Privacy Notice
Privacy Notice for collecting personal data at the Business Wales Expo 2025-2026.
Business Wales has commissioned Production 78 to undertake the organisation of the Business Wales Expo 2025-2026. As part of this Expo, Production 78 will gather personal data on behalf of Business Wales.
Lawful basis for processing
The Welsh Government will be the data controller for any personal data you have provided in relation to the Business Wales Expo 2025-2026. The information will be processed by Business Wales, a support Service fully funded by the Welsh Government, as part of our public task and the official authority vested in us to undertake the core role and functions of the Welsh Government.
What personal data we will collect and process
Personal data is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.
For the Business Wales Expo 2025-2026, the following personal data will be collected by Production 78 on behalf of Business Wales:
Name
Contact number
Business email address
Business Address
How we keep your data secure
Personal data provided to Production 78 is held on secure servers and for this Business Wales Expo, when your personal data is shared with Business Wales, it will also be stored on secure servers and restricted to the relevant staff members.
The Welsh Government has procedures to deal with any suspected data security breaches. If a suspected breach occurs, the Welsh Government will notify you and any applicable regulator where we are legally required to do so.
Who will have access to your data
Production 78 and Business Wales.
Production 78 and Business Wales support service teams and its system technical administrators who support the IT system may have access to your data however system technical administrators will not use your details in any way.
Your contact details may be used for evaluation purposes after the event by Business Wales. Participation is completely voluntary, however, we really appreciate your feedback since your views and experiences are important to inform organisational improvement.
How long your details are kept for
Attendee accounts will remain active on Production 78’s platform for 6 months to enable follow up and buyer engagement if required. Attendee personal data will then be deleted after that period from Production 78 servers within 6 weeks.
Business Wales will obtain written confirmation from Production 78 that the data has been deleted.
Your personal data will be retained on Business Wales secure IT systems for a minimum of 10 years in line with the Business Wales retention policy after which time it will be securely destroyed. We may delete the information sooner if it is no longer being used.
Your individual rights
Under data protection legislation, you have the right:
to be informed of the personal data Welsh Government holds about you and to access it
to require us to rectify inaccuracies in that data
to (in certain circumstances) object to or restrict processing
for (in certain circumstances) your data to be ‘erased’
to (in certain circumstances) data portability
to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.
Should you have any queries regarding this privacy notice please contact info@production78.co.uk
For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights using the UK General Data Protection Regulation, please contact:
Data Protection Officer
Welsh Government
Cathays Park
Cardiff
CF10 3NQ
Email: dataprotectionofficer@gov.wales
The contact details for the Information Commissioner’s Office are:
Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

