatted.pdf

9. Your rights

You have the right to:

  • access
  • request rectification of
  • request erasure of
  • restrict the processing of
  • object to the processing of
  • data portability of

your personal data.

This is subject to the exceptions in the Data Protection Act 2018. Further information is available on the parliamentary website. https://www.parliament.uk/site-information/data-protection/lords-data-protection-information/

10. Right to withdraw consent

Where we have relied on consent to process personal data, you have the right to withdraw it at any time. To withdraw consent, please contact the Data Protection Officer at [email protected] or on 0207 219 0100 

11. What if you do not provide your data?

There are certain circumstances where we rely on your personal data to facilitate services to you, whilst there is no obligation to provide your personal information it may affect the range of services you can access. For example, you have to provide us with certain contact details in order for us to provide you with newsletters or alerts about publications. 

12. Right to complain

If you are unhappy with our use of your personal data, you should contact the Data Protection Officer in the first instance. 

You also have the right to complain to the supervisory authority if you consider that the House Administration is in breach of its data protection obligations. The supervisory authority is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. https://ico.org.uk/ 

13. Email subscription services

The email subscription service on the Lords Library website is operated through Mailchimp. Mailchimp has staff based outside the European Economic Area, and stores your data in the US. You can find out more about Mailchimp’s privacy policy information from its website. Detail on how we use your personal data for the provision of our email subscription service can be found in a separate privacy policy covering email subscription services on the UK Parliament website.

Mailchimp allows us to see how subscribers interact with our emails. For example, whether you open the emails, and which links you click on. This data is held in Mailchimp on a per user basis. Data stored by the Library outside of Mailchimp is aggregated and anonymised, for example records of subscriber numbers by user type over time.

If you choose to unsubscribe from the subscription services delivered through the Lords Library website, we will retain your user-specific data in Mailchimp (including for example your email address and subscription preferences, as well as data on how you have used our services) for a period of no longer than 30 days.

You can update your preferences or unsubscribe using the links at the bottom of each email alert you receive.

last updated 23 September 2021